The Company recognises the importance of maintaining the privacy of the information belonging to you. This Policy sets out details of how we treat user information we collect on each of the platforms that are owned and controlled by us, including our website www.onco.com (the “Website”), email communications received on info@onco.com, help@onco.com, team@onco.com and text messages received on 79965 79965 and +91 88844 55789 (collectively, the "Platform"). The Platform is owned and operated by Netdox Health Private Limited, a private limited company registered under the provisions of the [Indian] Companies Act 2013 having its registered office at No. 11, 80 Feet Main Road, New Friends Colony, Koramangala, Bengaluru, India – 560 034 (the “Company”).

By visiting and/or using the Platform, you agree to the terms of this Privacy Policy and it shall be deemed that you have read in full, accepted and agreed to the terms herein. The Company reserves the right to modify the terms contained in this Privacy Policy at any time by posting such modifications on the Website. The modified Privacy Policy would be effective from the date of modification that is posted by the Company on the Website. If you do not agree to any term that is contained in this Privacy Policy, please immediately cease your use of the Platform.

This Privacy Policy is issued pursuant to the provisions that are contained in (a) Section 43A of the Information Technology Act, 2000; (b) Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and (c) Regulation 3(1) of the Information Technology (Intermediaries Guidelines) Rules, 2011. This Privacy Policy is also intended to be compliant with the requirements set out in the General Data Protection Regulations issued by the European Union (the “GDPR”) to the extent possible.

Information that is collected by the Company on the Platform shall be used by the Company only for the purpose of providing the Services (as defined hereinafter), and such information shall not be used, sold, transferred or rented in a manner that is not set out in this Privacy Policy.

1. Information that is collected by the Company:

   In providing the various services that are available on the Platform (the “Services”), the Company may have to collect certain personal information from you. This information would, inter alia, include the following:

   1. Contact information: the Company may collect your name, email id, mobile number, postal address etc.
   2. Information to provide the Services: the Company may collect information regarding your medical history, medical reports, details of medication taken, health condition, prescriptions, allergies, age, body weight, medical insurance data, family medical history etc. in order to provide the Services in an efficient manner.
   3. Payment and billing information: The Company may collect your billing name, billing address and payment method when you pay for the Services availed by you on the Platform (as defined in the Terms of Use available here https://onco.com/terms-and-conditions on the Platform. Please note that the Company would collect your credit/debit card number or credit/debit card expiry date or other details pertaining to your credit/debit card. Credit/debit card information will be obtained and processed by our online payment partners Razor Pay and PayTm.
   4. Other information: While you use the Platform, the Company may collect information about your IP address and the browser you are using.

   You acknowledge and agree that any and all information that is provided by you on the Platform is provided by you voluntarily and at your own risk. While the Company would make all efforts to ensure the safety and security of the information provided by you, it shall not be responsible for any loss or theft of data. Please note that any information that is provided by you may be retained by the Company for (i) providing the Services; and (ii) for meeting its obligations under applicable law. Even if you delete your User account on the Platform, the Company may have to retain the information provided by you for a short period of time until the same can be erased from its servers, and for compliance with its obligations under applicable law (if any).

   
   

   You shall be responsible for the accuracy of the information provided to the Company for the use of the Platform and the Services. If there is any mistake in or change to the personal information provided by you for the use of Platform, you shall immediately notify the Company at info@onco.com. You shall be solely liable for the consequences of providing incomplete, inaccurate or incorrect information on the Platform. Where the Company has reasons to believe that the information provided by you on the Platform in incorrect or incomplete, the Company may restrict you from using the Platform by disabling your User Account.

   
   

   The Platform is not directed at minors, and we do not seek to collect any information from children including those under the age of 18. If we learn that we have received any information from an individual under the age of 18, we will use that information only to respond directly to the minor (or a parent or legal guardian) to inform him or her that he or she cannot use the Services and subsequently we will delete that information from our own servers.

   
   

   If you want to discontinue the use of the Platform, or if you want to withdraw the consent granted to the Platform for collecting and processing your data, please notify the Company at info@onco.com. Once you discontinue the use of the Platform or withdraw your consent, the Company shall retain the personal information provided by you on the Platform for such time period as may be mandated by applicable law (if any) and thereafter erase the same in full.

2. Information may be collected in several ways:
   1. Active collection: This refers to the information that is actively provided by you while registering on the Platform, while availing of the Services through the Platform, while making payments using the payment gateway on the Platform etc.
   2. Passive collection: This refers to the information that is gathered by the Company using tracking tools like Google Analytics, Google Webmaster, browser cookies etc. for collecting information about your usage of our Platform. This information may be used by the Company for internal research to understand User demographics, interests and behaviour with a view to improving the functionality of the Platform, track your preferences, to provide you with a customized Platform experience, to notify you of any updated information and new services and other related functions offered by the Platform/ Company, keep you informed about latest content available on the Platform, special offers, and other products and services of the Company, to assist you with customer service or technical support issues and so on.

   While the Company does not actively collect any information from persons who visit the Platform, but do not register themselves on it or avail of the Services, certain portions of this Privacy Policy would be applicable to such visitors as well.

3. Use of your personal information by the Company:

   We may collect the following information:

   1. To contact you: The contact information you provide would be used by the Company to contact you in relation to the provision of the Services.
   2. To improve the quality of the Services: The Company might use your information to improve the functionality of the Services and to ensure that its quality is maintained / bettered.
   3. For security purposes: The Company might use the information provided by you on the Platform to protect our company, our users, our partners or our associates.
   4. For marketing purposes: The Company might send you information about special promotions or offers. The Company might also notify you of new or improved features on the Platform.
   5. Transactional communications: The Company may also contact you by way of emails or SMSs to keep you informed of the various actions taken by the Company in the course of providing the Services.

   The Company shall use your information only in a manner that is permitted by applicable law.

4. Processing of the data collected by the Platform:

   All data that is shared by you on the Platform may be processed by the Company. Personally identifiable data shared by you shall be stored and processed only for the purpose of providing the Services, and to contact you. Medical data and reports shared by you on the Platform may be processed for research and analysis in a deidentified form. The Company may also publish such research studies and findings in reputed medical journals and conferences (such as the ASCO) in a deidentified form. Personal data shared by you on the Platform is not presently being outsourced to any third party for processing. The same is stored on the stored on AWS secured server. If you would, at any time, revoke your consent for the processing of the data shared by you on the Platform, you could do so by sending an email to info@onco.com. Once such an email is received, the Company will remove your personal data from the data that is being processed in the manner set out in the aforesaid paragraphs.

5. Sharing of information by the Company with third-parties:
   1. Service Providers: The Company shall share your information with third parties who the Company has contracted with for assistance with performing the Services such as Doctors, Hospitals, the Medical Board constituted by the Company, payment processors or transactional message processors. In the future, your medical data and history in a deidentified form may be shared with researchers for study, analysis and publication.
   2. Compliance with law: The Company might share your information to respond to a court order or subpoena. The Company may share your information if a government agency or investigatory body requests the Company to do so.
   3. Mergers and Acquisitions: If the Company sells its business or hives of a portion of the same to a new entity, your personal information that is available on the Platform may be transferred to the new entity.
   4. The Company shall not be responsible for the collection, handling and disposal of any data/information (including medical information) or failure thereof, by any service providers and/or third parties and/or consultants who collect/receive any information/data through the Platform. The Company shall not be held liable for any loss/damage arising out of collection/handling/ disposal of such data/information by such service providers and/or third parties and/or consultants, through the Platform.

Please note that neither the Company nor any of its employees would have access to the password that relates to your User account on the Platform. You shall be solely responsible for protecting your login credentials to the Platform, and the Company shall not be liable in any manner for unauthorised use of your login credentials. You shall be liable to the Company for any loss suffered by the Company as a result of unauthorised use of your login credentials. In the event of any misuse or suspected misuse of the same, please notify the Company at info@onco.com.

While the Company shall seek to implement the best market practices and security policies for the protection of your personal information, it shall not be liable for improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss of information. It is expressly stated that the Company shall not be responsible for any breach of security or for any actions of any third parties that receive Users' personal data or events that are beyond the reasonable control of the Company including, acts of government, computer hacking, unauthorized access to computer data and storage devices and storage technology, hardware, computer crashes, breach of security and encryption etc.

Cookies: A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you grant the permission, the file is added and the cookie helps analyze web traffic or lets you know when you visit a particular site. The Company uses traffic log cookies to identify which pages are being used. This helps the Company analyze data about web page traffic and improve the functioning of the Platform. This information is used by the Company only for statistical analysis and then the data is removed from the system. Please note that the Company does not have any control over the cookies that are placed by third party links on the Platform. The Company does not represent to you that such third party websites have their own privacy policies or that the information that is provided by you to them would be secure.

If you click on one of the links to third party websites that may be available on the Platform, you may be taken to websites that the Company does not control. This Privacy Policy does not apply to the privacy practices of those websites.

The Company shall not be liable for the misuse of your personal information by third party websites.

The Company may, going forward and at its sole discretion, use third-party advertising companies to serve ads when a User visits the Platform. These companies may use information (not including your name, address, email address, or telephone number) about your visits to this and other websites in order to provide advertisements about goods and services of interest to you.

If a User has any questions or grievances regarding the Platform, the contents thereof, the manner in which personal data is being collated or processed by the Platform or regarding the Services, the User may reach out to The Grievance Officer of the Company customer support at info@onco.com (the “Grievance Officer”). The Grievance Officer shall address any complaint or grievance that is raised by a User within a period of one (1) month from when it is raised. Here are the details of the Grievance Officer: Name: Surya Prakash R, Phone: 9900031334

Where the Company requires additional information to process and respond to the query raised by a User, the Company shall notify the User of the same.

[•]

1. The Company will ensure acknowledgement of complaint within 24 (twenty-four) hours and subsequent resolution within a period of 15 (fifteen) days, as provided; and
2. The Company will ensure resolution within 24 (twenty-four) hours of complaints in relation to nudity, sexual activities, or impersonation.

Force Majeure: The Company shall not be responsible for any cessation, interruption or delay in the performance of its obligations hereunder due to earthquake, flood, fire, storm, natural disaster, act of God, war, terrorism, armed conflict, labor strike, lockout, or boycott. The Company may at any time, in its sole discretion and without advance notice to you, cease operation of the Platform and the provision of the Services.

No Waiver: A delay or failure by the Company to exercise or enforce any right or provision of this Privacy Policy will not constitute a waiver of such right or provision.

Notices: All notices given to a User by the Company or by a User to the Company or another User shall be in writing and in the English language. Such notice shall be sent by e-mail or mailed by a prepaid internationally-recognized courier service to the intended recipient at the address set out below, or any changed address that is notified by either Party:
Notice to the Company:
Netdox Health Private Limited
No. 11, 80 Feet Main Road, New Friends Colony, Koramangala, Bengaluru, India – 560 034
Email: info@onco.com
Notice to User:
At the email address provided by you at the time of registration on the Platform.

Governing Law; Jurisdiction: This Privacy Policy is governed by the provisions of Indian law, including but not limited to the following:

1. the Indian Contract Act, 1872;
2. the (Indian) Information Technology Act, 2000;
3. the (Indian) Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and
4. Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021

This Platform originates from the State of Karnataka in India. This Privacy Policy will be governed by the laws that are applicable in the State of Karnataka. By using this Platform, you consent to the jurisdiction and venue of the courts located in Karnataka, India in connection with any action, suit, proceeding or claim arising under or by reason of this Privacy Policy.