Privacy

Privacy Policy

PRIVACY POLICY

Our commitment to protecting your privacy, personal information, and sensitive personal health data.

Last updated: July 24, 2026Version: 1.0
Terms of ServicePrivacy PolicyCookie PolicyGoConsult TermsCMS EULA
1

Overview

HealthChip Technologies Private Limited (hereinafter referred to as the “Company,” “we,” “us,” or “our”), acting for itself and its affiliates/group entities operating under the trade name “GoClinica,” is the proprietary owner and operator of the internet resource located at www.goclinica.com and the mobile application branded as “GoClinica” (collectively, the “Website”).

This Privacy Policy explains how we collect, use, share, retain, and protect the personal information of our users, including Practitioners, End-Users, and Website visitors (collectively referred to as “you” or “Users”).

By accessing or using our Services, you acknowledge that you have read, understood, and agreed to the terms outlined in this Privacy Policy and our Terms of Use. Capitalized terms not defined here carry the meanings assigned to them in our Terms of Use.

3

1. WHY THIS PRIVACY POLICY?

This Privacy Policy is published in compliance with applicable Indian law and regulations, including:

•the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “SPDI Rules”);
•the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“IG Rules”);
•the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), as the same come into force in a phased manner;
•the Consumer Protection Act, 2019, and the Consumer Protection (E-Commerce) Rules, 2020;
•the Telemedicine Practice Guidelines, 2020 (issued by the Board of Governors in supersession of the Medical Council of India) and relevant Clinical Establishment regulations; and
•the Cybersecurity Directions issued by the Indian Computer Emergency Response Team (“CERT-In”) under Section 70B of the Information Technology Act, 2000.

This policy outlines:

•Data Types: the categories of information collected from Users, including “Personal Information” and “Sensitive Personal Data or Information” (as defined under the SPDI Rules) and “Personal Data” (as defined under the DPDP Act);
•Data Lifecycle: the purpose, methods, and procedures for the collection, usage, processing, storage, retention, and destruction of such data;
•Disclosure: how, why, and to whom GoClinica may disclose your information, including our obligations to report cybersecurity incidents and personal data breaches to appropriate authorities;
•Your Rights: the mechanisms available for you to exercise your rights regarding data access, correction, erasure, and grievance redressal; and
•Data Storage: how your information is stored and safeguarded, whether GoClinica’s operations are based in India or, as GoClinica grows, in other countries.

The Company acknowledges that certain of the enactments referred to above (including the DPDP Act and the DPDP Rules) are being brought into force in a phased manner, and that GoClinica’s obligations thereunder shall apply prospectively as and when the corresponding provisions come into effect. Until such time, GoClinica’s data protection practices shall continue to be governed by the SPDI Rules and the other enactments referred to above, read together with this Policy.

1.1Territorial Scope. In accordance with Clause 1.7 (Territorial Restriction) of our Terms of Use, the Website and the Services are intended solely for individuals located in India, and this Privacy Policy is drafted accordingly, by reference to Indian data protection law. GoClinica does not direct, target, or market the Website or the Services toward individuals located outside India, and does not intend to offer goods or services to, or monitor the behaviour of, individuals located outside India. If you are located outside India, please refer to Clause 1.7 of our Terms of Use before continuing to use the Website. Any additional protections applicable to Users located in the European Union, the European Economic Area, or the United Kingdom who nonetheless access the Website are addressed separately in the GDPR Supplementary Addendum to our Cookie Policy.
4

2. INFORMATION WE COLLECT

To provide you with the best possible service, we require certain information to identify you and understand your needs. You provide this information voluntarily when accessing our Services or through correspondence such as emails and telephone calls. By providing this information, you consent to its collection by GoClinica in the manner described in this Policy.

