-
Introduction
At SecondRx.in ("we," "us," or "our"), we are dedicated to safeguarding the privacy of our users ("you" or "your"). This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you interact with our website and services. By using SecondRx.in, you agree to the practices detailed in this Privacy Policy.
This policy applies to all users of our Services, including:
- Patients ("End-Users"): Individuals seeking medical consultations.
- Medical Practitioners ("Practitioners"): Healthcare professionals providing consultations through our platform.
- Website Visitors: Anyone browsing our site.
This Privacy Policy ("Privacy Policy") is created to show our commitment to protect your privacy and personal information. It describe the collection, usage, sharing, disclosure and protection of personal information about the User of the services. Your usage and access to the services is subject to this Privacy Policy and Terms of Use / Terms and Conditions. Any capitalized terms used but not defined in this Privacy Policy shall have the meaning attributed to it in our Terms of Use / Terms and Conditions. The Terms of Use can be accessed here: click here
Why This Privacy Policy?
We've published this Privacy Policy in compliance with:
- Section 43A of the Information Technology Act, 2000.
- Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (the "SPI Rules").
- Regulation 3(1) of the Information Technology (Intermediaries Guidelines) Rules, 2011.
-
Information We Collect
We gather the following categories of information:
- Personal Information: Information that identifies you, such as your name, email address, phone number, date of birth, gender, location, address, and insurance details.
- Health Information: Information you provide about your medical history, or any other information shared during consultations with Practitioners. This includes symptoms, diagnoses, treatments, medications, allergies, diagnostic images, prescriptions and medical reports.
- Usage Data: Information about how you use our Services, including your IP address, browser type, device details, pages visited, and interactions on our platform.
- Cookies and Tracking Technologies: We use cookies and similar technologies to track your browsing activity and preferences.
Collection of Personal Information in Detail Generally, some of the Services require us to know who you are so that we can meet your needs. When you access the Services, or through any interaction with us via emails, telephone calls or other correspondence, we may ask you to voluntarily provide us with certain information that personally identifies you or could be used to personally identify you. You hereby consent to the collection of such information by SecondRx. Without prejudice to the generality of the above, information collected by us from you may include (but is not limited to) the following:
- contact data (such as your email address and phone number);
- medical history, lab reports, details of the treatment undergone etc.
- demographic data (such as your gender, your date of birth and your pin code);
- data regarding your usage of the services and history of the appointments made by or with you through the use of Services;
- insurance data (such as your insurance carrier and insurance plan);
- other information that you voluntarily choose to provide to us (such as information shared by you with us through emails or letters) including any images and other documents/files.
- data shared by the Practitioners pertaining to the treatment availed by you.
The information collected from you by SecondRx may constitute 'personal information' or 'sensitive personal data or information' under the SPI Rules.
"Personal Information" is defined under the SPI Rules to mean any information that relates to a natural person, which, either directly or indirectly, in combination with other information available or likely to be available to a body corporate, is capable of identifying such person.
The SPI Rules further define "Sensitive Personal Data or Information" of a person to mean personal information about that person relating to:
- passwords;
- financial information such as bank accounts, credit and debit card details or other payment instrument details;
- physical, physiological and mental health condition;
- sexual orientation;
- medical records and history;
- biometric information;
- information received by body corporate under lawful contract or otherwise;
- visitor details as provided at the time of registration or thereafter; and
- call data records.
SecondRx will be free to use, collect and disclose information that is freely available in the public domain without your consent.
-
How We Use Your Information (Privacy Statements for All Users)
This section is applicable to all Users.
- A condition of each user's use and access to the services is their acceptance of the Terms of Use, which also involves acceptance of the terms of his Privacy Policy. Any User that does not agree with any provisions of the same has the option to discontinue the Services provided by SecondRx immediately.
- An indicative list of information that SecondRx may require you to provide to enable your use of the Services is provided in the Schedule below to this Privacy Policy.
-
All the information provided to SecondRx by a User, including Personal Information or any Sensitive Personal Data or Information, is voluntary. You understand that SecondRx may use certain information of yours, which has been designated as Personal Information or 'Sensitive Personal Data or Information' under the SPI Rules, (a) for the purpose of providing you the Services, (b) for commercial purposes and in an aggregated or non-personally identifiable form for research, statistical analysis and business intelligence purposes, (c) for sale or transfer of such research, statistical or intelligence data in an aggregated or non-personally identifiable form to third parties and affiliates (d) for communication purpose so as to provide You a better way of booking consultation appointments and for obtaining feedback in relation to the Practitioners and their practice, (e) debugging customer support related issues, (f) for the purpose of contacting you to complete any transaction if you do not complete a transaction after having provided us with your contact information in the course of completing such steps that are designed for completion of the transaction. SecondRx also reserves the right to use information provided by or about the End-User for the following purposes:
- Identifying You.
