Privacy Policy

1. Information We Collect

1.1 Personal Information

• Full name, age/date of birth, gender, contact number, and email address
• Residential or billing address and pin code
• Government-issued identification details, where required for verification

1.2 Health and Sensitive Personal Information

• Blood sample data and laboratory test results generated through OncoVeryx™
• Medical history, prior diagnoses, or clinical notes voluntarily shared by you or your referring physician
• Genetic, biomarker, and metabolomic data derived from your blood sample for the purpose of multi-cancer screening

1.3 Payment Information

• Payment is processed through Razorpay, our third-party payment gateway partner
• We do not store your card numbers, CVV, UPI PIN, or net-banking credentials on our servers; these are collected and processed directly by Razorpay in accordance with applicable RBI and PCI-DSS data security standards
• We retain only transaction identifiers, order references, payment status, and billing amounts necessary for invoicing, accounting, and customer support

1.4 Technical and Usage Information

• IP address, browser type, device identifiers, and operating system
• Pages visited, time spent, referral source, and clickstream data collected via cookies and similar technologies

2. How We Use Your Information

• To schedule, collect samples for, process, and deliver results of your OncoVeryx™ test
• To verify your identity and prevent fraud in connection with bookings and payments
• To process payments and refund-ineligible transactions through Razorpay and reconcile billing records
• To communicate appointment confirmations, rescheduling options, reports, and service-related updates via SMS, WhatsApp, email, or phone
• To improve our website, diagnostic algorithms, and customer experience
• To comply with applicable laws, regulatory directions, and lawful requests from government or judicial authorities
• To send promotional or informational communications, where you have opted in, and which you may opt out of at any time

3. Sharing and Disclosure of Information

We do not sell your personal or health information. We may share information only in the following circumstances:

• With Razorpay, solely to process payments, in accordance with Razorpay's own privacy policy and security standards
• With our internal phlebotomy, laboratory, and clinical teams strictly on a need-to-know basis to deliver the Service
• With logistics or courier partners where physical sample pickup is involved
• With regulators, law enforcement, or courts where disclosure is required under applicable law
• With your treating physician or healthcare provider, where you have explicitly authorised such sharing
• With professional advisors (auditors, legal counsel) under confidentiality obligations

4. Data Security

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of health data, including encrypted data transmission, restricted access controls, and secure storage of laboratory records, consistent with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and, where applicable, the Digital Personal Data Protection Act, 2023 (DPDP Act). Despite these measures, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Data Retention

We retain personal and health information for as long as necessary to fulfil the purposes outlined in this Policy, including providing test results, responding to queries, complying with medical record-keeping obligations under Indian law, and resolving disputes. Payment transaction records are retained in accordance with statutory accounting and tax requirements.

6. Your Rights

• Access and review the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent for marketing communications at any time
• Request deletion of your personal data, subject to our legal and regulatory retention obligations (including retention of diagnostic records as may be mandated by applicable healthcare regulations)

To exercise these rights, please contact us using the details in the “Contact Us” section below.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enable core site functionality, remember preferences, and analyse traffic. You may disable cookies through your browser settings; however, some features of the website, including booking and payment, may not function correctly if cookies are disabled.

8. Third-Party Links and Services

Our website may contain links to third-party websites, including Razorpay's payment interface. We are not responsible for the privacy practices or content of such third-party sites. We encourage you to review their respective privacy policies.

9. Children's Privacy

Our Service is intended for use by adults capable of entering into a binding agreement. Where a test is booked on behalf of a minor or dependent, the booking adult is responsible for providing accurate consent and information on their behalf.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. The updated version will be posted on this page with a revised “Effective Date.” Your continued use of the Service after such changes constitutes acceptance of the revised Policy.

11. Grievance Officer / Contact Us

If you have questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal data, please contact:

• Company: Medivexa Healthcare Private Limited
• Registered Office: 149/1 JN Mukherjee Road, Salkia, Howrah – 711106, West Bengal, India
• Website: medivexalabs.com
• Email / Phone: info@medivexalabs.com / +91 93302 11277

We will endeavour to address your concerns within the timelines prescribed under applicable Indian data protection law.