2.1Categories of Information Collected. The information we collect may include, but is not limited to:
•Contact Details: such as your name, email address, and phone number;
•Demographic Information: such as your gender, date of birth, and PIN code;
•Service Usage: history of appointments made by or with you through our platform;
•Insurance Information: such as your insurance carrier and plan details;
•User-Provided Content: any information, images, or documents you voluntarily share via email, letters, or other correspondence; and
•Practitioner Data: information provided by healthcare Practitioners regarding the treatment you have received.
2.2Classification of Information. Under the SPDI Rules, the information collected may be classified as “Personal Information” or “Sensitive Personal Data or Information.” Separately, under the DPDP Act, all information that relates to an identifiable individual is classified as “Personal Data,” regardless of whether it would additionally qualify as sensitive under the SPDI Rules. Both classifications are relevant to how GoClinica handles your information during the transition period referred to in Clause 1 above.
•Personal Information: any information that relates to a natural person which, either directly or indirectly — in combination with other available information — is capable of identifying that person.
•and Sensitive Personal Data or Information (SPDI): includes, but is not limited to: passwords; financial information (e.g., bank accounts, credit/debit card details); physical, physiological, and mental health conditions; medical records and history; sexual orientation; biometric information; information received under a lawful contract; and visitor registration details and call data records.

Given the sensitive nature of health-related information, GoClinica seeks your explicit, informed consent (typically through a clear affirmative action such as a checkbox, form submission, or equivalent) before collecting or processing any SPDI, in addition to your general acceptance of this Policy.

2.3Publicly Available Information. GoClinica is free to collect, use, and disclose any information that is already freely available in the public domain, or furnished under the Right to Information Act, 2005 or other applicable law, without requiring your additional consent, in each case consistent with the SPDI Rules.
6

4. USE OF INFORMATION: ALL USERS

This Clause 4 applies to all Users of GoClinica’s Services.

4.1Purposes of Use. All information provided to GoClinica is voluntary. You acknowledge that we may use your Personal Information and SPDI to:
•provide and improve our Services;
•conduct business intelligence, research, and statistical analysis (in aggregated, non-personally identifiable form);
•communicate with you regarding appointments, feedback, and customer support;
•process transactions and payments through authorized third-party gateways;
•identify you and analyze software usage patterns; and
•comply with applicable law, including responding to lawful requests from courts, regulators, or government authorities.
4.2Communication Consent. By verifying your contact number or using our Website, you consent to receiving service-related and, where you have not opted out, promotional communications (calls, SMS, email) from GoClinica. Where you have registered on the National Do Not Call (NDNC/DND) registry, GoClinica will send promotional communications only where you have provided specific consent to receive such communications through a registered mechanism recognized under applicable Telecom Regulatory Authority of India (TRAI) regulations, and such communications will be sent through duly registered telemarketing channels. You may withdraw this consent and opt out of promotional communications at any time as described in Clause 4.5 below.
4.3Express Consent. By agreeing to this Privacy Policy, and by taking the affirmative actions described in Clause 2.2 in respect of SPDI, you provide the consent required under applicable law for the collection, use, and disclosure of your Personal Information and SPDI.
4.4Third-Party Services. GoClinica does not endorse or control content found in third-party services accessible through the Website and disclaims all liability for any actions or claims resulting from your participation in such services.
4.5Data Accuracy, Marketing Opt-Out, and Corrections. You are responsible for keeping your information accurate. You may update or correct your profile via your account settings on the Website, or by emailing privacy@goclinica.com. We may discontinue providing Services where information is found to be inaccurate, incomplete, or out of date. You may opt out of non-essential marketing communications at any time by emailing support@goclinica.com or using the unsubscribe mechanism provided in such communications.
7

5. SECURITY AND TECHNOLOGY

5.1Financial Security. For paid Services, we collect financial information to facilitate billing. Payments are processed through secure, encrypted third-party gateways. We offer the option to not save your payment details. While we utilize industry-standard security, please be aware that no internet-based transaction is entirely risk-free.
5.2Automatic Data Collection. We automatically collect technical data — such as your IP address, browser type, operating system, and referring URL — to analyze trends and improve Service utility. We do not link this technical data to your personally identifiable information when sharing aggregate findings with third parties.
5.3Cookies. We use temporary, non-sensitive cookies to manage your session and improve Website functionality. You may disable cookies via your browser settings, though this may limit your access to certain features.
5.4Third-Party Links. Our Services may contain links to third-party sites. We do not control these sites and are not responsible for their privacy practices. Use of these sites is at your own risk.
5.5User-Generated Content. If you communicate with other Users or post content publicly, GoClinica is not responsible for how that information is used or misused by others.
5.6Security Measures. We employ international best practices and a comprehensive security program (managerial, technical, operational, and physical) commensurate with the sensitivity of the data collected, in accordance with the SPDI Rules. While we strive to ensure a secure environment, we are not liable for data loss resulting from unauthorized access to your personal electronic devices.
5.7Legal Disclosure. We will only disclose your Personal Information without your specific consent when required by law, legal process, or government authority, or when we believe disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of any person, in each case in accordance with applicable law.
8

6. PRACTITIONERS NOTE

This Clause 6 applies specifically to all Practitioners using the GoClinica platform.

6.1Data Collection and Obligations.
•Information Collection: As part of the registration and profile creation process, we collect various data from Practitioners, which may include Personal Information and SPDI.
•Mandatory Review: All Practitioners must read and understand this Privacy Policy before submitting any information. If you do not agree to these terms, you must cease using the Services immediately.
6.2Ownership and Usage Rights.
•Ownership: You retain ownership of your information. However, by providing it to us, you grant GoClinica the right to collect, process, and disclose this information for the purposes stated in this Policy.
•Authorized Uses: GoClinica may use your information to:
•– identify and represent you on our platform;
•– conduct research, statistical analysis, and business intelligence in an aggregated or non-personally identifiable form;
•– share such aggregated, non-personally identifiable, and non-re-identifiable data with third parties and affiliates for research, benchmarking, or product development purposes, subject to contractual restrictions on re-identification and further disclosure;
•– publish your information on the Website to facilitate End-User searches and appointment bookings;
•– contact you regarding product feedback or new service offerings, subject to the DNC registry safeguards described in Clause 4.2; and
•– analyze software usage and practice information (including financial and inventory data) to improve product design and utility.
6.3Listing and Accuracy.
•Automatic Listing: GoClinica automatically lists information for doctors and clinics added to a practice via our software to facilitate appointment bookings.
•Source of Information: This information is either provided by the Practitioner or sourced from the public domain. We display this data on an “as-is” basis and make no warranties regarding its absolute accuracy or completeness.
•Practitioner Responsibility: While we take reasonable steps to ensure data accuracy, we strongly encourage you to regularly review your profile information. Please notify us immediately of any discrepancies, changes, or necessary updates.
•Non-Registered Practitioners: We may display information for Practitioners who have not formally registered with GoClinica, provided they have consented to such processing, or the information is sourced from the public domain in accordance with Clause 2.3. While we strive to verify this data, GoClinica assumes no liability for any inaccuracies or incomplete information regarding these profiles. Any such Practitioner may request removal of their listing by writing to support@goclinica.com.
9

7. END-USERS NOTE

This Clause 7 applies to all End-Users of the GoClinica platform.

