RX Consultants Private Limited ("RXCS" or "we") takes the privacy of your information seriously. This privacy notice ("Privacy Notice") describes the types of personal information we collect from you through our website (including sub-domains and microsites) and mobile applications. It also describes the purposes for which we collect that personal information, the other parties with whom we may share it and the measures we take to protect the security of your data. It also tells you about your rights and choices with respect to your personal information, and how you can contact us about our privacy practices.
You are advised to carefully read this Privacy Notice before using or availing any of our products and/or services.
We request You to carefully read this Privacy Policy and Terms of Use of the Portal before sharing personal information with us. This Privacy Policy applies to current and former visitors of the Portal. By visiting and/or accessing the Portal (or searching for any of the pages on Our Portal), You explicitly consent and agree to the Privacy Policy laid out herein and by providing Us Your personal information yourself or by making use of the Services provided through the Portal or through Third Party Service Providers (as defined under the Terms of Use), You hereby acknowledge for the collection, receipt, storage, use, processing, disclosure and transfer of Your personal information in accordance with the provisions of this Privacy Policy. No liability pertaining to the authenticity/ genuineness/ misrepresentation/ fraud/ negligence, etc. of the information disclosed shall lie on RXCS nor will RXCS's group entities in any way be responsible to verify any information obtained from You.
Collection, use and disclosure of information which has been designated as Personal Information under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 requires express consent of the User. By affirming Your assent to this Privacy Policy, You provide Your consent to RXCS for such use, collection and disclosure for provision of Services.
Withdrawal of consent may limit or prevent us from providing our products or services to you.
In this Privacy Notice, the following definitions are used:
A small file placed on your device by our website or mobile application when you either visit or use certain features of our website or mobile application. A cookie generally allows a website to remember your actions or preference for a certain period of time.
Includes non-personal information, personal information and sensitive personal information about you, which either directly or indirectly in combination with other information, could allow you to be identified when you visit our stores, website and/or mobile application.
Any applicable law for the time being in force relating to the processing of Data.
Select third parties (including RXCS Group entities) with whom we have contracts for the businesses described in this Privacy Notice.
Includes entities to whom we or other RXCS Group Entities will disclose your Data in order to process information for a specific purpose pursuant to written contract.
RXCS, a company incorporated in India whose registered office is at 101 & 102 Vajra Villa B 27/88-40-A Lane No 5, Ravindrapuri, Varanasi, Uttar Pradesh, India, 221005.
RXCS, and its holding, subsidiaries, affiliates, associate companies and joint venture companies with whom we have a contractual arrangement to, inter alia, share data for the purposes described in this Privacy Notice.
The natural person who accesses our stores, website or mobile application.
This Data includes, without limitation, the following categories:
Following are the sources of 'information' collected by us:
Any or all the above Data may be required by us from time to time to provide information relating to RXCS and to work on the experience when using our website or mobile application. Specifically, Data may be used by us for the following reasons:
We rely on consent, contractual necessity, compliance with legal obligations, and legitimate interests as lawful bases for processing your Data.
We treat these inferences as personal information (or sensitive personal information, as the case may be), where required under applicable law. Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information.
Our website and mobile application do not offer products or services for use by minors. If you are under 18, you may use our website or mobile application only with the involvement of a parent or guardian.
We may share your data with:
We may make available to you services, products, or applications provided by Partners for use on or through our website or mobile application. If you choose to use such service, customer information related to those transactions may be shared with such Partner. Such Partners will be required to respect the security of your Data and to treat it in accordance with this privacy policy and applicable law.
We may make available to you products, services and/or applications of RXCS Group Entities, to assist them to reach out to you in relation to their programs or campaigns and to process your queries and requests. Accordingly, we may share your Data with RXCS Group Entities. We may also share your Data with the RXCS Group Entities as is relevant for the purposes set out in Clause 5 above, and to facilitate the operation of our business.
We or other RXCS Group Entities may share your Data with Service Providers. Examples include storing and analyzing Data, protecting and securing our systems, providing search results and links, providing customer service, credit analysis, processing your information for profiling, user analysis and payment processing.
We may obtain information from other sources. An example of this is when you authorize a third-party website (such as the website of another RXCS Group Entity), to interact directly with our website or mobile application to provide or receive Data about you. In that case, we might receive such Data used by that third-party website to identify your account with that website.
These Service Providers will be required to only process Data in accordance with express instructions and as necessary to perform services for purposes set forth in this Privacy Notice. The Service Providers will also be required to safeguard the security and confidentiality of the Data they process by implementing appropriate technical and organizational security measures and confidentiality obligations binding employees accessing Data.
We may release Data when we believe release is appropriate to comply with applicable law or legal process, enforce or apply the Terms of Use of our website or mobile application and other agreements, protect us against harm or financial loss, when we believe disclosure is necessary to protect individuals' vital interests, or in connection with an investigation of suspected or actual fraudulent or illegal activity. This may include exchanging information with other companies and organizations for fraud protection, risk management and dispute resolution. This does not include selling or otherwise disclosing personal information of users for commercial purposes in violation of this Privacy Notice.
