Alpha MD Private Limited is committed to protecting the privacy and security of the personal data of the users of our Alpha MD mobile application and website. This Privacy Notice describes who we are, how and why we might collect, store, use, disclose, safeguard and/or share (‘process’) your information, what are your rights and how you can exercise your data protection rights, when you user our services (‘Services’), such as when you:

• Visit our website at http://www.alphamd.com, or any other website of ours that links to this privacy notice
• Engage with us in other related ways, including any sales, marketing or events

Please read this notice carefully.

Our name and address

Alpha MD Private Limited, 19, Unique Industrial Estate, Off V S Marg, Prabhadevi, Mumbai – 400025.

Questions or Concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you still have any questions or concerns, please contact our Data Protection Officer, Ms. Nishi Sharma at the email address nishi.sharma@alphamd.com

To contact Alpha MD’s Support Team: https://www.alphamd.com/connect-us

What we do?

We are a global healthcare consulting company. We work with industry and other healthcare providers to drive change and improve the delivery of care, leveraging the latest technology and best practices to ensure that everyone has access to high-quality, affordable healthcare.

We might collect personal information while delivering our services in the form of:

• AMDHA Application, is designed to help patients manage their health and engage in self-care and preventive care outside of hospitals and clinics. The platform provides patients with access to educational materials and enabling them to better manage their health, helps improve clinical outcomes and provides superior patient experience.

Types of ALPHA MD Service Users
Along with patients, the AMDHA Service can be used by three other types of users:
1. Carers
2. Professionals
3. Organizations

Privacy Notice for AMDHA is drafted as a separate document and can be found at: “Privacy Policy AMDHA – Alpha MD”

Information on these various roles is found in the AMDHA manual.

• Clinical Development, we help organizations with clinical trial design and management, data analysis and interpretation, and regulatory support. The steps are taken to ensure that subject’s personal / protected health information (PHI) is kept confidential and access to such information is limited to research staff who are authorized to do so. Procedures are in place to protect personal information of study subjects.

• Orcha India Data Protection Mark (OIDPM), we might collect personal information at the time of webinars and other related events related to OIDPM. This information can be used to engage with us in other related ways, including any sales, marketing or future events.

• Job Applicants and Prospects, if you apply for a role at Alpha MD we will collect the following information about you: 

• Name 
• Telephone number 
• Email address 
• Employment history and other data in your CV or otherwise submitted to us 
• Assessments completed by you as part of the application process 
• Feedback about you from our staff and your referees 
• Alpha MD is accountable for how your information is used for these purposes. We collect this information on the basis of our legitimate interest to assess job applications and to take steps necessary to enter into an employment contract with you. We also collect it because we have a legal obligation to ensure applicants have the right to work. 

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, including profiling, unless you have given us your consent to do so, or it is necessary for entering into or the performance of a contract.

1. What information do we collect?

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. We guarantee that we will collect and process users’ personal information in accordance with our privacy notice and applicable laws and regulations.

Personal Information Provided by You. The personal information that we collect depends on the context of your interaction with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Names
• Contact numbers
• Email Addresses
• Mailing Addresses
• Contact or Authentication Data
• Date of Birth / Age
• Job Title

Sensitive information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

• Health data
• Financial data

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected. We automatically collect certain information when you visit, use or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device or usage information, such as:

• IP address
• Browser and device characteristics
• Operating system
• Language preferences
• Device name, country, location
• Information about how and when you use our Services
• Pages visited and the time spent on those pages and other technical information

This information is primarily needed to maintain security and operation of our Services, and for our internal analytics and reporting purposes.

2. How do we process your information?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts – We may process your information so you can create and log in to your account, as well as keep your account in working order.

• To deliver and facilitate the delivery of services to the users/clients – We may process your information to provide you with the requested service.

• To respond to user enquiries / offer support to users / clients – We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.

• To send administrative information to you – We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.

• To request feedback – We may process your information when necessary to request feedback and to contact you about your use of our Services.

• To send you marketing and promotional communications – We may process your information when necessary for our marketing purposes, if this is in accordance with the consent provided. You can opt out of our marketing emails, including newsletters and promotional materials at any time. For more information, see ‘WHAT ARE YOUR PERSONAL DATA RIGHTS?’ below.

• To save or protect an individual’s vital interest – We may process your information when necessary to save or protect an individual’s or third party’s vital interest, such as to prevent harm.

3. What legal basis do we rely on to process your personal information?

Alpha MD business operations are in compliance with the Digital Personal Data Protection Act, 2023. As such, we may rely on the following legal basis to process your personal information:

• Consent – We may process your information if you have given us permission (i.e. consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about it in ‘WHAT ARE YOUR PERSONAL DATA RIGHTS?’ below.
• Performance of a contract – We may process your information when we believe it is necessary to fulfil our contractual obligations to you, including providing our Services or at your request prior to entering a contract with you.

• Legitimate interests – We may process your personal information when it is necessary to achieve our business legitimate interests and those interest do not outweigh your interests and fundamental rights and freedom.

For example, sending users information about special offers and discounts on our products and services.

• Legal obligations – We may process your personal information when it is necessary to comply with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights or disclose your information as legal evidence.

4. When and with whom do we share your personal information?

We do not use or disclose your information to anyone except as described in this Privacy Notice.

If you send us a request for help (details below) you are likely to tell us your name and email address. We will only use this information to provide the help you have requested.

Alpha MD may further share your personal information in the following situations:

• Business Transfers – We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or portion of our business to another company.
• Business Partners – We may share your personal information with our business partners to offer you certain products, services or promotions.
  

ALPHA MD may contract companies to provide services on our behalf, such as our support desk or to answer queries about the Service. We give those organisations access only to the minimum personal information to help you with your queries, such as your IP address (your computer’s location) or e-mail address. They are bound by a contract and a duty of confidentiality. These companies cannot access your health information, which is encrypted.

5. Do we use Cookies or other Tracking Technologies?

We use cookies and similar tracking technologies (Pixels or web beacons) to enhance your experience on our website, maintain the security of our Services, prevent crashes and assist with basic site functions.

A Cookie is a small piece of code that is sent from our website, and stored in your web browser. Cookies relay certain information to us or to third parties that enables us to:

• Recognise your computer;
• Store your preferences and settings;
• Understand the web pages you have visited;
• Enhance your user experience by delivering content and advertisements specific to your inferred interests;
• Perform searches and analytics; and
• Assist with security administrative functions.

Specific information about how we use such technologies, type of cookie used, expiry periods and how you can refuse certain cookies is set out in our ‘Cookie Policy – Alpha MD’

We sometimes work with third parties to advertise, provide or complement our Services, and these partners may set and access their own Cookies, pixel tags and similar technologies on your device.

Google Analytics:

We may share your information with Google Analytics, to track and analyse the use of our Services, assisting with fraud prevention, and providing certain features to you. To opt out of being tracked by Google Analytics across the Services, visit Google Analytics Opt-out Browser Add-on Download Page. For more information on the privacy practices of Google, please visit the Privacy Policy – Privacy & Terms – Google.

X Tweet Button, Facebook Like Button and LinkedIn Button, YouTube and Instagram: 

These are functions provided by X, Facebook, LinkedIn, YouTube, Instagram respectively, companies with whom we are not related. By simply clicking on these push-buttons on the Website, the function makes it possible to share liking of Alpha MD posts, articles and other content on the relevant social media site, without having to exit the page. This way the user links his/her/its relevant social media profile to Alpha MD and makes this information accessible to anyone on the web, subject to the terms of use and privacy policies of each social media platform. For further information on the use of the Personal Information by the social media platforms, please consult the following links:

X Privacy Policy

Meta Privacy Policy – How Meta collects and uses user data | Privacy Centre | Manage your privacy on Facebook, Instagram and Messenger | Facebook Privacy

LinkedIn Privacy Policy  

Our website may contain links to other websites. Therefore, it is important that you know that our Privacy Notice does not extend to those third-party websites, as their policy(ies) may differ from ours.

6. How long do we keep your information?

Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected or until you ask us to delete it.

At the end of that retention period i.e. Account lifetime, or as per applicable legal requirements (for example: in cases of legal obligations pursuant to fraud), we will either delete your data completely or anonymise it, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning. If this is not possible (for example: your information is stored in the backup archives) then we will securely store your data and isolate it from any further processing until deletion is possible.

7. How do we keep your information safe? 

We have put in place appropriate administrative, technical, and physical security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, destroyed, or accessed without authorisation. These safeguards vary based on the sensitivity of the information that we collect and store.

These measures include confidentiality agreements with third parties, secure development practices, security due diligence of service providers, products, services that may be used and ISO 27001-based organisational security policies. We have also put in place procedures to deal with any suspected personal data breaches and will notify you and any applicable regulator of a breach where we are legally required to do so.

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee or promise that hackers, cybercriminals or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal or modify your information.

8. Do we collect information from Minors i.e. Children?

We adopt a range of measures to try to ensure that no information is knowingly solicited from individuals who do not meet the minimum age of 18 (or other applicable age based on your jurisdiction).

Processing of any personal data of a child or a person with disability, is done through verifiable consent of the parent or lawful guardian. No processing shall be done to cause any detrimental effect on the well-being of your child. Also, Alpha MD does not undertake tracking or behavioral monitoring or targeted advertising directed at your child.

9. What are your personal data rights? 

Where Alpha MD acts as the Data Fiduciary, we will respect your rights under data protection law. We verify all requests through email before actioning them and reserve the right to deny a request where we are unable to verify your identity satisfactorily. This also applies to requests submitted on your behalf by someone else. 

If you have any queries regarding exercising your rights, we encourage you to contact us. Please email to our Consent manager at info@alphamd.com  

• Access – you have the right to ask us for copies of your personal data. This right always applies. There are some exemptions, which means you may not always receive all the personal data we process. 

• Rectification – you have the right to ask us to rectify any of your personal data that you think is inaccurate or incomplete or not updated. This right always applies. 

• Erasure – you have the right to ask us to erase your personal data where it is no longer required for purpose for which it was collected, or you withdraw your prior consent to us processing it and we have no other legal ground for processing it, or it is being processed unlawfully, or when it must be erased to comply with a legal obligation, or it is being used for direct marketing purposes where we have no legitimate grounds for us doing so. 

• Restriction – you have the right to ask us to restrict the processing of your personal data where it is inaccurate (allowing us to verify the accuracy), or it is being processed unlawfully (and you want us to stop processing rather than erasing it), or where you have objected to us processing it while we’re verifying whether we have legitimate grounds for processing, or it is no longer required for purpose for which it was collected and you want us to keep it for the establishment, exercise or defence of legal claims. 

• Portability – this only applies to personal data you have given us. You have the right to ask us to transfer the information you provided us from one organisation to another or give it to you. This only applies if we are processing personal data based on your consent or as part of a contract, or in talks with you about entering into a contract and the processing is automated. 

• Objection / Opt-out – you have the right to object to processing your personal data if we are using legitimate interests as our lawful basis for processing, or it is being used for direct marketing. You can unsubscribe from our marketing and promotional communications at any time by contacting us using the details provided in the section ‘How can you contact us about this notice?’ below. You will then be removed from our marketing lists. However, we may still communicate with you – for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

• Withdrawing consent – you can withdraw your consent that you have previously given to us for one or more specified purposes to process your personal data. This will not affect the lawfulness of any processing carried out before you withdraw your consent. It may mean we are not able to provide certain products or services to you and we will advise you if this is the case. 

• Grievance redressal – you shall have the right to have readily available means of grievance redressal in respect of any act or observance of any omission to execute obligations by Alpha MD in relation to the personal data processing or the exercise of your rights under the provisions of Act. 

You have the right to complain to Data Protection Board of India, only after exhausting this opportunity of grievance redressal with Alpha MD.

• Nominate – you shall have the right to nominate, in such manner as may be prescribed, any other individual, who shall, in the event of your death or incapacity, shall exercise your rights. 

If you have any questions or comments about your privacy rights, you may email us at nishi.sharma@alphamd.com.

10.What are your Duties?

With the rights, comes the duties. We encourage you to perform the following duties:

• Not to impersonate another person while providing personal data for a specified purpose. 
• Not to suppress any material information while providing personal data for a specified purpose. 
• Not to register a false or frivolous complaint or grievance with Alpha MD or Supervisory Authority. 
• Furnish only verifiably authentic information, while exercising right to rectification or erasure. 

11. How can you Contact Us about this Notice?

If you have any questions or comments about this Notice, you may contact our Data Protection Officer (DPO) by email at nishi.sharma@alphamd.com or contact us by post at:

Alpha MD Private Limited

Data Protection Officer

19, Unique Industrial Estate, Off V S Marg,

Prabhadevi,

Mumbai – 400025

India

12. Changes to This Privacy Notice

We may update our Privacy Notice from time to time. The updated version will be indicated by an updated ‘Revised’ date at the top of this privacy notice. We will notify you of any changes either by prominently posting a notice of such changes or directly send you a notification about the new version. We encourage you to review this Privacy Notice periodically to be informed of how we are protecting your information.