Privacy Policy

1. Introduction

MedhAnkura Private Limited Pvt. Ltd. ("MedhAnkura", "we", "us", or "our") operates the website at medhankura.com (the "Website"). We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains what personal data we collect when you visit or interact with this Website, how we use it, with whom we share it, and what rights you have over your data. It applies solely to data collected through this Website. The Ayuvu platform, MedUnited clinical network, and associated healthcare applications are governed by their own separate privacy documentation.

By using this Website, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect only the information you voluntarily provide to us through the contact form on this Website. We do not use tracking technologies, advertising cookies, or behavioural profiling on this Website.

3. How We Use Your Information

We use the information collected through the contact form solely to:

• Respond to your enquiry or collaboration proposal
• Route your message to the appropriate team member (engineering, investment relations, or operations)
• Follow up on your enquiry within the response timeframe stated on the contact page
• Maintain a record of correspondence for internal reference

We do not use your information for marketing, advertising, profiling, or any automated decision-making. We do not add you to any mailing list without your explicit consent.

4. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), we process your personal data on the following basis:

Consent: By submitting the contact form, you consent to the processing of your personal data for the purpose of responding to your enquiry. You may withdraw this consent at any time by contacting us at the address in Section 12.

Legitimate interests: We retain server log data for security and operational purposes under the legitimate interest basis, where such processing does not override your fundamental rights.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties.

We may share your data only in the following limited circumstances:

• Service providers: Our form submission processor (e.g. Formspree or equivalent) receives your contact form data solely to deliver it to us. These providers are bound by data processing agreements and may not use your data for any other purpose.
• Legal obligations: If required to do so by applicable law, court order, or government authority — including under the DPDP Act or other Indian law — we may disclose your data.
• Business transfer: In the event of a merger, acquisition, or restructuring, your data may be transferred to the successor entity, which will be bound by this Privacy Policy.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. This Website is served over HTTPS and all data in transit is encrypted.

Contact form submissions are transmitted to and stored in our internal communication systems, which are access-controlled and accessible only to authorised team members.

No method of electronic transmission or storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security of data transmitted to us.

7. Data Retention

We retain contact form submissions for as long as necessary to respond to your enquiry and for a reasonable period thereafter in case of follow-up correspondence — typically up to 24 months.

Server log data is retained for up to 90 days for security and operational purposes, after which it is deleted.

If you request deletion of your data, we will act on that request within the timelines prescribed by the DPDP Act (see Section 8 — Your Rights).

8. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the following rights as a data principal:

• Right to access: You may request confirmation of whether we hold personal data about you, and a copy of that data.
• Right to correction: You may request that we correct inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data, subject to any legal obligation we have to retain it.
• Right to withdraw consent: You may withdraw your consent for us to process your data at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to grievance redressal: You may raise a complaint with our Grievance Officer (see Section 12) if you believe your data principal rights have been violated.
• Right to nominate: You may nominate an individual to exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, contact us using the details in Section 12. We will respond within the timelines required by applicable law.

9. Children's Privacy

This Website is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe that we have inadvertently collected data from a child, please contact us immediately and we will delete it without delay.

10. Third-Party Links

This Website contains links to external websites — including MedUnited (medunited.in), Ayuvu Bharosa (cognitivecare.in), and MedPass plan pages. These websites are operated by separate entities and are governed by their own privacy policies. We are not responsible for the privacy practices of third-party sites. We encourage you to review their policies before providing any personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the applicable law, or our Website. The "Last Reviewed" date at the top of this document indicates when the policy was last updated.

For material changes, we will take reasonable steps to notify affected users. Continued use of this Website after any change constitutes your acceptance of the updated policy.

12. Contact & Grievance Officer

For any questions, requests to exercise your data principal rights, or privacy complaints, contact our Grievance Officer: