Ayuone Privacy Policy
1. Content & Purpose
a. This privacy policy (“Privacy Policy”) applies to your use of the mobile and web-based application named ‘AyuOne’, owned and operated by CR Healthcare Services Private Limited, a company duly incorporated under the provisions of the Companies Act, 2013 (hereinafter, referred to as “CR Health” or “We” or “Our” or “Us” or “Company”). The mobile application is hereinafter referred to as “Application”.
b. The Application is a platform that facilitates the patient assistance program (PAP Program) services for patients (hereinafter referred to as “Services”). The Services would be made available to such natural persons who have agreed to become Users on the Website after obtaining due registration, in accordance with the procedure as determined by AyuOne, from time to time (referred to as “You” or “Your” or “Yourself” or “User”, which terms shall also include natural persons who are accessing the application merely as visitors).
c. We have implemented reasonable security practices and procedures that are commensurate with the information assets being protected and with the nature of our business. While we try our best to provide security that is commensurate with the industry standards, because of the inherent vulnerabilities of the internet, we cannot ensure or warrant complete security of all information that is being transmitted to us by you.
d. For the purpose of providing the Services and for other purposes identified in this Privacy Policy, AyuOne will be required to collect and host certain data and information of the Users. AyuOne is committed to protecting the Personal Information of the Users and takes all reasonable precautions for maintaining confidentiality of the User’s Personal Information. This Privacy Policy has been designed and developed to help you understand the following:
i. The type of Personal Information (including Sensitive Personal Data or Information) that AyuOne collects from the Users;
ii. The purpose of collection, means and modes of usage of such Personal Information by AyuOne;
iii. How and to whom AyuOne will disclose such information post user’s consent on sharing the information;
iv. How AyuOne will protect the Personal Information including Sensitive Personal Data or Information that is collected from the Users; and
v. How Users may access and/ or modify, delete their Personal Information.
e. This Privacy Policy shall apply to the use of the Application by all Users. Accordingly, a condition of each User’s use of and access to the Application and to the other services provided by AyuOne to Users is their acceptance of this Privacy policy. Any User is required to read and understand the provisions set out herein prior to submitting any Sensitive Personal Data or Information to AyuOne, failing which they are required to exit the Application immediately.
2. What is the personal information
a. “Personal Information” means any information that relates to a natural person, which, either directly or indirectly, in combination with other information available with AyuOne, is capable of identifying the person concerned.
b. “Sensitive Personal Data or Information” means Personal Information of any individual relating to physical, physiological and mental health condition; sexual orientation; medical records and history; biometric information; any detail relating to the above as provided to or received by AyuOne for processing or storage. However, any data/information relating to an individual that is freely available or accessible in public domain or furnished under the Right to Information Act, 2005 or any other law at the time being in force shall not qualify as Sensitive Personal Data or Information.
3. Types of personal information collected by AyuOne
a. A User may have limited access to the Application and utilize some of the Services provided by AyuOne without creating an account on the Application. Unregistered Users can access some of the information and details available on the Application. In order to have access to all the features and benefits on our Application, a User may be required to first create an account on our Application. AyuOne may collect the following categories of Personal Information from the Users (hereinafter collectively referred to as “User Information”):
i. Name
ii. User ID
iii. Email address;
iv. Address (including country and ZIP/postal code)
v. Gender
vi. Age
vii. Phone Number
viii. Password chosen by the User
ix. Other details as the User may volunteer
b. In order to avail the Services, the Users may be required to upload copies of their prescriptions, on the Application and/ or e-mail the same in accordance with the Terms of Use and the prescriptions will be stored/ disclosed by AyuOne only in the manner specified in this Privacy Policy and the Terms of Use. The term “User Information” shall also include any such prescriptions uploaded or otherwise provided by Users.
c. AyuOne may keep records of telephone calls received and made for making inquiries, orders, or other purposes for the purpose of administration of Services.
d. Internet use: AyuOne may also receive and/or hold information about the User’s browsing history including the Internet Protocol (IP) address of each User’s device (or the proxy server a User used to access the World Wide Web), User’s device operating system and type of web browser the User is using as well as the name of User’s ISP. The Application uses temporary cookies to store certain data (that is not Sensitive Personal Data or Information) that is used by AyuOne and its service providers for the technical administration of the Application, research and development, and for User administration.
e. AyuOne does not knowingly collect Personal Information from children.
f. AyuOne may in future include other optional requests for information from the User including through user surveys in order to help AyuOne customize the Application to deliver personalized information to the User and for other purposes as are mentioned herein. Any such additional Personal Information will also be processed in accordance with this Privacy Policy.
4. Purposes for which your information may be used by AyuOne
a. AyuOne will retain User Information only to the extent it is necessary to provide Services to the Users. The information which AyuOne collects from you may be utilized for various business and/or regulatory purposes including for the following purposes:
i. Registration of the User on the Application and the PAP Program
ii. Processing the User’s requests and provision of Services (including provision of safe Services)
iii. Enable CR Health group entities and their partners to offer their products and/or services and communicate with you about such products and/or services
iv. Processing, disclosing, transmitting, and/or sharing the data/information with CR Health group entities, and other third parties which have business or contractual dealings with us
v. Technical administration and customization of the Application;
vi. Ensuring that the Application content is presented to the Users in an effective manner
vii. Delivery of personalized information to the User
viii. Improvement of Services, features and functionality of the Application
ix. Research and development and for User administration (including conducting user surveys)
x. Dealing with requests, enquiries, complaints or disputes and other customer care related activities including those arising out of the Users’ request of the Services and all other general administrative and business purposes
xi. Communicate any changes in our Services or this Privacy Policy or the Terms of Use to the Users
xii. Verification of identity of Users and perform checks to prevent frauds and
xiii. Investigating, enforcing, resolving disputes and applying our Terms of Use and Privacy Policy, either ourselves or through third party service providers.
5. Disclosure and transfer of your personal information
a. AyuOne may need to disclose/ transfer User’s Personal Information to the following third parties for the purposes mentioned in this Privacy Policy and the Terms of Use:
i. To other service providers appointed by or working with AyuOne for the purpose of carrying out services on AyuOne’s behalf under contract. Generally, these contractors do not have any independent right to share this information, however certain contractors who provide services on the Application, including the providers of online communications services, will have rights to use and disclose the Personal Information collected in connection with the provision of these services in accordance with their own privacy policies.
ii. CR Health group entities: We may make available to you products, or services, to assist them to reach out to you in relation to their programs or campaigns and to process your queries and requests. Accordingly, we may share your Personal Information with CR Health group entities. We may also share your Data with the CR Health group entities as is relevant for the purposes set out in Clause 4 above, and to facilitate the operation of our business.
iii. To government institutions/ authorities to the extent required a) under the laws, rules, and regulations and/ or under orders of any relevant judicial or quasi-judicial authority; b) to protect and defend the rights or property of AyuOne; c) to fight fraud and credit risk; d) to enforce AyuOne’s Terms of Use (to which this Privacy Policy is also apart) ; or e) when AyuOne, in its sole discretion, deems it necessary in order to protect its rights or the rights of others.
iv. If otherwise required by an order under any law for the time being in force including in response to enquiries by Government agencies for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution, and punishment of offences.
b. AyuOne makes all User Information accessible to its employees and data processors only on a need-to-know basis. All AyuOne employees and data processors, who have access to, and are associated with the processing of User Information, are obliged to respect its confidentiality.
c. AyuOne may also disclose or transfer the User Information, to another third party as part of reorganization or a sale of the assets or business of a CR Health division or company. Any third party to which AyuOne transfers or sells its assets will have the right to continue to use the Personal Information and/ or other information that a User provide to us.
6. Retention of the information
a. All the information collected/ stored under this Privacy Policy and Terms of Use is maintained by AyuOne in electronic form on its equipment, and on the equipment of its employees. User Information may also be converted to physical form from time to time. Regardless of the manner of storage, AyuOne will keep all User Information confidential and will use/ disclose it only in the manner specified under the Privacy Policy and Terms of Use.
b. AyuOne will also ensure that User Information is not kept for a period longer than is required for the purposes for which it is collected or as required under any applicable laws.
7. Security practices and procedures
a. AyuOne adopts reasonable security practices and procedures to include, technical, operational, managerial and physical security control measures in order to protect the Personal Information in its possession from loss, misuse and unauthorized access, disclosure, alteration and destruction.
b. AyuOne takes adequate steps to ensure that third parties to whom the Users’ Sensitive Personal Data or Information may be transferred adopt reasonable level of security practices and procedures to ensure security of Personal Information.
c. You hereby acknowledge that AyuOne is not responsible for any intercepted information sent via the internet, and you hereby release us from any and all claims arising out of or related to the use of intercepted information in any unauthorized manner.
8. User’s rights in relation to their personal information collected by AyuOne
a. All the information provided to AyuOne by a User, including Sensitive Personal Data or Information, is voluntary. User has the right to withdraw his/ her/ its consent at any time, in accordance with the terms of this Privacy
Policy and the Terms of Use, but please note that withdrawal of consent will not be retroactive.
b. Users can access, modify, correct and delete the Personal Information provided by them which has been voluntarily given by the User and collected by AyuOne in accordance with this Privacy Policy and Terms of Use. However, if the User updates his/ her information, AyuOne may keep a copy of the information which User originally provided to AyuOne in its archives for User documented herein. In case the User seeks to update or correct, his/her Personal Information, the User may exercise these rights by emailing AyuOne at <insert email> and communicate the change(s) for updating AyuOne records.
c. If a User, as a casual visitor, has inadvertently browsed the Application prior to reading the Privacy Policy and the Terms of Use, and such User does not agree with the manner in which such information is obtained, stored or used, merely quitting this Application should ordinarily clear all temporary cookies installed by AyuOne. All visitors, however, are encouraged to use the “clear cookies” functionality of their browsers/device to ensure such clearing/deletion, as AyuOne cannot guarantee, predict or provide for the behaviour of the equipment of all the visitors of the Website.
d. If a User has inadvertently submitted any Personal Information to AyuOne prior to reading the Privacy Policy and Terms of Use, and such User does not agree with the manner in which such information is collected, stored or used, then such User can ask AyuOne, by sending an email on care@medunited.in containing the rectification required, whether AyuOne is keeping Personal Information about such User, and every User is also entitled to require AyuOne to delete and destroy all such information relating to such user (but not other Users) in its possession.
e. In case the User does not provide his/ her information or consent for usage of Personal Information or subsequently withdraws his/ her consent for
usage of the Personal Information so collected, AyuOne reserves the right to discontinue the services for which the said information was sought.
9. Additional notes to the user
a. AyuOne shall not be responsible in any manner for the authenticity of the Personal Information or Sensitive Personal Data or Information supplied by the User to AyuOne. If a User provides any information that is untrue, inaccurate, not current or incomplete (or becomes untrue, inaccurate, not current or incomplete), or AyuOne has reasonable grounds to suspect that such information is untrue, inaccurate, not current or incomplete, AyuOne has the right to suspend or terminate such account at its sole discretion.
b. AyuOne shall not be responsible for any breach of security or for any actions of any third parties that receive Users’ Personal Information or events that are beyond the reasonable control of AyuOne including, acts of government, computer hacking, unauthorized access to computer data and storage device, computer crashes, breach of security and encryption, etc.
c. The User is responsible for maintaining the confidentiality of the User’s account access information and password, if applicable. The User shall be responsible for all uses of the User’s account and password, whether or not authorized by the User. The User shall immediately notify AyuOne of any actual or suspected unauthorized use of the User’s account or password.
d. AyuOne will communicate with the Users through email and notices posted on the Application or through other means available through the Service, including text and other forms of messaging. The Users can ask AyuOne, by sending an email to care@medunited.in containing the rectification required.
10. Changes in privacy policy
a. AyuOne may update this Privacy Policy at any time, with or without advance notice. In the event there are significant changes in the way
AyuOne treats User’s Personal Information, AyuOne will display a notice on the Application or send Users an email. If a User uses the Service after notice of changes have been sent to such User or published on the Application, such User hereby provides his/ her/ its consent to the changed practices.
11. Complaints and grievance redressal
a. AyuOne addresses discrepancies and grievances of all Users with respect to processing of information in a time bound manner. For this purpose, AyuOne has designated Amarjeet Dubey as the grievance officer, who will redress the grievances of the Users expeditiously but within one month from the date of receipt of grievance, and who can be reached by:
i. Sending a letter marked to the attention of “Grievance Officer, Amarjeet Dubey, Survey No. 185, Door No #1-55/11/KJ/3F Serilingampally, Kondapur, Rangareddy, Hyderabad, Telangana,India-500084.
ii. Sending an email to care@medunited.in