As we continue to develop our business, we might sell or buy subsidiaries or business units. Your Data (including in relation to loyalty programs) may be transferred as part of such transaction. Any Data that we receive from a third party pursuant to such transactions will be processed in accordance with this Privacy Notice and applicable law.
We may also share your Data with other third parties where:
We require these third parties by contract to only process sensitive personal data in accordance with our instructions and as necessary to perform services on our behalf or in compliance with applicable law. We also require them to safeguard the security and confidentiality of the sensitive personal data they process on our behalf by implementing appropriate confidentiality, technical and organizational security measures.
We do not sell or otherwise provide access to your personal information to any third party for their own commercial use. Your information is used solely to provide our services or services of our contracted partners, in accordance with this Privacy Policy.
Your security is important to Us. RXCS adopts reasonable security practices and procedures to include, technical, operational, managerial and physical security control measures in order to protect all User information including Personal Information in its possession from loss, misuse and unauthorised access, disclosure, alteration and destruction.
All data, content and/or all User information is encrypted during transmission and will be stored encrypted at-rest. RXCS shall take reasonable steps to protect Your Personal Information in an effort to prevent loss, misuse, unauthorised access, disclosure, alteration, and destruction.
RXCS assumes no liability or responsibility for disclosure of Your Personal Information due to errors in transmission, unauthorised third-party access, or other causes beyond its control. RXCS has undertaken reasonable measures to protect Your rights of privacy with respect to Your usage of the Portal controlled by Us and Services provided herein. However, We shall not be liable for any unauthorised or unlawful disclosures of Your Personal Information made by any third parties who are not subject to Our control.
We will use technical and organisational measures to safeguard your Data and we store your Data on secure servers. Technical and organisational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us by e-mail at our email address provided at Clause 16 below.
RXCS retains Data for as long as necessary for the use of our products and/or services or to provide access to and use of our website or mobile application, or for other essential purposes such as complying with our legal obligations, resolving disputes, enforcing our agreements and as long as processing and retaining your Data is necessary and is permitted by applicable law. Because these needs can vary for different data types and purposes, actual retention periods can vary significantly.
Even if we delete your Data, including on account of exercise of your right under Clause 10 below, it may persist on backup or archival media for audit, legal, tax or regulatory purposes.
When we process Data about you, we do so with your consent and/or as necessary to operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfil other legitimate interests of RXCS as described in this Privacy Notice. You have the following rights in relation to your sensitive personal information and you can exercise it by submitting a request as described in the "How to Contact Us" section below.
You have the right to request access to, review, and modification of the personal information we hold about you.
You have the right to request correction of any inaccurate or incomplete personal information we hold about you.
You have the right to withdraw your consent for processing of your personal information at any time. It is important that the Data we hold about you is accurate and current. Please keep us informed if your personal information changes during the period for which we hold it.
Data collected under this Privacy Notice is hosted on servers located in India.
We take steps to ensure that the Data we collect under this Privacy Notice is processed according to the provisions of this Privacy Notice and the requirements of applicable law.
To ensure that your Data receives an adequate level of protection, we have put in place appropriate written contracts with RXCS Group Entities, Partners and Service Providers that we share your Data with. This ensures your Data is treated by such parties in a way that is consistent with applicable law.
We ask for the following app permissions while onboarding, in order to optimize the experience for you:
It is recommended that you set your location sharing 'Always' as it helps us to show you location specific data like availability of products. You can change this anytime.
To allow you to take a photo of prescriptions & directly upload it to the app. Camera & audio permissions are required to facilitate a tele consultation with doctors & save medical records with icanheal app. The doctor might choose to record the tele consultation for medico-legal reasons. We will inform you on the tele consultation screen if the doctor chooses to record the video consultation session. We additionally seek permission for reading & writing files on external storage to allow you to upload & save medical records on icanheal app which you have full control over whether to share further with doctors or not.
Media access permission is needed to store and retrieve your uploads such as prescription uploads on your device.
To support automatic OTP confirmation, so that you don't have to enter the authentication code manually.
This helps us to optimize your experience based on the Wifi's strength and signals, especially for optimizing video consultations.
To enable video consultations with doctors.
Bluetooth is used to redirect to bluetooth headset during video consultations.
If any court or competent authority finds that any provision of this Privacy Notice (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Notice will not be affected.
Our business changes constantly and our Privacy Notice may also change. We may e-mail periodic reminders of our notices and conditions, unless you have instructed us not to, but you should check our website and mobile application frequently to see recent changes. The updated version will be effective as soon as it is accessible. Any changes will be immediately posted on our website and mobile application and you are deemed to have accepted the terms of the updated Privacy Notice on your first use of our website or mobile application or first purchase of the products and/or services following the alterations. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
To request to access, review, update, or withdraw your consent for your personal information or to otherwise reach us, please submit a request by e-mailing us at grievances@rxcs.in. You may contact us for information on Service Providers, Partners and RXCS Group Entities with whom we may share your Data in compliance with this Privacy Notice and applicable law. We will respond to your request within 30 days.
In compliance with Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer of RXCS for the purpose of this Policy shall be:
Grievance Officer: Runal Bawaskar
Email Address: grievances@rxcs.in
In case You have any questions, comments or concerns about this Privacy Policy or wish to exercise any of the above-mentioned rights, You can contact us at grievances@rxcs.in.