Dr Morepen Privacy Policy

Dr Morepen Home, also known as "we," "us," "Dr Morepen Home," or "our," is the author and publisher of the website https://www.drmorepenhome.com/ and its subdomains (collectively referred to as "Websites"). This also includes other software and applications provided by Dr Morepen Home, such as the Dr Morepen Sync mobile application (referred to as "App" and collectively with the Websites as "Services" or "Platform").

This privacy policy ("Privacy Policy") outlines how we collect, use, share, and safeguard personal data from users of our Services (collectively referred to as "you," "User," or "Users" in this Privacy Policy). We developed this Privacy Policy to underscore our commitment to protecting your privacy and personal data. Your access to and use of the Services are governed by this Privacy Policy and our Terms and Conditions.

By confirming that you agree to this Privacy Policy (through the means provided on this website or app), using the Services, or providing us with your information, you consent to the practices and policies outlined in this Privacy Policy. You also consent to our collection, use, and sharing of your information as described in this Privacy Policy. We reserve the right to change, modify, add, or delete portions of this Privacy Policy at our sole discretion, at any time. If you do not agree with this Privacy Policy at any time, please do not use any of the Services or provide us with any of your information.

1. WHY THIS PRIVACY POLICY?

This Privacy Policy is published in compliance with, inter alia:

• Section 43A of the Information Technology Act, 2000;
• Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (the “SPDI Rules”);
• The Digital Personal Data Protection Act, 2023 ("DPDPA").

This Privacy Policy states the following:

• The type of information collected from the Users, including sensitive personal data;
• The purpose, means, and modes of usage of such information; and
• How and to whom we will disclose such information.

2. COLLECTION OF PERSONAL INFORMATION

Some of our services require us to know your identity to better cater to your needs. When you use these Services, we may ask you to voluntarily provide certain information that personally identifies you or could be used to identify you. This information may include, but is not limited to, the following:

• Contact Data: Name, email address, phone number, physical address.
• Demographic Data: Gender, date of birth, age.
• Data Regarding Your Usage of the Services: History of appointments and other transactions made by or with you through the use of Services.
• Health or Medical Data (Sensitive Personal Data):Past medical history and conditions, presenting symptoms, diagnostic reports, prescriptions, medication history, and data tracked via the Dr Morepen Sync app (e.g., blood glucose levels, blood pressure, weight).
• Financial Information: Payment details such as credit/debit card information or UPI ID, processed through our secure payment gateway.
• Other Information: Information that you voluntarily choose to provide to us, including information shared through emails or other communications.

The information Dr Morepen Home collects from you may be classified as"Personal Data" or "Sensitive Personal Data"according to the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (SPDI Rules).

3. PRIVACY STATEMENTS

By using and accessing the Services, each User agrees to comply with the Terms and Conditions, which includes acceptance of this Privacy Policy.

All information, including sensitive personal data, provided by a User to us is voluntary. You acknowledge that Dr Morepen Home, either independently or with its Partners, may utilize such information for the purposes outlined below. The collection and processing of sensitive personal data under the Digital Personal Data Protection Act, 2023 (DPDPA) requires your explicit consent. By agreeing to this Privacy Policy, you provide the necessary consent as mandated by applicable law.

Purpose and Lawful Basis for Processing Your Data

We only process your data for specific, explicit, and legitimate purposes. Our lawful basis for all processing is your Consent.

• To Provide Services: We use your Contact, Health, and Account Information to schedule and deliver the services you request, such as dispatching a doctor or nurse to your location or processing a lab test.
• To Process Payments: We use your Financial Information to bill you for services.
• To Communicate With You: We use your Contact Information to send you service-related communications, such as appointment confirmations, reminders, and lab reports.
• To Improve Our Platform: We may use anonymized and aggregated Technical and Health Information for research, data analysis, and to improve the quality and functionality of our services.
• For Legal Compliance: We may be required to process your data to comply with legal obligations or respond to lawful requests from government authorities.

We will never use your Sensitive Personal Data for marketing purposes. We will only send you marketing communications if you provide separate, explicit, opt-in consent.

