Here is a comprehensive, legally structured Privacy Policy document tailored specifically for your medical space rental and healthcare e-commerce platform in Indore, India.
It is compliant with the Digital Personal Data Protection Act (DPDP Act 2023) and the Information Technology Act, 2000 (IT Rules).
1. Introduction & Overview
Welcome to Nexux (“Medical Ecommerce”). We operate a unified healthcare platform dedicated to facilitating Medical Space Rentals (connecting healthcare professionals with clinic/OPD spaces) and Medical E-Commerce (supplying medical equipment, clinical disposables, and healthcare products across Indore and surrounding regions).
We respect your privacy and are committed to protecting the personal and professional data you share with us. This Privacy Policy outlines how we collect, use, store, share, and protect your information when you visit our website, submit inquiries, list or rent medical spaces, or purchase medical products from us.
By accessing or using our website and services, you consent to the data practices described in this policy.
2. Information We Collect
We collect information directly from you, automatically through your interaction with our website, and from verified third parties.
A. Personal & Contact Data
- Identity Information: Full Name, Date of Birth, Gender.
- Contact Details: Email Address, Mobile/WhatsApp Number, Business/Clinic Address, Delivery Address in Indore.
B. Professional & Medical Practice Data (For Doctors & Clinics)
- Medical Credentials: Medical Registration Number, Specialization, Degree certifications, and Affiliations.
- Clinic/OPD Requirements: Preferred locations (e.g., Vijay Nagar, Bhawarkua, New Palasia), timing shifts, budget parameters, and space requirements.
C. Property & Space Listing Data (For Property Owners / Clinic Hosts)
- Property Details: Address, photographs, square footage, available shift timings, diagnostic facilities, and compliance/license certifications.
- Ownership Documents: Verification documents proving authority to lease or sub-lease clinical spaces.
D. E-Commerce & Transactional Data
- Order Details: Products purchased (B2B clinical supplies, disposables, home-care equipment), quantity, purchase history.
- Financial Information: Billing address, GST number (for tax invoicing), payment transaction IDs. (Note: We do not directly store credit card or debit card numbers; all payments are processed through RBI-authorized payment gateways).
E. Technical & Usage Data
- Device & Connection: IP address, browser type, operating system, network details.
- Usage Behavior: Pages viewed, search queries, properties viewed, products added to cart, session durations, and referral URLs.
3. How We Use Your Information
We process your data strictly for legitimate business and operational purposes, including:
- Facilitating Medical Space Rentals: Matching doctors with appropriate OPD/clinic space hosts in target Indore localities.
- Processing E-Commerce Orders: Managing product orders, processing payments, generating GST invoices, and dispatching local courier deliveries.
- Customer Communication: Sending order confirmations, booking updates, response to inquiries, and critical service notifications via SMS, Email, or WhatsApp.
- Identity & Compliance Verification: Verifying medical registration details of doctors and ownership authenticity of listed rental spaces.
- Platform Improvement: Analyzing traffic trends, user preferences, and site activity to optimize platform performance and user experience.
- Legal & Regulatory Compliance: Complying with applicable Indian laws, tax duties, law enforcement requests, and legal disputes.
4. Sharing & Disclosure of Information
We do not sell, rent, or trade your personal data to third-party advertisers. We share information only under the following strictly defined conditions:
- Between Space Seekers and Space Hosts: Sharing necessary contact and practice details between verified doctors and clinic owners to finalize rental agreements.
- Logistics & Delivery Partners: Providing name, address, and contact numbers to local delivery agents and courier partners to fulfill e-commerce deliveries.
- Payment Gateways: Sharing order values and basic customer details with PCI-DSS compliant payment processors to secure online payments.
- Service Providers: Third-party IT support, web hosting, customer support tools, and email/WhatsApp automation providers bound by confidentiality agreements.
- Legal & Regulatory Obligations: Disclosing information to government authorities or courts if required by Indian law, order, or regulation.
5. Cookies & Tracking Technologies
We use cookies, web beacons, and similar tracking tools to enhance your browsing experience.
- Essential Cookies: Necessary for the site to function properly (e.g., shopping cart persistence, session login).
- Analytics Cookies: Help us understand visitor usage patterns (e.g., Google Analytics) to improve navigation and search experience.
- Preference Cookies: Remember your settings, preferred locations, and recently viewed medical spaces.
You can disable or block cookies through your browser settings; however, some parts of the site (such as checkout or location filtering) may not function optimally as a result.
6. Data Security & Protection
We implement robust administrative, technical, and physical security measures to safeguard your personal data:
- SSL/TLS Encryption: All data transmitted between your browser and our website is secured using HTTPS encryption.
- Restricted Access: Access to sensitive user data is restricted to authorized employees and partners who need it to operate our services.
- Secure Storage: User data is stored on secure, firewall-protected servers located within compliant cloud infrastructure.
While we take all reasonable precautions, no data transmission over the Internet can be guaranteed as 100% secure. You are responsible for maintaining the confidentiality of any user account credentials you create.
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law (e.g., tax records, GST invoices, accounting requirements). Once the retention period expires, your data is securely deleted or anonymized.
8. Your Rights Under Indian Data Protection Laws (DPDP Act 2023)
As a user residing in India, you have specific rights regarding your personal data:
- Right to Access: Request a summary of personal data held about you and processing activities.
- Right to Correction & Erasure: Request correction of inaccurate/outdated data or request deletion of your personal data when no longer required.
- Right to Withdraw Consent: Withdraw consent previously given for marketing or optional data processing at any time.
- Grievance Redressal: Right to register a complaint regarding data processing with our designated Grievance Officer.
To exercise any of these rights, please contact us at [Your Contact Email].
9. Third-Party Links
Our website may contain links to external third-party websites, payment portals, or partner services. We are not responsible for the privacy practices or content of those external sites. We encourage you to read the privacy policies of any third-party platform you visit.
10. Grievance Redressal Officer
In accordance with the Information Technology Act 2000, IT Rules, and the Digital Personal Data Protection Act 2023, the contact details of our Grievance Redressal Officer are provided below:
- Designation: Data Protection & Grievance Officer
- Company Name: Nexus
- Address: Vijay Nagar, Indore, MP – 452010
- Email: ecommercewebguru@gmail.com
We will acknowledge your grievance within 24–48 hours and attempt to resolve it within 15 to 30 business days.
11. Updates to This Privacy Policy
We reserve the right to modify or update this Privacy Policy at any time to reflect operational, legal, or regulatory changes. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this page periodically.
