Privacy Policy

This Privacy Policy (“Policy”) is issued by Nextbig Healthcare Private Limited, operating under the brand name Inticure. It is published in compliance with Section 43A and Section 72A of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023, together with all other Applicable Law.

By accessing or using the Platform, you acknowledge that you have read, understood and accepted this Privacy Policy, and consent to the collection, use, processing and disclosure of your information as set out herein.

1. Definitions

• Personal Information: Information capable of identifying a natural person.
• Sensitive Personal Data or Information (SPDI): Includes passwords, financial details, health information, sexual orientation, medical records, biometric information, etc.

2. Collection of Information

We may collect Personal Information and SPDI when you register, provide medical history, interact with Practitioners, make payments, or otherwise use the Platform. Location data (e.g., IP address, device identifiers) may also be collected.

3. Use of Information

• Facilitating consultations and related services
• Maintaining consultation records
• Compliance with law
• Improving Platform quality and security

4. Disclosure of Information

Information may be shared with Practitioners, employees, payment processors, regulators, or successor entities under lawful basis. We are not responsible for disclosures made by you outside the Platform.

5. Data Storage and Retention

Health data is stored in India. Non-medical data may be processed outside India with adequate safeguards. Data is retained only as necessary under law.

6. User Rights

Subject to law, you may:

• Access, review and update your data
• Withdraw consent (without affecting lawful prior processing)
• Request deletion (where legally permissible)
• Be notified of SPDI breaches within 72 hours

7. Security Practices

We implement reasonable security practices, though absolute security cannot be guaranteed.

8. Minors

Users under 18 may use the Platform only with guardian consent, which shall be deemed as acceptance of this Policy.

9. Cross-Border Data

All RMP consultations are deemed to occur within India. Users with Non-RMP Practitioners consent to transfer of their data to India.

10. Indemnity

You agree to indemnify Inticure from claims, damages, or liabilities arising from your breach of this Policy or Governing Documents.

11. Grievance Officer

12. Governing Law and Dispute Resolution

This Policy shall be governed by Indian law. Disputes unresolved within 15 days shall be referred to arbitration in Bangalore under the Arbitration and Conciliation Act, 1996. Courts at Bangalore shall have exclusive jurisdiction.

13. Amendments

We may amend or update this Privacy Policy at our discretion. Material changes will be notified by email or Platform notice.