Data Sharing and Third-Party Disclosure

We do not sell your personal data. We only share it with the following parties on a need-to-know basis to provide our Services:

• Medical Professionals & Lab Partners: We share your relevant Personal and Sensitive Personal Data with the independent doctors, nurses, phlebotomists, and labs who deliver your requested service. They are bound by professional confidentiality obligations.
• Payment Gateways: We share Financial Information with our secure third-party payment processors to handle transactions.
• Technology Service Providers: We may use third-party vendors for data hosting (e.g., cloud services) and software maintenance. These vendors are contractually obligated to maintain the confidentiality and security of your data.

Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you have the following rights over your personal data:

• Right to Access: You can request a copy and summary of your personal data that we hold.
• Right to Correction: You can request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your personal data when it is no longer necessary for the purpose for which it was collected.
• Right to Withdraw Consent: You may withdraw your consent for data processing at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Grievance Redressal: You have the right to file a complaint with our Grievance Officer if you believe your rights have been violated.

To exercise any of these rights, please contact our Grievance Officer.

If you wish to deactivate your account or request the cessation of our use of your information for service provision, please contact us atsupport@drmorepenhome.com. We will retain your information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws.

4. CASUAL VISITORS NOTE

No Sensitive Personal Data is automatically collected by Dr Morepen Home from any casual visitors of this Website who are merely perusing the site. Nevertheless, certain provisions of this Privacy Policy are applicable even to such casual visitors, and such visitors are required to read and understand the privacy statements set out herein. If a visitor does not agree with the terms of this Privacy Policy, they should discontinue use of the Website immediately.

5. CONFIDENTIALITY AND SECURITY

Your Personal Data is stored electronically by Dr Morepen Home on its own systems or on systems maintained by its employees and Partners. We implement robust technical and organizational security measures to protect your data from unauthorized access, disclosure, alteration, misuse, or destruction. These measures include data encryption, access controls, secure storage mechanisms, and regular security audits.

No administrator at Dr Morepen Home will have access to your password. You are responsible for protecting against unauthorized access to your password, computer, and mobile devices. Always remember to log out from the Website when your session is complete.

Dr Morepen Home and its Partners assume no liability for any unauthorized use of your account or password. If you suspect any unauthorized use of your account, you must promptly notify Dr Morepen Home so that appropriate measures can be taken.

Dr Morepen Home restricts access to User information strictly to employees and authorized personnel on a need-to-know basis only. Access is granted solely for the purpose of delivering, maintaining, and improving the Services offered to Users.

Despite implementing reasonable security measures, Dr Morepen Home shall not be held liable for any breach of security or actions of third parties that are beyond its reasonable control, including but not limited to government actions, cyberattacks, computer hacking, unauthorized access, system failures, technical malfunctions, or other unforeseen events.

6. CHANGE TO PRIVACY POLICY

Dr Morepen Home reserves the right to update, modify, amend, or revise this Privacy Policy at any time. If there are significant changes in the manner in which Dr Morepen Home handles Users' personally identifiable information, we will provide notice by displaying a prominent announcement on the Website, through the App, or by sending an email notification to the registered email address of the User.

Your continued use of the Services after receiving notice of any changes shall constitute your acceptance of the updated Privacy Policy and your consent to the revised terms.

7. CHILDREN'S AND MINOR'S PRIVACY

Dr Morepen Home strongly encourages parents and legal guardians to monitor and supervise the online activities of their minor children.

The Website, App, and Services provided by Dr Morepen Home are not intended for independent use by minors. Any use of the Services by a minor must be undertaken only with the consent and supervision of a parent or legal guardian.

By allowing a minor to access or use the Services, the parent or legal guardian agrees to the Terms and Conditions and this Privacy Policy on behalf of the minor and accepts responsibility for the minor's use of the Services.

8. CONSENT TO THIS POLICY

You acknowledge and agree that this Privacy Policy forms an integral part of the Terms and Conditions governing the use of the Website, App, and related Services.

By accessing, registering on, or using the Website, App, or any Services provided by Dr Morepen Home, you expressly and unconditionally consent to the collection, use, storage, processing, and disclosure of your personal information in accordance with this Privacy Policy.

9. ADDRESS FOR PRIVACY QUESTIONS

Should you have any questions, concerns, or requests regarding this Privacy Policy or Dr Morepen Home's collection, use, processing, storage, or disclosure of personal information, you may contact us using the details below: