Privacy Policy

1. Introduction

Welcome to Online Diagnos, a diagnostic services brand owned and operated by Ragso Technologies Pvt Ltd, a company incorporated under the Companies Act, 2013, with its registered office in Hyderabad, Telangana, India.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website (onlinediagnos.in), mobile application, or any of our services including home sample collection, lab test bookings, and digital report delivery.

Please read this policy carefully. By using our services, you agree to the practices described in this document. If you do not agree, please discontinue use of our platform.

Important Note on Sample Processing:

All biological samples collected through Online Diagnos are processed exclusively by our laboratory partner, MedPath Diagnostics Pvt Ltd ("MedPath"). MedPath is solely responsible for the physical handling, testing, analysis, and quality of all diagnostic results. Ragso Technologies Pvt Ltd facilitates the booking and digital delivery of reports but does not operate any laboratory or process any samples directly.

2. Information We Collect

2.1 Personal Information You Provide

When you register, book a test, or contact us, we collect:

Full name, age, gender, and date of birth
Contact details including mobile number, email address, and residential address
Health-related information such as the type of diagnostic tests ordered, medical conditions disclosed, and doctor's notes (if provided)
Patient details entered during the appointment booking process
Payment information (processed securely via third-party payment gateways — we do not store card details)
Government-issued ID for identity verification where required

2.2 Automatically Collected Information

When you access our website or app, we automatically collect:

Device type, operating system, and browser information
IP address and approximate geographic location
Pages visited, time spent, and navigation patterns
Referral source and search terms used
Cookies and similar tracking technologies

2.3 Health and Diagnostic Information

As a diagnostics platform, we collect sensitive health data including:

Diagnostic test results and lab reports generated by MedPath Diagnostics
Medical history and symptoms voluntarily disclosed during booking
Fasting status, sample type, and preparation details
Prescription or doctor referral details where applicable

This information is classified as Sensitive Personal Data (SPDI) under Indian law and is handled with the highest level of care and security.

3. How We Use Your Information

3.1 Service Delivery

To schedule and confirm home sample collection appointments
To communicate appointment details, phlebotomist information, and ETA updates via WhatsApp, SMS, and email
To deliver digital lab reports to your registered mobile number and email
To facilitate re-booking, test history access, and appointment management through your account dashboard

3.2 Communication

To send booking confirmations, reminders, and status updates
To notify you when your reports are ready
To respond to customer support queries and complaints
To send periodic health tips, offers, and updates (you may opt out at any time)

3.3 Business Operations

To process payments and maintain billing records
To improve our website, app, and service quality based on usage analytics
To detect and prevent fraud, abuse, or unauthorized access
To comply with legal, regulatory, and statutory requirements
To resolve disputes and enforce our Terms of Service

4. Sharing Your Information

4.1 MedPath Diagnostics — Our Laboratory Partner

Your personal and health information is shared with MedPath Diagnostics Pvt Ltd to the extent necessary to process your diagnostic tests. MedPath receives:

Your full name, age, gender, and contact details for sample labelling and report generation
Test type and any special preparation or clinical notes you provide
Home address for scheduling phlebotomist visits

MedPath Diagnostics is bound by a confidentiality agreement and applicable healthcare data protection laws. They are prohibited from using your data for any purpose other than processing your diagnostic orders.

4.2 Service Providers

We engage trusted third-party service providers to operate our platform:

Payment Gateways (Razorpay / Cashfree): To process your transactions securely
SMS & WhatsApp Providers: To deliver notifications and reports
Cloud Hosting Providers: To store data securely on Indian servers
Analytics Platforms: To analyse website traffic and improve user experience

All service providers are contractually obligated to protect your data and use it only for the specific services they provide to us.

4.3 Legal Requirements

We may disclose your information when required by law, court order, or government authority, including:

Compliance with applicable Indian laws including the IT Act, 2000 and DPDP Act, 2023
Responding to lawful requests from regulatory health authorities
Protection of rights, property, or safety of Online Diagnos, its users, or the public

4.4 We Do Not Sell Your Data

Ragso Technologies Pvt Ltd does not sell, rent, or trade your personal or health information to any third party for their marketing or commercial purposes. Your data is never shared with advertisers without your explicit consent.

5. Data Security

We implement industry-standard security measures to protect your personal and health information:

SSL/TLS encryption for all data transmitted between your device and our servers
Encrypted storage of sensitive personal data and health records
Role-based access controls ensuring only authorized personnel can access your data
Regular security audits and vulnerability assessments
Secure deletion of data upon request or after the retention period

While we take all reasonable precautions, no method of transmission over the internet is completely secure. In the event of a data breach that may harm your rights, we will notify affected users as required by applicable law.

6. Data Retention

We retain your information for the following periods:

Account & Profile Data	Duration of account + 3 years after last activity
Booking Records	7 years (as required for medical and tax compliance)
Lab Reports	7 years from date of report generation
Payment Records	8 years (as required by Indian tax laws)
Communication Logs	1 year from date of communication
Cookies / Analytics	Up to 12 months

After the retention period, data is securely deleted or anonymised. You may request early deletion of your account data (subject to legal retention obligations) by contacting us.

7. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law, you have the following rights:

Access: Right to Access your personal data held by us
Correction: Request corrections to inaccurate or incomplete personal data
Erasure: Request erasure of your personal data (subject to legal obligations)
Withdraw Consent: Withdraw consent for data processing at any time (subject to active service requirements)
Nomination: Nominate a representative to exercise your rights on your behalf
Grievance: Raise a grievance with our Data Protection Officer or the Data Protection Board of India

To exercise any of these rights, please contact our support team at support@onlinediagnos.in or call +91 73861 08108. We will respond to all requests within 30 days.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience. Types of cookies we use:

Essential cookies required for website functionality and security
Preference cookies to remember your language and settings
Analytics cookies to understand how users interact with our website
Marketing cookies for relevant health service promotions (opt-out available)

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

9. Children's Privacy

Our services are available for patients of all ages; however, accounts must be created and managed by individuals aged 18 years or older. If tests are booked for a minor, the parent or legal guardian is responsible for providing consent and managing the account.

We do not knowingly collect personal data from children under 18 without verifiable parental consent. If you believe we have collected information from a child without proper consent, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party websites or services (such as payment gateways or social media platforms). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any external sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will:

Update the "Last Updated" date at the top of this document
Notify registered users by email or prominent notice on our website
Provide a 30-day notice period for material changes wherever possible

Continued use of our services after changes take effect constitutes your acceptance of the revised Privacy Policy.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the Digital Personal Data Protection Act, 2023, the details of our Grievance Officer are:

Name	Grievance Officer, Ragso Technologies Pvt Ltd
Email	support@onlinediagnos.in
Phone	+91 73861 08108
Address	Ragso Technologies Pvt Ltd, Hyderabad, Telangana, India
Response Time	Within 30 days of receipt of grievance

If you are not satisfied with our response, you may approach the Data Protection Board of India established under the Digital Personal Data Protection Act, 2023.

13. Contact Us

For any privacy-related queries, requests, or concerns, please reach out to us:

Email: support@onlinediagnos.in
Phone / WhatsApp: +91 73861 08108
Website: https://onlinediagnos.in/pages/contact
Available: Monday to Sunday, 6:00 AM – 10:00 PM IST

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of courts in Hyderabad, Telangana, India.