LabBuddy

Guraan Tech Pvt. Ltd. ("LabBuddy", "we", "our", or "us") is committed to protecting your privacy and ensuring the confidentiality of your personal and health-related information. This Privacy Policy outlines how we collect, use, disclose, store, and protect your information through our website, mobile app, and associated services ("Platform").

1. Scope and Applicability

This policy applies to all users accessing LabBuddy's services including patients, lab partners, healthcare providers, and diagnostic institutions.

2. Information We Collect

A. Personal Information

• Full name
• Mobile number
• Email address
• Gender
• Age or date of birth
• Address and PIN code

B. Sensitive Personal Data or Information (SPDI)

• Health data (lab test details, prescriptions, reports)
• Medical history (if shared)
• Biometric data (if collected during sample collection)
• Location data (for home visits)

C. Technical & Usage Information

• IP address
• Device and browser details
• App usage analytics
• Cookies and session data

3. Purpose of Collection

We collect your information to:

• Facilitate booking and delivery of diagnostic services
• Enable report sharing and health record management
• Improve user experience and personalize services
• Communicate transactional updates and marketing offers
• Ensure regulatory and legal compliance

4. Legal Basis and Consent

By using the Platform, you voluntarily provide consent for the collection, processing, and storage of your personal and sensitive data. You may withdraw your consent by writing to privacy@mylabbuddy.com, subject to applicable legal limitations.

5. Data Sharing and Disclosure

We may share your data with:

• Partner diagnostic labs and sample collection agents
• Authorized doctors or healthcare professionals (with your consent)
• Payment gateways and logistics partners
• Government authorities upon lawful request
• IT and analytics vendors bound by confidentiality

We do not sell your personal or health data.

6. Data Anonymization and Research Use

Your data may be anonymized and aggregated to derive insights, support public health objectives, or improve our services without disclosing your identity.

7. Cookie Usage and Third-Party Tools

LabBuddy may use cookies and third-party services (e.g., payment gateways, WhatsApp, Google Maps) to improve your experience. These third parties may access limited data strictly for service fulfillment.

8. Data Security Measures

We use industry-standard encryption, secure servers, access controls, and monitoring systems to protect your data both in transit and at rest. Internal access is role-based and audit-logged.

9. Data Retention

• Your records are stored for a minimum of 3 years, or as mandated by applicable medical, tax, or legal obligations.
• Post this duration, the data may be anonymized or permanently deleted.

10. User Rights Under Indian Law

You have the following rights:

• Access to your stored data
• Correction of inaccurate data
• Erasure (subject to legal conditions)
• Data portability (if applicable)
• Withdraw consent
• File a grievance

To exercise any of these rights, email support@mylabbuddy.com.

11. Children's Privacy

Services are intended for users above 18 years. For minors, data must be submitted by a parent or legal guardian.

12. Data Breach Notification

In the event of a data breach impacting your personal or health data, we shall notify you and the Data Protection Board of India as per the provisions of applicable law.

13. Account Deletion

You may request account and data deletion by emailing support@mylabbuddy.com. Deletion will be confirmed upon completion unless retention is required by law.

14. Grievance Redressal

For any concerns or complaints, please contact our support or grievance officer.

15. Policy Updates

We may revise this Privacy Policy from time to time. Material changes will be communicated via app notification, website update, or email.

16. Compliance Statement

LabBuddy adheres to the provisions of:

• Information Technology Act, 2000 & SPDI Rules, 2011
• Digital Personal Data Protection Act, 2023 (DPDP)
• Any other applicable laws governing digital health in India