Last Updated: 12th August, 2024

At Zilo Care ("Platform"), we prioritize your privacy and are committed to protecting your personal and health information. This Privacy Policy describes how we collect, use, disclose, and safeguard your data when you use our Platform, which includes features for online appointment scheduling, website management for doctors, Google My Business integration, digital records management, automated communication, and more. By using our Platform, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We gather various types of information to provide, personalize, and improve our services:

1.1 Personal Information

• Identity Details: Your name, mobile number, email address, date of birth, and other identifying information provided during registration or interaction with our Platform.
• Images, Videos & Medical Data: Photos or videos or medical data captured via your device’s camera for profile setup, medical consultations, and other Platform-related activities.
• Files: Documents and other files you upload or access through the Platform, such as medical records, prescriptions, or identity proofs.

1.2 Health Information

• Medical History: Details of your past medical conditions, treatments, and ongoing health issues.
• Digital Medications: Information about prescribed medications, including dosage and administration details.
• Medical Records: Digital records of symptoms, lab investigations, diagnoses, and treatments entered by you or healthcare providers.
• Prescriptions: Electronic prescriptions issued by healthcare providers through our Platform.
• Follow-Up Reminders: Automated reminders for follow-up consultations based on your medical history and upcoming appointment schedules.

1.3 Website and App Data

• Website Content: Information related to the content, media, and FAQs you manage or upload through our Platform.
• Appointment Scheduling: Details of online and physical appointment bookings, including date, time, and healthcare provider.
• Patient Records: Access and management of your medical health records, appointment history, and consultation details.
• Patient Interaction: Data from interactions with our patient app, such as searching for doctors, booking consultations, and customer support requests.

1.4 Google My Business Integration

• Business Data: Information related to your Google My Business listing, including business hours, location, reviews, and other relevant details used for optimizing your online presence.

1.5 Payment Information

• Transaction Details: Credit/debit card information, UPI ID, or bank account details are collected for processing payments and managing billing.

1.6 Usage Data

• Platform Interactions: Data on how you access and use our Platform, including browsing behavior, page views, and feature usage.

2. How We Use Your Information

We use your information for the following purposes:

2.1 Service Provision

• Doctor Websites: To create and manage personalized websites for doctors, including content and media management.
• Appointment Management: To facilitate online scheduling, manage digital tokens, and handle appointment logistics through our app and WhatsApp bot.
• Health Records Management: To maintain and update digital medical records, manage prescriptions, and support follow-up consultations.

2.2 Communication

• Automated Reminders: To send appointment reminders and follow-up notifications via WhatsApp, SMS, and email.
• Feedback Requests: To solicit feedback from patients after consultations using automated communication channels.

2.3 Personalization and Improvement

• Service Enhancement: To analyze usage data and feedback for improving Platform features, user experience, and service quality.
• Customized Recommendations: To offer tailored recommendations based on your interactions and preferences.

2.4 Payment Processing

• Transaction Management: To process payments for services, handle billing inquiries, and manage financial transactions securely.

2.5 Compliance and Legal Obligations

• Regulatory Compliance: To ensure adherence to legal and regulatory requirements, including those related to data protection and healthcare regulations in India.
• Enforcement: To enforce our Terms & Conditions and other policies.

2.6 ABHA Integration

• Health Records & Management: To integrate with the Ayushman Bharat Health Account (ABHA) system for user registration and record management.
• Health ID: When you register for ABHA through our Platform, we collect your personal information including name, date of birth, gender, Aadhar number, and contact details to generate your Health ID.
• Medical Records: With your consent, we collect and store medical records, prescriptions, lab results, and other health data linked to your Health ID for easy access and sharing with healthcare providers.
• Authentication Details: We may collect your Aadhaar number for identity verification as required by the ABHA system.

Data Storage:

• Secure Storage: All data related to ABHA is stored securely in compliance with the data protection regulations outlined by NDHM. We use encryption and other security measures to protect your health data from unauthorized access.
• Data Access: Access to your ABHA-linked data is restricted to authorized personnel and healthcare providers. You have control over who can view or access your health records
• Data Retention: Your health data is retained for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by Indian law. Once the retention period ends, we securely delete or anonymize your data.

Data Sharing:

• Healthcare Providers: Your ABHA-linked health data may be shared with healthcare providers during consultations or treatments. Providers can access your data with your consent to offer personalized and accurate healthcare services.
• NDHM Compliance: We comply with the NDHM's guidelines for data sharing and privacy, ensuring that your health data is only shared in accordance with your preferences and legal requirements.

User Rights:

• Access and Control: You have the right to access and control your health data linked to your ABHA. This includes viewing, downloading, or sharing your medical records through our Platform.
• Consent Withdrawal: You can withdraw your consent to share your health data at any time. However, this may impact the ability of healthcare providers to offer personalized care.

2.7 Patient App Features

• Doctor Search and Booking: To facilitate adding doctors, searching for healthcare providers, and booking consultations through the patient app.
• Medical Records Access: To allow patients to access and manage their medical health records and appointment history.
• Customer Support: To provide support and assistance through the app, including ABHA registration for users.

3. Camera and File Access Permissions

3.1 Camera Access

• Profile and Consultations: With your permission, we use your device’s camera to capture images or videos for profile setup, medical consultations, pulse-rate tracking, and other necessary functions.
• Verification: For identity verification and document submission, where applicable.

3.2 File Access

• Document Upload: We access files on your device to facilitate the upload of medical records, prescriptions, and other documents to the Platform.
• Data Management: For managing patient records and supporting Platform functionalities.

4. How We Share Your Information

4.1 Healthcare Providers

• Consultations: Health information may be shared with healthcare providers for consultations, diagnosis, and treatment purposes.

4.2 Service Providers

• Operational Support: We may share your information with third-party service providers who assist in operating the Platform, processing payments, and other business functions. These providers are required to adhere to our Privacy Policy and applicable laws.

4.3 Google My Business Integration

• Business Data Sharing: Information related to your Google My Business listing may be shared with Google for optimization and management purposes.

4.4 Legal Requirements

• Regulatory Compliance: We may disclose your information to comply with legal obligations or in response to lawful requests from public authorities, such as courts or government agencies.

5. Data Security

We implement comprehensive security measures to protect your personal, health, and business data:

• Technical Measures: Use of encryption, secure servers, and other technologies to protect data during transmission and storage.
• Organizational Measures: Access controls, employee training, and regular audits to ensure data security and compliance with privacy practices.
• Camera and File Security: Special measures to protect data captured through camera access and files uploaded or accessed on the Platform.

Despite these measures, no system is completely secure. We strive to protect your information but cannot guarantee absolute security against unauthorized access or data breaches.

6. Your Rights

Under Indian data protection laws, you have the following rights:

6.1 Access

• Information Request: You can request access to the personal, health, and business information we hold about you.

6.2 Correction

• Update Request: You have the right to request correction of any inaccurate or incomplete information.

6.3 Deletion

• Data Removal: You can request the deletion of your personal, health, and business information, subject to legal and contractual obligations.

6.4 Consent Withdrawal

• Processing Activites: If data processing is based on your consent, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, please contact us at support@zilo.care. We will address your requests in accordance with applicable Indian laws and regulations.

7. Retention of Information

We retain your information as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements:

• Service Provision: For the duration necessary to provide and manage our services.
• Complaince: For compliance with legal, regulatory, and contractual obligations.
• Data Deletion: Once the retention period ends, we securely delete or anonymize your information to prevent unauthorized access or use.

8. Cookies and Tracking Technologies

Our Platform uses cookies and similar tracking technologies:

8.1 Types of Cookies

• Session Cookies: Temporary cookies that expire when you close your browser.
• Persistent Cookies: Cookies that remain on your device for a set period or until deleted.

8.2 Purpose

• Functionality: To remember your preferences, activities and settings.
• Analytics: To collect and analyze usage data to improve Platform functionality and user experience.

8.3 Managing Cookies

• Browser Settings: You can manage or disable cookies through your browser settings. Note that disabling cookies may affect the functionality of the Platform and limit your ability to use certain features.

9. Children's Privacy

Our Platform is not intended for individuals under 18 years of age:

• Data Collection: We do not knowingly collect personal information from children under 18.
• Parental Rights: If you believe your child has provided us with personal information, please contact us. We will take steps to delete such information promptly.

10. International Data Transfers

Our Platform is primarily intended for users in India:

• Data Transfers: If it becomes necessary to transfer your data outside India, we ensure that such transfers comply with data protection laws and that adequate protection measures are in place to safeguard your information.

11. Third-Party Links

The Platform may contain links to third-party websites or services:

• Responsibility: We are not responsible for the content, privacy policies, or practices of these third parties.
• Review: We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page, and the "Last Updated" date will be revised. Your continued use of the Platform after changes indicates acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us at: support@zilo.care