Privacy Policy

1. Information We Collect

We collect only essential information required to deliver certified medical care, facilitate digital doctor sessions, and process pharmacy deliveries:

• Personal Identity: Full Name, Mobile Number, Email Address, Age, Gender, and Delivery Address.
• Health Records (PHI): Consultation transcripts, medical history, past prescriptions, allergies, and diagnostic lab reports uploaded to the consultation vault.
• Technical & Session Data: IP address, device type, browser metadata, and tele-session logs (start and end timestamps).

2. Medical Records Confidentiality & End-to-End Encryption

In accordance with the Digital Information Security in Healthcare Act (DISHA) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:

• Your consultation room messages, video streams, and uploaded documents are encrypted using AES-256 bit encryption at rest and TLS 1.3 in transit.
• Only the consulting doctor specifically authorized by you has clinical access to your consultation session and digital prescription history.
• We NEVER sell, rent, or monetize your health data or personal information to pharmaceutical marketing firms, insurance brokers, or advertisers.

3. Payment Security & PCI-DSS Compliance

FastMed does NOT store or capture your sensitive payment instrument data (such as Credit/Debit card numbers, CVV, or Net Banking passwords) on our servers.

All financial checkout sessions are processed directly through PCI-DSS Level 1 compliant, RBI-authorized payment aggregators (including Cashfree Payments) using secure tokenization and 2-Factor Authentication (OTP / UPI PIN).

4. Information Sharing & Third Parties

We share relevant data exclusively with verified operational partners solely for service delivery:

• Assigned Doctor: Receives your clinical complaints, vital signs, and past reports for diagnostic evaluation.
• Partner Pharmacy / Diagnostic Labs: Receives delivery address and e-prescription details for dispensing medicine and home blood sample collection.
• Logistics Partners: Receives shipping address and phone number for courier delivery.
• Legal & Regulatory Authorities: Only when strictly mandated by a valid judicial court order or government warrant under applicable Indian laws.

5. Your Rights & Data Portability

As a registered patient, you maintain complete ownership of your medical records. You have the right to:

• Access, view, and download all past digital prescriptions and diagnostic reports anytime from your Patient Dashboard.
• Request correction of inaccurate personal demographic information.
• Request permanent deletion of your account and archived non-clinical data, subject to mandatory statutory medical record retention requirements under Indian medical regulations (minimum 3 years for clinical records).

6. Data Protection & Privacy Officer

If you have questions, grievances, or requests regarding this Privacy Policy or your personal health information, contact our designated Data Protection Officer: