Privacy Policy
Last updated: September 13, 2026
1. Introduction
Welcome to Zospital ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. This policy is prepared in compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA) and incorporates principles from global standards like the GDPR.
2. Definitions
- Personal Data: Any data about an individual who is identifiable by or in relation to such data.
- Processing: An automated operation or set of operations performed on digital personal data, such as collection, storage, use, sharing, etc.
- Data Fiduciary: The entity (in this case, Zospital) that determines the purpose and means of processing personal data.
- Data Principal: The individual to whom the personal data relates (i.e., you, our user).
3. Information We Collect
We collect information you voluntarily provide to us and information that is automatically collected when you use our services.
Information You Provide to Us
- Identity & Contact Data: Name, email address, phone number, date of birth.
- Health Information (Sensitive Personal Data): Information about your health conditions, medical history, treatments, and appointments. We collect this with your explicit consent to provide healthcare services.
- Account Data: Username, password, and other security information for authentication.
Information We Collect Automatically
- Log and Usage Data: We automatically collect log and usage data, which is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our services.
- Optional Account Analytics: If you switch on “Help improve Zospital” in your account profile, we collect a pseudonymous account code, the page or feature used, fixed interaction names, provider type and numeric provider ID where relevant, success or failure, and whether you were using patient or medical-professional mode. We do not include your name, phone, email, IP address, device user-agent, booking reason, messages, medical records, appointment details, or other health information in these product-analytics events.
- Cookies and Similar Technologies: We and our partners use cookies and similar device identifiers to access or store information on your device. These are used for authentication and security, for analytics and measurement, and for advertising. See Advertising and Cookies for the categories we use and how to control them.
4. How We Use Your Information
We process your data for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent. These purposes include:
- To Provide and Manage Our Services: To create and manage your account, book appointments, and facilitate consultations.
- To Communicate With You: To send you administrative information, such as updates to our terms and policies.
- For Legal and Security Purposes: To comply with legal obligations and to protect the security and integrity of our platform.
- To Improve the Product: With your optional account-analytics consent, to understand feature adoption, broken journeys, and aggregated usage patterns. You can withdraw this consent at any time from your profile, as easily as you gave it.
6. Data Retention
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). Optional account product-analytics events are configured for a 90-day retention period where supported. Consent, account-access, login, and security audit records may be retained longer where needed to protect accounts, investigate abuse, resolve disputes, or meet legal obligations.
7. Data Security
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet can be guaranteed to be 100% secure.
8. Your Rights and Choices
You may contact us with the following requests. Statutory rights apply to the extent the relevant law is in force and covers the processing:
- Right to Access: You have the right to request a copy of your personal information.
- Right to Correction & Erasure: You have the right to request correction of inaccurate data or erasure of your data.
- Right to Withdraw Consent: You have the right to withdraw your consent at any time where we are relying on consent to process your personal information.
- Right to Grievance Redressal: You have the right to have any grievances redressed by contacting our Grievance Officer.
For doctor directory information, see our Doctor Directory and Profile Review Policy. Requests are reviewed individually; a limited listing may be retained where justified, subject to applicable law. You can request a profile review without becoming a partner or claiming the listing.
9. Policy for Minors
We do not knowingly solicit data from or market to children under the age of 18 years. By using the services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the services.
11. Changes to This Policy
We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last updated" date. We encourage you to review this privacy policy frequently.
12. Contact Us
If you have questions or comments about this policy, you may contact us by email: