Privacy Policy

Last updated: October 18, 2025

1. Introduction

Welcome to Zospital ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. This policy is prepared in compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA) and incorporates principles from global standards like the GDPR.

2. Definitions

  • Personal Data: Any data about an individual who is identifiable by or in relation to such data.
  • Processing: An automated operation or set of operations performed on digital personal data, such as collection, storage, use, sharing, etc.
  • Data Fiduciary: The entity (in this case, Zospital) that determines the purpose and means of processing personal data.
  • Data Principal: The individual to whom the personal data relates (i.e., you, our user).

3. Information We Collect

We collect information you voluntarily provide to us and information that is automatically collected when you use our services.

Information You Provide to Us

  • Identity & Contact Data: Name, email address, phone number, date of birth.
  • Health Information (Sensitive Personal Data): Information about your health conditions, medical history, treatments, and appointments. We collect this with your explicit consent to provide healthcare services.
  • Account Data: Username, password, and other security information for authentication.

Information We Collect Automatically

  • Log and Usage Data: We automatically collect log and usage data, which is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our services.
  • Cookies and Similar Technologies: We use cookies to access or store information.

4. How We Use Your Information

We process your data for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent. These purposes include:

  • To Provide and Manage Our Services: To create and manage your account, book appointments, and facilitate consultations.
  • To Communicate With You: To send you administrative information, such as updates to our terms and policies.
  • For Legal and Security Purposes: To comply with legal obligations and to protect the security and integrity of our platform.

5. Sharing and Disclosure

We only share your information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.

  • Healthcare Providers: We share your health information with doctors and clinics you book appointments with, based on your explicit consent.
  • Service Providers: We may share your data with third-party vendors, service providers, or agents who perform services for us or on our behalf.
  • Legal Requirements: We may disclose your information where we are legally required to do so in order to comply with applicable law or a legal process.

6. Data Retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

7. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet can be guaranteed to be 100% secure.

8. Your Rights and Choices

Under the DPDPA and other regulations, you have specific rights regarding your personal data:

  • Right to Access: You have the right to request a copy of your personal information.
  • Right to Correction & Erasure: You have the right to request correction of inaccurate data or erasure of your data.
  • Right to Withdraw Consent: You have the right to withdraw your consent at any time where we are relying on consent to process your personal information.
  • Right to Grievance Redressal: You have the right to have any grievances redressed by contacting our Grievance Officer.

9. Policy for Minors

We do not knowingly solicit data from or market to children under the age of 18 years. By using the services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the services.

10. Changes to This Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last updated" date. We encourage you to review this privacy policy frequently.

11. Contact Us

If you have questions or comments about this policy, you may contact us by email or phone: