Select Location

Privacy Policy

Privacy Policy

Applicable to Users in India only

Effective Date: 14th of August 2026

1. Introduction

Welcome to QDx Health Pvt. Ltd (“we,” “our,” or “us”).

We operate a digital healthcare platform that enables users to search, compare, book and manage diagnostic laboratory services offered by partner laboratories (“Lab Partners”).

This Privacy Policy explains how we collect, process, use, store, share and protect your personal data when you use our website, mobile application or related services.

We are committed to protecting your privacy and processing your personal data in accordance with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

2. Roles Under Data Protection Law

For the purposes of applicable data protection laws:

  • “Data Principal” means the individual whose personal data is processed.
  • “Data Fiduciary” means the entity that determines the purpose and means of processing personal data.
  • “Data Processor” means an entity processing personal data on behalf of a Data Fiduciary.

QDx Health Pvt. Ltd acts as a Data Fiduciary for personal data processed through its platform and may engage authorized Data Processors for providing platform-related services.

3. Personal Data We Collect

We may collect the following categories of personal data:

A. Identity and Contact Information

  • Full name.
  • Mobile number.
  • Email address.
  • Date of birth.
  • Gender.
  • Residential address.
  • Location information.

B. Healthcare and Diagnostic Information

  • Diagnostic test bookings.
  • Test preferences.
  • Sample collection details.
  • Laboratory reports.
  • Medical documents uploaded by you.
  • Health information voluntarily provided by you.

C. Payment Information

  • Transaction details.
  • Billing information.
  • Payment confirmation details.

Payment card details may be processed directly by secure payment service providers and may not be stored by us.

D. Technical Information

  • Device information.
  • IP address.
  • Browser information.
  • Application usage data.
  • Login activity.

4. Purpose of Processing Personal Data

We process your personal data for the following purposes:

  • Creating and managing your account.
  • Providing diagnostic test booking services.
  • Connecting you with partner laboratories.
  • Scheduling sample collection.
  • Delivering diagnostic reports.
  • Processing payments.
  • Providing customer support.
  • Sending service notifications.
  • Improving platform functionality.
  • Detecting fraud, misuse and security threats.
  • Maintaining records required under applicable laws.

 

We collect and process only data necessary for the specified purpose of providing our services. The DPDP Act requires processing to be connected with a lawful purpose and requires appropriate notices and consent mechanisms where applicable.

5. Consent and User Choices

Where required under applicable law, we obtain your consent before processing personal data.

Your consent:

  • Must be voluntary, specific, informed and unambiguous.
  • Will be collected through a clear affirmative action.
  • May be withdrawn by you at any point of time.

 

Withdrawal of consent may affect our ability to provide certain services that require processing of your personal data.

The DPDP Act provides individuals control over consent, including the ability to withdraw consent.

6. Sharing of Personal Data

We may share your personal data with:

A. Partner Laboratories

We share necessary information with selected diagnostic laboratories to:

  • Process your bookings.
  • Arrange sample collection.
  • Conduct diagnostic tests.
  • Generate and deliver reports.

B. Service Providers

We may engage third parties for:

  • Cloud hosting.
  • Data storage.
  • Payment processing.
  • Communication services.
  • Technology support.
  • Cybersecurity services.

C. Legal and Regulatory Authorities

We may disclose information when required:

  • By applicable law.
  • By government authorities.
  • Through legal proceedings.
  • To protect rights, safety or security.

 

We do not sell your personal data.

7. Diagnostic Reports and Health Information

Health and diagnostic information are sensitive personal information. We take reasonable measures to protect such information through:

  • Access controls.
  • Authentication mechanisms.
  • Secure data transmission.
  • Monitoring and security practices.

 

Access to diagnostic reports is provided only to authorized users and permitted parties.

8. Data Security Measures

We implement reasonable security safeguards designed to protect personal data against:

  • Unauthorized access.
  • Accidental loss.
  • Disclosure.
  • Alteration.
  • Misuse.

 

Security measures may include encryption, restricted access permissions, monitoring and periodic reviews.

9. Data Retention

We retain personal data only for as long as necessary to:

  • Provide requested services.
  • Maintain transaction records.
  • Meet legal obligations.
  • Resolve disputes.
  • Enforce agreements.

 

When personal data is no longer required, we will securely delete or anonymize it in accordance with applicable requirements.

10. Your Rights as a Data Principal

Subject to applicable law, you may have rights including:

  • Access to information about your personal data.
  • Correction of inaccurate or incomplete personal data.
  • Erasure of personal data where applicable.
  • Withdrawal of consent.
  • Grievance redressal.
  • Nomination of another person to exercise rights in certain circumstances

 

Requests may be submitted through:

Email: care365@qdxhealth.in
Phone: +91 6366916689

11. Children’s Personal Data

Our services are not intended for children without appropriate authorization.

Where personal data of children is processed, we will comply with applicable requirements relating to parental or guardian consent and additional protections under applicable law.

12. Third-Party Laboratory Privacy Practices

Partner laboratories may independently process personal data according to their own privacy policies and legal obligations.

Users are encouraged to review the privacy policies of laboratories providing diagnostic services.

13. Data Breach Notification

In the event of a personal data breach, we will take appropriate steps as required under applicable law, including notifying relevant parties where required.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Any changes will be published on our platform with an updated effective date.

15. Contact Information

Data Fiduciary: QDx Health Pvt Ltd

Registered Address:
450, 2nd Floor, 6th Main Road,7th Cross, Mico Layout, BTM 2nd Stage, Bengaluru-5600076

Email: care365@qdxhealh.in

Phone: +91 6366916689

Last Updated: 14th of August 2026