Privacy Policy

Global Neuro and Spine Care Pvt. Ltd (“we”, “our”, or “us”) is committed to safeguarding the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your data when you use our website, our mobile application distributed on Google Play (the “App”), and related services (together, the “Services”), in compliance with applicable Indian laws, including the Information Technology Act 2000 (and its Rules, including the SPDI Rules) and the Digital Personal Data Protection Act, 2023 (DPDP Act).

This policy is designed to meet transparency expectations for apps on Google Play, including disclosure of data practices that should align with the information you provide in the Play Console (for example, the Data safety section). If anything here differs from an in-app notice, the more specific notice shown at the time of collection generally applies to that feature.

By using our Website (https://www.globalneuroandspinecare.com), the App, or any of our services, you acknowledge the practices described herein.

If you do not agree with this Privacy Policy, please do not use our Services.

Information We Collect

Personal Data (PII)

We collect personal identifiers and contact details you provide, including your name, email address, and phone number. We may also collect postal address, date of birth, gender, and any government-issued ID (such as Aadhaar or passport), if submitted.

Further, we may also collect information for up to five family members under your account, including details of minors, which must be provided by their parents or legal guardians.

Sensitive Personal Data (SPDI)

We collect sensitive personal data, including medical and health-related information, only with your explicit and informed consent. This may include details such as your medical history, symptoms, diagnosis, prescriptions, treatment records, and other health-related data.

Technical and Usage Data

We automatically collect certain technical information about your device and interactions with our Website and App. This may include your approximate or precise location (when you grant permission), IP address, browser type and version, device identifiers and model information, operating system, app version, referral source, pages or screens viewed, access times, and usage patterns.

Appointment and Communication Data

We collect information when you book appointments, fill out forms, or communicate with us via the Website, App, phone, email, or other channels.

App Permissions and Sensitive Device Data (Android)

The App may request access to features on your device only where needed to provide the Services. Depending on your version of Android and how you use the App, this may include:

• Location (approximate and/or precise): to support features such as finding nearby care, address autocomplete, or location-relevant workflows you initiate.
• Camera: for video consultations, profile or clinical media you choose to capture, and related features.
• Microphone: for voice or video consultations and call-related features.
• Phone / call-related capabilities: to place or manage calls initiated from the App, where supported, and for reliable telephony or VoIP experiences.
• Photos, media, and files: to let you attach images or documents you select for care coordination, downloads, or viewing in-app content.
• Notifications: to send appointment reminders, messages, and service updates (you can turn these off in device settings for the App).
• Network and connectivity: to operate online features, sync data, and check connectivity.

You can grant or revoke many of these permissions through your device settings. Denying a permission may limit certain features.

How We Use Your Information

• To schedule and manage appointments, enable consultations (including teleconsultations), and handle service requests.
• To facilitate secure sharing of your data with healthcare professionals, pharmacies, or labs.
• To contact you for appointment reminders, updates on treatment plans, or test results.
• To operate, secure, and improve the App and Website, including diagnostics, analytics in aggregated or de-identified form where appropriate, and crash reporting.
• To comply with legal obligations, maintain medical records, and prevent fraudulent activity.

Sharing and Disclosure of Information

We do not sell your personal information or sensitive health data, and we do not share it with third parties for their independent marketing purposes. We share information only as needed to provide the Services, with your direction or consent where required, or as permitted by law, including with:

• Healthcare professionals and staff involved in your care, and affiliated facilities, as appropriate.
• Service providers and subprocessors who host data, deliver communications, process payments (if applicable), provide maps or location services, enable video or voice sessions, analytics, crash reporting, or other technical operations, under contractual confidentiality and security obligations.
• Authorities or others when required to comply with law, respond to lawful requests, or protect rights, safety, and security.

Third-Party Services and SDKs

The App relies on third-party platforms and software development kits (SDKs) for core functionality and reliability. These may process certain data on our behalf, subject to their terms and privacy notices. Examples include cloud and messaging infrastructure (such as Google Firebase for push notifications, authentication-related flows where used, databases, analytics, crash reporting, and performance monitoring), video or voice real-time communication providers (such as Agora or similar), and maps or places services (such as Google Places or similar) when you use location-assisted features.

We select providers that meet our security expectations; however, we do not control their independent policies. We encourage you to review the privacy documentation of major providers you interact with through the App.

Data Retention

We retain personal and health information for as long as needed to provide the Services, meet legal and regulatory requirements for medical records, resolve disputes, and enforce our agreements. Retention periods vary by data category and obligation. When retention ends, we delete or de-identify information in line with our internal procedures, subject to applicable law.

International Transfers

Our primary operations are in India. Some subprocessors (for example, cloud or communication providers) may process or store data in other countries. Where such transfers occur, we take steps required under applicable law, including appropriate contractual safeguards where applicable.

Your Rights Regarding Your Data

• Request access or correction of your personal or sensitive data.
• Withdraw consent for processing SPDI where consent is the basis.
• Object to non-essential data usage (for example, marketing emails).
• Request deletion of your account or personal data, subject to legal and medical-record retention requirements that may require us to keep certain information for prescribed periods.

Account and Data Deletion Requests

You may request closure of your account and deletion of personal data associated with your account by contacting us using the details under “Grievance Officer” below. We will verify your request where appropriate and respond within a reasonable time. Some information may be retained where the law requires retention of health or business records; we will explain any limitation that applies to your request.

Data Security

We implement encryption in transit (such as TLS), access controls, secure configurations, and monitoring to safeguard your data. No method of transmission or storage over the internet is completely secure; we work to apply reasonable and appropriate safeguards for the nature of the data we handle.

Cookies and Tracking Technologies

We use cookies and similar technologies on our Website for analytics and to improve user experience. You can disable cookies via browser settings. The App may use device identifiers and similar technologies consistent with this policy and platform rules.

Children’s Privacy

The App is not intended for unsupervised use by children under 13. Our services are intended for adults and for family profiles managed by a parent or legal guardian. We collect information about minors only when provided by a parent or legal guardian as part of a family account, as described above.

Changes to This Policy

We may update this Privacy Policy periodically. The “Last updated” date at the top will change when we do. For material changes, we may provide additional notice through the App or Website as appropriate. Continued use of the Services after an update constitutes acceptance of the revised policy, except where your consent is required by law.