- Publishing such information on the Website.
- Contacting End-Users for offering new products or services.
- Contacting End-Users for taking product and Service feedback.
- Analyzing software usage patterns for improving product design and utility.
- Analyzing anonymized practice information for commercial use.
- Processing payment instructions including those through independent third party service providers such as payment gateways, banking and financial institutions, pre-paid instrument and wallet providers for processing of payment transaction or deferral of payment facilities.
By accessing and using the Website and/or verifying your contact number with SecondRx, You have explicitly consented to receive all above stated communications (through call, SMS, email or other digital and electronic means) from SecondRx and/or its authorized representatives, even if your contact number is registered under the DND / NCPR list under the Telecom Commercial Communications Customer Preference Regulations, 2018. For this purpose, the required information may be shared with third-party service providers or any affiliates, group companies, and their authorized agents.
- Collection, use and disclosure of information which has been designated as Personal Information or Sensitive Personal Data or Information' under the SPI Rules requires your express consent. By affirming your assent to this Privacy Policy, you provide your consent to such use, collection and disclosure as required under applicable law.
- SecondRx does not control or endorse the content, messages or information found in any Services and, therefore, SecondRx specifically disclaims any liability with regard to the Services and any actions resulting from your participation in any Services, and you agree that you waive any claims against SecondRx relating to same, and to the extent such waiver may be ineffective, you agree to release any claims against SecondRx relating to the same.
- You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information provided as part of account registration and/or medical information. If your personal information changes, you may correct, delete inaccuracies, or amend information by making the change on our member information page or by contacting us through [admin@secondrx.in]. We will make good faith efforts to make requested changes in our then active databases as soon as reasonably practicable. If you provide any information that is untrue, inaccurate, out of date or incomplete (or becomes untrue, inaccurate, out of date or incomplete), or SecondRx has reasonable grounds to suspect that the information provided by you is untrue, inaccurate, out of date or incomplete, SecondRx may, at its sole discretion, discontinue the provision of the Services to you. There may be circumstances where SecondRx will not correct, delete or update your Personal Data, including (a) where the Personal Data is opinion data that is kept solely for evaluative purpose; and (b) the Personal Data is in documents related to a prosecution if all proceedings relating to the prosecution have not been completed.
- If you wish to cancel your account or request that we no longer use your information to provide you Services, contact us through [admin@secondrx.in]. We will retain your information for as long as your account with the Services is active and as needed to provide you the Services. We shall not retain such information for longer than is required for the purposes for which the information may lawfully be used or is otherwise required under any other law for the time being in force. After a period of time, your data may be anonymized and aggregated, and then may be held by us as long as necessary for us to provide our Services effectively, but our use of the anonymized data will be solely for analytic purposes. Please note that your withdrawal of consent, or cancellation of account may result in SecondRx being unable to provide you with its Services or to terminate any existing relationship SecondRx may have with you.
- If you wish to opt-out of receiving non-essential communications such as promotional and marketing-related information regarding the Services, please send us an email at [admin@secondrx.in].
- SecondRx may require the User to pay with a credit card, wire transfer, debit card or cheque for Services for which subscription amount(s) is/are payable. SecondRx will collect such User's credit card number and/or other financial institution information such as bank account numbers and will use that information for the billing and payment processes, including but not limited to the use and disclosure of such credit card number and information to third parties as necessary to complete such billing operation. Verification of credit information, however, is accomplished solely by the User through the authentication process. User's credit-card/debit card details are transacted upon secure sites of approved payment gateways which are digitally under encryption, thereby providing the highest possible degree of care as per current technology. However, SecondRx provides you an option not to save your payment details. User is advised, however, that internet technology is not full proof safe and User should exercise discretion on using the same.
- Due to the communications standards on the Internet, when a User or the End-User or anyone who visits the Website, SecondRx automatically receives the URL of the site from which anyone visits. SecondRx also receives the Internet Protocol (IP) address of each User's computer (or the proxy server a User used to access the World Wide Web), User's computer operating system and type of web browser the User is using, email patterns, as well as the name of User's ISP. This information is used to analyze overall trends to help SecondRx improve its Service. The linkage between User's IP address and User's personally identifiable information is not shared with or disclosed to third parties. Notwithstanding the above, SecondRx may share and/or disclose aggregate findings (not the specific data) in anonymized form (i.e., non-personally identifiable) with advertisers, sponsors, investors, strategic partners, and others in order to help grow its business.
- The Website uses temporary cookies to store certain (that is not sensitive personal data or information) that is used by SecondRx and its service providers for the technical administration of the Website, research and development, and for User administration. In the course of serving advertisements or optimizing services to its Users, SecondRx may allow authorized third parties to place or recognize a unique cookie on the User's browser. The cookies however, do not store any Personal Information of the User. You may adjust your internet browser to disable cookies. If cookies are disabled you may still use the Website, but the Website may be limited in the use of some of the features.
- A User may have limited access to the Website without creating an account on the Website. In order to have access to all the features and benefits on our Website, a User must first create an account on our Website. To create an account, a User is required to provide the following information, which such User recognizes and expressly acknowledges is Personal Information allowing others, including SecondRx, to identify the User: name, User ID, email address, country, ZIP/postal code, age, phone number, password chosen by the User and valid financial account information. Other information requested on the registration page, including the ability to receive promotional offers from SecondRx, is optional. SecondRx may, in future, include other optional requests for information from the User to help SecondRx to customize the Website to deliver personalized information to the User.
- SecondRx does not exercise control over the sites displayed as search results or links from within its Services. These other sites may place their own cookies or other files on the User's computer, collect data or solicit personal information from the Users, for which SecondRx is not responsible or liable. Accordingly, SecondRx does not make any representations concerning the privacy practices or policies of such third parties or terms of use of such websites, nor does SecondRx guarantee the accuracy, integrity, or quality of the information, data, text, software, sound, photographs, graphics, videos, messages or other materials available on such websites. The inclusion or exclusion does not imply any endorsement by SecondRx of the website, the website's provider, or the information on the website. If you decide to visit a third party website linked to the Website, you do this entirely at your own risk. SecondRx encourages the User to read the privacy policies of that website.
- The Website may enable User to communicate with other Users or to post information to be accessed by others, whereupon other Users may collect such data. Such Users, including any moderators or administrators, are not authorized SecondRx representatives or agents, and their opinions or statements do not necessarily reflect those of SecondRx, and they are not authorized to bind SecondRx to any contract. SecondRx hereby expressly disclaims any liability for any reliance or misuse of such information that is made available by Users or visitors in such a manner.
- SecondRx does not collect information about the visitors of the Website from other sources, such as public records or bodies, or private organisations, save and except for the purposes of registration of the Users (the collection, use, storage and disclosure of which each End User must agree to under the Terms of Use in order for SecondRx to effectively render the Services).
- SecondRx maintains a strict "No-Spam" policy, which means that SecondRx does not intend to sell, rent or otherwise give your e-mail address to a third party without your consent.
- SecondRx has implemented best international market practices and security policies, rules and technical measures to protect the personal data that it has under its control from unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss. However, for any data loss or theft due to unauthorized access to the User's electronic devices through which the User avails the Services and/or otherwise, SecondRx shall not be held liable for any loss whatsoever incurred by the User.
- SecondRx implements reasonable security practices and procedures and has a comprehensive documented information security programme and information security policies that contain managerial, technical, operational and physical security control measures that are commensurate with respect to the information being collected and the nature of SecondRx's business.
- SecondRx takes your right to privacy very seriously and other than as specifically stated in this Privacy Policy, will only disclose your Personal Information in the event it is required to do so by law, rule, regulation, law enforcement agency, governmental official, legal authority or similar requirements or when SecondRx, in its sole discretion, deems it necessary in order to protect its rights or the rights of others, to prevent harm to persons or property, to fight fraud and credit risk, or to enforce or apply the Terms of Use.
Specifically, we use your information for the following:
- Providing and Improving Services: Delivering our core services, facilitating consultations, and enhancing user experience.
- Communication: Contacting you regarding appointments, updates, and service-related matters. We may also send you promotional materials, but you can opt-out (see Section __).
- Legal Compliance: Meeting legal and regulatory obligations.
- Facilitate Payment Processing the payments for the services availed.
-
Information Sharing and Disclosure
We may share your information in the following circumstances:
- With Practitioners: We share relevant information with the Practitioners you consult with to enable them to provide healthcare services.
- With Third-Party Service Providers: We may use trusted third-party service providers to assist us in operating our website and providing services (e.g., payment processing, data storage, customer support). These providers are obligated to protect your information.
- Legal Authorities: We may disclose your information if required by law, legal process, or government request.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal information.
- Affiliates: We may share the information collected with our affiliates or group companies for the purposes mentioned under this Privacy Policy.
-
Data Security
We implement reasonable security measures, including administrative, technical, and physical safeguards, to protect your information from unauthorized access, use, disclosure, alteration, or destruction. However, no internet transmission or data storage method is 100% secure.
-
Your Privacy Rights
You have the following rights regarding your personal information:
- Access: You can request access to the personal information we hold about you.
- Correction: You can request corrections to any inaccurate or incomplete personal information.
- Deletion: You can request that we delete your personal information, subject to certain legal exceptions (e.g., we may need to retain certain records for legal compliance).
- Objection to Processing: You have the right, under certain circumstances described by law, to object to our processing of your personal data.
- Data Portability: In some cases, you may have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.
To exercise these rights, please contact us at [admin@secondrx.in]. We will respond to your request within a reasonable timeframe, and in accordance with applicable law. We may need to verify your identity before fulfilling your request.
-
Confidentiality and Security
- Your Personal Information is maintained by SecondRx in electronic form on its equipment, on the equipment of its employees and on the equipment of the Medical Consultant. Such information may also be converted to physical form from time to time. SecondRx takes all necessary precautions to protect your personal information both online and off-line, and implements reasonable security practices and measures including certain managerial, technical, operational and physical security control measures that are commensurate with respect to the information being collected and the nature of SecondRx’s business.
- No administrator at SecondRx will have knowledge of your password. It is important for you to protect against unauthorized access to your password, your computer and your mobile phone. Be sure to log off from the Website when finished. SecondRx does not undertake any liability for any unauthorised use of your account and password. If you suspect any unauthorized use of your account, you must immediately notify SecondRx by sending an email to [admin@secondrx.in]. You shall be liable to indemnify SecondRx due to any loss suffered by it due to such unauthorized use of your account and password.
- SecondRx makes all User information accessible to its Medical Consultants, employees, agents or partners and third parties only on a need-to-know basis, and binds only its employees to strict confidentiality obligations.
- Part of the functionality of SecondRx is assisting the Medical Consultant to provide their Services using User information. SecondRx may, therefore, retain and submit all such records to the appropriate authorities, or Medical Consultant, or to doctors who request access to such information.
- Part of the functionality of the SecondRx is assisting the patients to access information relating to them. SecondRx may, therefore, retain and submit all such records to the relevant patients, or to their Medical Consultant.
- Notwithstanding the above, SecondRx is not responsible for the confidentiality, security or distribution of your Personal Information by our partners and third parties outside the scope of our agreement with such partners and third parties. Further, SecondRx shall not be responsible for any breach of security or for any actions of any third parties or events that are beyond the reasonable control of SecondRx including but not limited to, acts of government, computer hacking, unauthorised access to computer data and storage device, computer crashes, breach of security and encryption, poor quality of Internet service or telephone service of the User etc.
-
Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of any significant changes by posting a notice on our website or by sending you an email. Your continued use of our Services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy regularly. If a User uses the Services or accesses the Website after a notice of changes has been sent to such User or published on the Website, such User hereby provides his/her/its consent to the changed terms.
-
Children's and Minor's Privacy
SecondRx strongly encourages parents and guardians to supervise the online activities of their minor children. Although the SecondRx Website and Services are not intended for use by minors, SecondRx respects the privacy of minors who may inadvertently use the internet or the mobile application. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us, and we will take steps to delete such information.
-
Consent to This Policy
You acknowledge that this Privacy Policy is a part of the Terms of Use/ Terms and Conditions of the Website and the other Services, and you unconditionally agree that becoming a User of the Website and its Services signifies your (i) assent to this Privacy Policy, and (ii) consent to SecondRx using, collecting, processing and/or disclosing your Personal Information in the manner and for the purposes set out in this Privacy Policy. Your visit to the Website and use of the Services is subject to this Privacy Policy and the Terms of Use/Terms and Conditions.
-
Contact Us/Data Protection Officer
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact our Data Protection Officer:
- Address: 206, Resource Workspaces, 2nd Floor, Ujagar Chambers, CSM Chowk, MBPT Colony, Opposite Deonar Bus Depot, Chembur, Mumbai, Maharashtra - 400080
- Email: admin@secondrx.in
We will make reasonable efforts to respond promptly to any requests, questions, or concerns.
-
Schedule - Indicative List of Information by Nature of Service
All Users creating an account on the Website or SecondRx mobile application:
- You provide information such as your [name, mobile number, email address], and other details requested on the user registration page. This enables us to provide you with account access to book consultations and obtain reports from our Medical Consultants.
- When you choose the option to connect with the medical practitioner using SecondRx Platform via ChatBot, You consent to share your information with the medical practitioner.
- The records of such conversation shall be stored in SecondRx’s server. Such conversation through SecondRx ChatBot will have an IVR message stating the purpose of recording your calls and your consent to such recordings which are dealt with as per the Privacy Policy. If you choose not to consent to recording of such call, SecondRx hereby reserves the right to not provide you the Services for which such Personal Information is sought. Such records are dealt with only in accordance with this Privacy Policy.