This Privacy Policy (“Policy”) describes how Odinova International Healthcare & Research Pvt. Ltd. (“Odinova”, “Company”, “we”, “us”, or “our”), in its capacity as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), collects, receives, stores, processes, uses, discloses, transfers, and protects your Personal Data when you access or use the website www.odinovainternational.in (“Platform”) and related services (“Services”).

Odinova respects your privacy and is committed to complying with applicable laws in relation to the collection, processing, storage, and transfer of Personal Data.

By accessing or using the Platform, you agree to be bound by the terms of this Policy. If you do not agree, please do not use the Platform.

1. What is Personal Data?

Personal Data means any data about an individual who is identifiable by or in relation to such data, whether directly or indirectly.

Sensitive Personal Data includes, but is not limited to:

• Passwords
• Financial information such as bank account, credit/debit card details
• Physical, physiological, and mental health condition
• Medical records and history
• Biometric information

Personal Data does not include data that has been irreversibly anonymized or aggregated such that it can no longer be used to identify an individual.

By using the Platform, you acknowledge that you voluntarily provide Personal Data, including Sensitive Personal Data, and consent to its processing in accordance with this Policy.

2. What Data We Collect

During your use of the Platform, we may collect the following categories of Personal Data:

2.1 Contact Information

Name, residential address, email address, and phone number.

2.2 Demographic Information

Age, gender, date of birth, nationality, and similar details.

2.3 Account and Usage Data

Login credentials, browsing activity, search history, order history, and interactions with the Platform.

2.4 Medical and Health Information

Prescriptions, medical records, and health-related information voluntarily provided by you for the purpose of availing healthcare services.

2.5 Financial Information

Payment details processed through authorized and RBI-compliant payment aggregators. The Company does not store complete financial credentials such as card numbers.

2.6 Technical and Device Information

IP address, browser type, device identifiers, operating system, and cookies data.

2.7 Communication Data

Information shared through emails, chat, customer support interactions, or other communication channels.

2.8 Voluntary Information

Any additional information you choose to provide through forms, surveys, or interactions.

3. Sources of Data Collection

We may collect Personal Data from:

• Information voluntarily provided by you through the Platform, email, or communication channels
• Payment gateways and financial service providers
• Logistics and delivery partners
• Regulatory authorities or third parties where permitted by law
  
  

4. Use of Cookies

The Platform uses cookies and similar technologies to enhance user experience, store preferences, and analyze usage patterns.

Cookies are small data files stored on your device. By using the Platform, you consent to the use of cookies.

You may disable or clear cookies through your browser settings; however, certain features of the Platform may not function properly as a result.

5. How We Use Your Data

We process your Personal Data for purposes including:

5.1 Service Delivery

Registration, order processing, prescription verification, and fulfillment of Services.

5.2 Communication

Providing updates, alerts, notifications, and customer support.

5.3 Compliance

Compliance with applicable pharmaceutical, healthcare, tax, and IT laws.

5.4 Security and Fraud Prevention

Preventing unauthorized access, fraud detection, and ensuring Platform integrity.

5.5 Improvement and Analytics

Research, analysis, and improvement of our products and services using anonymized or aggregated data.

5.6 Marketing and Promotions

Sending promotional communications and offers only where you have provided consent.

The Company does not sell or commercially exploit Personal Data, particularly health-related data.

6. Data Retention

We retain Personal Data for as long as necessary to:

• Provide Services
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements

We may retain anonymized or aggregated data for research and statistical purposes.

Even after account closure, certain data may be retained where required by law or for legitimate purposes such as fraud prevention.

7. Disclosure and Transfer of Data

We may disclose or transfer Personal Data to:

7.1 Service Providers

Third-party vendors providing services such as hosting, data storage, analytics, and customer support.

7.2 Payment Aggregators

RBI-compliant entities for processing payments.

7.3 Logistics Partners

For delivery of orders, limited to necessary contact details.

7.4 Affiliates and Group Entities

For operational and service-related purposes within lawful limits.

7.5 Legal and Regulatory Authorities

In response to lawful requests, court orders, or statutory obligations.

7.6 Business Transfers

In connection with mergers, acquisitions, restructuring, or sale of assets.

All such entities are contractually obligated to maintain confidentiality and implement appropriate security measures.

8. Cross-Border Data Transfer

Personal Data may be transferred to jurisdictions outside India in accordance with applicable laws and only to entities ensuring an adequate level of data protection.

9. Data Security

We implement reasonable technical, administrative, and physical safeguards to protect Personal Data against unauthorized access, disclosure, alteration, or destruction.

However, no system is completely secure. The Company shall not be held responsible for any unauthorized access or loss of data arising from circumstances beyond its reasonable control, including but not limited to cyber-attacks, device compromise, or user negligence.

10. Your Rights

Subject to applicable law, you have the following rights:

10.1 Right to Access

Request information about your Personal Data and its processing.

10.2 Right to Correction

Request correction of inaccurate or incomplete data.

10.3 Right to Erasure

Request deletion of Personal Data, subject to legal obligations.

10.4 Right to Withdraw Consent

Withdraw consent previously provided for data processing.

10.5 Right to Grievance Redressal

Raise concerns regarding processing of your data.

10.6 Right to Nominate

Nominate another individual to exercise your rights in case of incapacity or death.

11. Withdrawal of Consent

You may withdraw your consent at any time by contacting us. Withdrawal of consent may result in limitation or discontinuation of Services where such data is necessary.

12. Duties of Users

You agree to:

• Provide accurate and complete information
• Not impersonate another individual
• Not submit false or misleading data

The Company reserves the right to suspend or terminate access in case of violation.

13. Children’s Privacy

The Platform is not intended for individuals under the age of 18 years.

We do not knowingly collect Personal Data of minors. If such data is identified, it will be deleted upon notification.

14. Third-Party Services

The Platform may contain links to third-party websites or services.

The Company is not responsible for the privacy practices or content of such third-party platforms. Users are advised to review their respective policies before use.

15. Grievance Redressal

For any concerns, complaints, or requests regarding this Policy or your Personal Data, you may contact:

Email: info@odinovainternational.in
Response Time: Within 48 hours of receipt

If you are not satisfied with the resolution, you may approach the Data Protection Board of India as per applicable law.

16. Changes to this Policy

The Company reserves the right to revise or update this Policy at any time.

Any changes will be posted on this page. Continued use of the Platform after such updates shall constitute acceptance of the revised Policy.