7.1Registration and Consent.
•Information Collection: We collect Personal Information and SPDI during the registration and application process.
•Mandatory Review: You are required to read and understand this Privacy Policy before submitting any information. If you do not agree with our practices, please discontinue use of the platform immediately.
•Right to Access and Rectify: If you have inadvertently provided information and wish to modify or delete it, you may use the tools available on our Website or email privacy@goclinica.com to inquire about your data or request its correction or deletion, subject to Clause 9 (Data Retention and Deletion) and Clause 10 (Your Rights) below.
7.2Use of Information.
•Ownership: You own your personally identifiable information. GoClinica exclusively owns non-personally identifiable information derived from your use of the Services, such as aggregated usage patterns.
•Anonymized Data: We may use and share anonymized, aggregated demographic and health data — from which you cannot reasonably be re-identified — for research, statistical analysis, and business intelligence, including for software improvements, new technology development, and commercial product offerings. GoClinica shall not sell or disclose your identifiable SPDI, including your identifiable health records, to third parties for their independent commercial use.
•Communications: We may contact you via email, phone, or SMS. You can manage your communication preferences by logging into your “Account” settings on our Website.
•Surveys and Contests: Participation in surveys and contests is optional. Responses are kept anonymous and are used to improve our Services.
•“Assured” Providers: If you receive services from Practitioners with an “Assured” badge, you consent to the sharing of your treatment data and medical records with GoClinica for the sole purpose of service delivery and continuity of care.
•Record Keeping: We may maintain records of electronic communications and telephone calls for administrative, support, research, and listing purposes, subject to the retention limits described in Clause 9.
7.3Data Security and Third-Party Sharing.
•Confidentiality: All GoClinica employees and data processors are bound by strict confidentiality requirements. We employ industry-standard procedures to protect your data from collection to destruction.
•Business Transfers: In the event of a merger, reorganization, or sale of company assets, your information may be transferred to the acquiring party, who shall be required to continue to use and protect it in accordance with the terms of this Policy, or to provide you with a materially equivalent level of protection and notice of any change.
•Service Providers: We may share your data with third-party contractors or payment providers necessary to deliver our Services. Such providers are contractually restricted from using your data for independent purposes. Where a provider (such as a communication service) operates under its own privacy policy in respect of a specific feature, that feature will be clearly identified, and your use of that specific feature constitutes your consent to that provider’s privacy policy solely in respect of that feature.
10

8. CASUAL VISITORS NOTE

•Scope: Casual visitors (those merely browsing the Website without submitting any personal data) do not have Sensitive Personal Data or Information automatically collected.
•Applicability: Even as a casual visitor, this Privacy Policy applies to you. If you do not agree to these terms, please discontinue browsing the Website.
•Cookies: If you disagree with our cookie practices, you may clear your browser cookies or adjust your browser settings at any time, as described in Clause 5.3.
•User Status: If you submit any personal data — via email, post, or registration — you are no longer considered a “Casual Visitor” and will be treated as a “User” subject to the full provisions of this Privacy Policy.
11

9. DATA RETENTION AND DELETION

9.1GoClinica retains Personal Information and SPDI for as long as your account is active, or for as long as is reasonably necessary to fulfil the purposes for which it was collected, whichever is longer, subject to applicable law.
9.2Notwithstanding Clause 9.1, GoClinica may retain certain information for longer periods where required to comply with statutory record-keeping obligations applicable to healthcare records, to establish, exercise, or defend legal claims, or as required under the IG Rules (including the retention of information for a minimum period of 180 days following a takedown, for production to law enforcement or governmental authorities).
9.3You may request cancellation of your account or deletion of your data by emailing support@goclinica.com or privacy@goclinica.com. Upon a valid request, GoClinica shall delete or anonymize your Personal Information and SPDI within a reasonable timeframe, except to the extent retention is required under Clause 9.2. Please note that withdrawing consent or cancelling your account may terminate GoClinica’s ability to provide Services to you, in accordance with Clause 3.3.
12

