Legal
Privacy Policy
DPDP Act 2023 Aligned — How we collect, use, and protect your personal information.
This Privacy Policy explains how Namma Health, operated by Vinayaka Health Tech Ventures, collects, uses, processes, stores, and protects personal information of users accessing www.nammahealthassist.in and related membership services. By accessing the website or enrolling in membership services, you consent to the collection and use of information as described below.
Data Controller
Namma Health is operated by Vinayaka Health Tech Ventures (Sole Proprietorship Firm), Bengaluru, Karnataka, India. For applicable data protection laws, the Company acts as the Data Fiduciary responsible for processing personal data.
Data Collected
- Personal Information: Full name, contact number, email, address, date of birth, gender (optional)
- Membership Information: Membership ID, plan details, enrollment records, validity period
- Health Information (Voluntarily Shared): Medical reports, diagnostics, appointments, treatment references
- Payment Information: Transaction ID, payment confirmation, billing details. Card/banking credentials are not stored.
- Technical Information: IP address, device type, browser type, website usage data
Purpose of Data Collection
- Membership administration and identity verification
- Appointment and partner hospital coordination
- Diagnostic service facilitation
- Customer support and communication
- Legal and regulatory compliance
Data will not be used for unrelated purposes without consent.
Sensitive Health Data
Health-related information is considered sensitive and will be:
- Collected only when voluntarily shared
- Used strictly for healthcare coordination purposes
- Processed only with explicit user consent
Data Sharing
- Partner hospitals and diagnostic centers
- Healthcare service providers involved in coordination
- Payment gateways for transactions
- Technology service providers supporting the platform
- Government/regulatory authorities where legally required
Namma Health does not sell or trade personal data. Sharing is strictly for service coordination.
Data Retention
Personal data will be retained only as long as necessary to:
- Manage membership services
- Comply with legal obligations
- Resolve disputes and maintain transaction records
Data may be securely deleted once no longer required.
Data Security
- Secure digital storage systems
- Access controls
- Encryption and safeguards where applicable
Absolute security cannot be guaranteed for electronic data.
User Rights (DPDP Act 2023)
- Access personal data
- Request correction of inaccurate information
- Withdraw consent for processing
- Request deletion of personal data (subject to legal obligations)
- Raise complaints regarding data handling
Requests can be submitted using the contact details below.
Withdrawal of Consent
Users may withdraw consent for data processing at any time. Withdrawal may affect Namma Health's ability to provide certain services.
Third-Party Websites
The website may contain links to third-party websites. Namma Health is not responsible for their privacy practices. Users should review their privacy policies separately.
Policy Updates
This Privacy Policy may be updated to reflect changes in services, legal requirements, or operations. Updated versions will be published on the website with a revised effective date.
Grievance & Data Requests
For privacy concerns, data requests, or complaints, reach us via the contact details below. Requests are typically addressed within 7–15 working days.
Privacy Concerns & Data Requests
Requests are typically addressed within 7–15 working days.