Privacy Policy

Effective Date: [1^st April 2025]
Introduction
Nexa Healthink Medical Services LLP (“we,” “us,” or “our”) is committed to protecting your privacy and the confidentiality of your health information. This Privacy Policy describes how we collect, use, disclose, and protect your personal and medical data when you use our telemedicine services.

1. Information We Collect
a. Personal Information

• Identity: name, date of birth, gender, contact details (email, phone), address.
• Account info: usernames, passwords.
• Payment & billing details (via secure third-party processors).

b. Medical and Health Information

• Medical history, symptoms, clinical notes, diagnostic reports, prescriptions.
• Teleconsultation records, including audio/video, chat logs, or recordings (with explicit consent). Nexa Healthink Medical Services LLP

c. Technical & Usage Data

• IP address, device/browser info, website usage patterns, cookies, analytics.

2. How We Use Your Information
We use your data to:

• Provide and manage telemedicine consultations and follow‑up care. www.healthinkinternational.com
• Process appointments, billing, prescriptions, and medical documentation.
• Communicate and send appointment reminders, reports, and health advice.
• Ensure compliance with legal and regulatory obligations (e.g. record retention, audits).
• Improve our platform and services via analytics and internal research.

3. Legal Basis and Patient Rights
a. Consent and Access Rights
Your use of our services constitutes consent for data processing. You have the right to access, correct, delete, or restrict processing of your personal data.
b. Disclosure When Required
We may disclose your data to authorized healthcare professionals, payment processors, and law enforcement or regulatory authorities when required by law. www.healthinkinternational.com
4. Security Measures
We implement robust safeguards to protect your data, including:

• Encryption: Data in transit and at rest protected via strong standards such as AES‑256. CloudVisit
• Access controls: Secure login systems; only authorized users may access sensitive data. Medesk360 Advanced
• Business Associate Agreements (BAAs): Required for any third parties handling Protected Health Information (PHI) in the U.S. context under HIPAA. 360 AdvancedAAAAI
• Risk management: Periodic audits, risk assessments, employee training, breach detection and response plans. The HIPAA Journal360 AdvancedUpvio

5. Cookies and Tracking
We use cookies and tracking technologies to enhance user experience.
You may disable or manage cookies, but certain features may be affected. www.healthinkinternational.com
We strive to minimize use of third‑party tracking, especially trackers that could compromise privacy.
6. Compliance with Laws and Regulations

• HIPAA (U.S.): Our practices comply with HIPAA’s Privacy and Security Rules; we handle PHI responsibly. WikipediaAAAAI360 Advanced
• GDPR (EU): If serving EU users, we uphold GDPR requirements for data handling and user rights. Functional Telemedicine
• India’s IT Rules: We adhere to the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Wikipedia

7. Third‑Party Services
We may use third-party service providers (e.g., payment gateways, analytics, hosting) but only with contractual commitments to maintain confidentiality and security of your data. Healthink Clinic
8. Informed Consent for Teleconsultation
Before consultations, we obtain your explicit consent and inform you of:

• What telemedicine entails.
• Technology used and its limitations.
• Your rights, including refusing or stopping consultations.

9. Recordings and Quality Control
Teleconsultations may be recorded for quality control, with your consent. All records are securely stored and accessible only to authorized staff.
10. Breach Notification
In the event of a breach of unsecured PHI, we will promptly notify affected users and relevant authorities, as required by law. www.healthinkinternational.com
11. Children and Minor Patients
Our services are not intended for children under [age]; we do not knowingly collect personal data from minors without parental consent.
12. Retention and Updates

• Data retention: We keep personal and medical data only as long as necessary for service provision, legal requirements, or audit purposes.
• Policy changes: We may update this Privacy Policy. Significant changes will be posted on our website with a new effective date.

13. Contact Information
For any questions or requests related to your data or this policy, please contact us at:
Nexa Healthink Medical Services LLP
Email: brijesh@healthinkinternational.com
Address: D-372, Sector-3 , Greater Noida(west), Gautambudh Nagar, UP-201301