10. YOUR RIGHTS

10.1To the extent you qualify as a “Data Principal” under the DPDP Act, and subject to the phased implementation of the DPDP Act and the DPDP Rules described in Clause 1, you shall be entitled to exercise the following rights, in each case by writing to privacy@goclinica.com:
•the right to obtain a summary of the Personal Data being processed by GoClinica and the processing activities undertaken in respect thereof;
•the right to correction, updating, and completion of your Personal Data;
•the right to erasure of your Personal Data, unless retention is required for a specified purpose or under law (see Clause 9);
•the right to grievance redressal in the manner described in Clause 14 (Grievance Redressal and Contact) below; and
•the right to nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
10.2Separately, and independent of the DPDP Act, you have the right under the SPDI Rules to review the Personal Information and SPDI you have provided to us, and to have any inaccuracies corrected, by writing to privacy@goclinica.com.
10.3GoClinica shall endeavour to respond to any request made under this Clause 10 within a reasonable timeframe, and in any event within the timelines prescribed under applicable law.
10.4Once the relevant provisions of the DPDP Rules concerning Consent Managers come into force, you may additionally be entitled to manage, review, and withdraw your consent to the processing of your Personal Data through a Consent Manager registered with the Data Protection Board of India, in accordance with the DPDP Rules.
13

11. DATA STORAGE AND INTERNATIONAL OPERATIONS

11.1Your Personal Information and SPDI is primarily stored and processed in accordance with the data protection laws of India, including the SPDI Rules and, as applicable, the DPDP Act.
11.2As GoClinica grows its operations, it may operate in, or engage service providers, cloud infrastructure providers, or Practitioners’ software solutions located in, countries other than India. Where this is the case, GoClinica shall ensure that your Personal Information and SPDI is handled in accordance with the applicable data protection laws of the relevant country, in addition to meeting the requirements of Indian law described in Clause 11.1.
11.3Where the DPDP Act requires GoClinica to have regard to any restrictions notified by the Central Government of India on the transfer of personal data to specific countries or territories, GoClinica shall comply with such restrictions as they come into force.
11.4Where required under the SPDI Rules, GoClinica shall ensure that any third party or body corporate receiving sensitive personal data or information in connection with GoClinica’s operations in another country maintains the same level of data protection as is adhered to by GoClinica under this Policy.
14

12. CHANGES TO THIS PRIVACY POLICY

GoClinica reserves the right to update this Privacy Policy at any time.

•Significant Changes: If we make material changes to how we handle your personally identifiable information or to this Policy, we will provide notice via our Website or email, with a reasonable opportunity for you to review such changes before they take effect.
•Your Consent: If you continue to access or use our Services after such notice has been published or sent, you are deemed to have consented to the updated terms, save in respect of any processing for which applicable law requires GoClinica to obtain your fresh, specific consent.
•Objection: If you object to any changes and no longer wish to use our Services, you may contact support@goclinica.com to deactivate your account.
•Applicability: Unless otherwise stated, the current version of this Privacy Policy applies to all information we hold regarding you and your account.
15

13. CHILDREN’S AND MINORS’ PRIVACY

13.1GoClinica’s Services are intended for use by individuals who are 18 years of age or older. No minor may independently create or maintain an account. A minor’s profile may only be created as a dependent profile, linked to and maintained under the account of their parent or lawful guardian, strictly for the purpose of availing healthcare-related Services for that minor, in accordance with Clause 2.1.2 (Minor’s Profile as a Dependent) of our Terms of Use.
13.2Verifiable Parental Consent. Where a User registers a child (being an individual below 18 years of age, as defined under the DPDP Act) as a dependent, the User confirms that they are the parent or lawful guardian of such child and provides verifiable consent, on the child’s behalf, to the collection and processing of the child’s Personal Information and SPDI strictly for the purpose of availing the Services, in accordance with the DPDP Act.
13.3No Tracking or Targeted Advertising. GoClinica shall not knowingly undertake behavioural monitoring or targeted advertising directed at children, and shall not process a child’s personal data in any manner likely to cause harm to the child, in accordance with the DPDP Act.
13.4Other than in the circumstances described in Clause 13.1, our Website and Services are not intended for independent use by minors. We encourage parents and guardians to supervise their children’s online activities and utilize parental control tools to prevent the disclosure of personal information by a minor. If GoClinica becomes aware that it has inadvertently collected personal information directly from a minor otherwise than in accordance with Clause 13.2, GoClinica will take reasonable steps to delete such information and, where feasible, terminate the associated account.
16

14. GRIEVANCE REDRESSAL AND CONTACT

14.1Privacy Queries and Grievance Officer. If you have questions, concerns, or grievances regarding our data practices, wish to exercise any of the rights described in Clause 10, or have a grievance relating to content on the Website, please contact our Grievance Officer, who also serves as GoClinica’s privacy contact point, at:
•Name: Arun M
•Designation: Grievance Officer / Privacy Contact
•Company: HealthChip Technologies Private Limited (operating as GoClinica)
•Address: [Registered office address to be inserted]
•Email: privacy@goclinica.com, or through the “Contact Us” page at www.goclinica.com/contact.
•Phone: +91 63649 23399
14.2Significant Data Fiduciary Obligations. If and when GoClinica is designated a “Significant Data Fiduciary” under the DPDP Act, GoClinica shall appoint a Data Protection Officer based in India, whose details shall be published on the Website and provided to the Data Protection Board of India, in accordance with the DPDP Act.
14.3Response Timelines. GoClinica shall acknowledge receipt of any grievance under this Clause 14 within a reasonable timeframe, and shall endeavour to redress such grievances within the timelines prescribed under applicable law, including the SPDI Rules, the IG Rules, and, where applicable, the Consumer Protection (E-Commerce) Rules, 2020.
14.4Cybersecurity Incidents. Where GoClinica identifies or is notified of a cybersecurity incident or a personal data breach affecting your information, GoClinica shall report such incident to CERT-In within the timelines prescribed under the CERT-In Directions issued under Section 70B of the Information Technology Act, 2000, and, once the relevant provisions of the DPDP Act come into force, shall notify the Data Protection Board of India and affected Users in the manner and within the timelines prescribed thereunder.
18

SCHEDULE: INDICATIVE LIST OF INFORMATION BY SERVICE

This Schedule outlines the specific information collected based on the nature of the Services you access.

19

1. Registered End-Users

•Information: Name, mobile number, email address, and other details provided during registration.
•Purpose: To manage account credentials, facilitate appointment bookings, and store health-related information.
20

2. Guest End-Users (Unregistered)

•Information: Mobile number and other details required to confirm appointments.
21

3. Registered Practitioners (Free Listing)

•Information: Name, mobile number, email address, and practice details provided during registration.
•Purpose: To manage your listing and facilitate communications (SMS/Email) regarding bookings and patient interactions.
22

4. Unregistered Practitioners (Free Listing)

•Information: Name, mobile number, email address, and practice details provided to our representatives.
•Purpose: To maintain your public listing. We will send a confirmation email; if you do not wish to be listed, please notify support@goclinica.com immediately. We may contact you periodically to encourage account registration.
23

5. Practitioners (GoClinica Clinic Management Solution User)

•Information: Name, mobile number, email address, and digital signature.
•Digital Signatures: Your signature is used solely for prescriptions and clinical notes in accordance with regulatory requirements; GoClinica will not access it for any other purpose.
•Patient Data: Upon registration, we may access non-personally identifiable patient records. You are responsible for ensuring your patients are aware of this data access.
•Feedback System: If you activate ‘End-User Feedback,’ you authorize us to use patient contact details to send feedback requests. You agree to inform your patients of the possibility of receiving these communications.
24

6. Practitioners (Using ‘GoClinica Ads’)

•Information: Name, mobile number, email address, and registration data as requested on the ‘GoClinica Ads’ portal.
25

7. GoConsult Platform Users (End-Users and Practitioners)

•Information: Name, mobile number, email address, and account registration details.
•Purpose: To facilitate virtual consultations and identity verification on the Consult platform, in accordance with the Telemedicine Practice Guidelines, 2020.

© 2026 HealthChip Technologies Private Limited (operating as GoClinica). All rights reserved.

For questions regarding this document, please contact support@goclinica.com or visit goclinica.com/contact.