Privacy Notice

Version — · Last updated 20 August 2026

Draft pending review This notice describes what the website actually does today, and is written to be accurate rather than final. It has not been reviewed by a legal adviser. Have it checked against the DPDP Act 2023 before you rely on it.

Who this covers

This notice applies to the HealthOS marketing website only — the forms on this site and the analytics behind them. It does not cover the HealthOS clinical platform used inside a hospital, which is governed by the agreement with that hospital.

What we collect, and why

What	When	Why
Name, email, phone, hospital, role, message	You submit the demo or contact form	To reply to you
Your preferred demo date	You request a demo	To schedule it
Consent record: that you agreed, when, and to which version of this notice	You submit a form	To show the request was consented to
Where you arrived from — referring site and campaign tags	You submit a form	To know which channels reach hospitals
Pages viewed, sections reached, IP address, browser, and a random visitor ID stored in your browser	You browse the site	To count visitors and see which parts get read

We do not collect health data through this website, and we ask you not to send patient information through these forms.

Legal basis

We rely on your consent, given by ticking the box on the form. You may withdraw it at any time, and we will delete what we hold unless we are required to keep it. Withdrawing does not affect anything done before you withdrew.

How long we keep it

Analytics — visit and page-event records are deleted automatically after 90 days.
Enquiries and demo requests — kept while we are in contact and for a reasonable period afterwards, because they are business records. Ask us and we will delete yours.

Who else sees it

Supabase — stores the database.
Render — runs the website.
Resend — sends the notification and acknowledgement emails.

These providers process data on our instructions. We do not sell your details or use them for advertising.

Your rights

Under the DPDP Act 2023 you can ask us to:

tell you what we hold about you;
correct anything wrong;
delete it;
withdraw your consent.

Email vanijyanirmanenterprisespvtltd@gmail.com and we will respond. If you are not satisfied, you may complain to the Data Protection Board of India.

Changes

Each version of this notice is numbered, and the version you consented to is stored with your record — so a later change does not quietly rewrite what you agreed to.