Privacy Policy

This Privacy Policy describes how ITX CARE Private Limited(“ITX CARE”, “we”, “us” or “our”), operating under the brand names Dr.AtHome and Gram Chikitsala, collects, uses, stores, shares and protects your information when you (a) visit www.doctorathome.co.in(the “Website”), (b) contact us by phone, email or WhatsApp, (c) apply for a franchise, or (d) receive services at or through a Gram Chikitsala E-Clinic, our devices, or our patient applications (together, the “Services”).

We are an Indian company. This Policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and the Digital Personal Data Protection Act, 2023 (“DPDP Act”). By using the Website or Services, you consent to the practices described in this Policy.

1. Registered Entity

ITX CARE Private Limited
C-149, Hosiery Complex, Phase 2, Noida, Uttar Pradesh — 201305, India
Email: contact@doctorathome.co.in · Phone: +91 92055 44720

2. Information We Collect

a) Contact and identity information — name, phone number, email address, state/location of interest, and whether you have a healthcare background, when you fill our franchise inquiry form, message us on WhatsApp, call us, or email us.

b) Health information (sensitive personal data) — when you receive care at or through a Gram Chikitsala E-Clinic: registration details, age, gender, medical history, real-time vitals (such as ECG, blood pressure, SpO2, temperature, respiratory rate), heart and lung sounds, clinical images, laboratory test results, prescriptions, and consultation records maintained in our electronic health record (EHR) system. Health data is collected with your consent (or the consent of your parent/guardian or authorised attendant, where applicable) and is used solely for providing healthcare services.

c) Franchise applicant information — details you share during franchise evaluation, such as location, premises details, background and investment capability.

d) Technical information— our Website is a static informational site. We do not use advertising or tracking cookies. We store your language preference (English / Hindi / Telugu) locally in your browser. Our hosting provider may collect standard server logs (IP address, browser type, pages visited) for security purposes. Buttons on our Website open third-party services (WhatsApp, YouTube, email); their use is governed by those services’ own privacy policies.

3. How We Use Your Information

• To provide healthcare services: connecting you with registered medical practitioners, conducting live consultations, generating prescriptions, performing diagnostic tests, and maintaining your health records in the EHR so your treating doctor has your history.
• To respond to franchise inquiries, evaluate applications, and communicate with you over WhatsApp, phone or email.
• To operate, secure and improve our Services, devices and platform.
• To comply with applicable law, including medical record-keeping requirements and lawful requests from authorities.

We do not sell your personal data, and we do not use your health data for advertising.

4. Sharing of Information

• Treating clinicians: your health data is shared with the registered medical practitioner consulting you, the attending nurse/paramedic, and — with your consent — family members who join the consultation.
• Service partners: laboratories and diagnostic partners for tests you request, and technology/hosting providers who process data on our behalf under confidentiality obligations.
• Legal requirements: where required by law, court order, or government authority.
• Business transfers: in connection with a merger, acquisition or restructuring, subject to this Policy.

5. Storage, Security and Retention

Your data is stored on servers located in India. We follow reasonable security practices, including access controls and encryption in transit, and our processes are aligned with our ISO 27001, ISO 9001 and ISO 13485 certified management systems. No method of transmission or storage is completely secure; we cannot guarantee absolute security, but we work to protect your data and will notify you and the authorities of breaches as required by law.

We retain health records for as long as required under applicable medical record-keeping norms and other laws, and other personal data for as long as needed for the purposes described above, after which it is deleted or anonymised.

6. Your Rights

• Access a summary of the personal data we hold about you.
• Request correction or updating of inaccurate data.
• Request erasure of your personal data, subject to legal record-keeping requirements applicable to medical records.
• Withdraw consent at any time (this may limit our ability to provide Services going forward).
• Nominate a person to exercise your rights in case of death or incapacity, as provided under the DPDP Act.
• Raise a grievance (see Section 9).

To exercise any right, write to contact@doctorathome.co.in from your registered contact details.

7. Children

Healthcare services for minors are provided only with the consent and involvement of a parent or guardian. We do not knowingly collect personal data of children through the Website.

8. Changes to This Policy

We may update this Policy from time to time. The updated version will be posted on this page with a revised “last updated” date. Material changes will be notified through the Website or our communication channels.

9. Grievance Officer

In accordance with the Information Technology Act, 2000, the SPDI Rules and the DPDP Act, the contact details of our Grievance Officer are:

We acknowledge grievances within 48 hours and endeavour to resolve them within 30 days of receipt.