Understanding Your Data Protection Rights

This page explains how Prajeeva Healthcare Private Limited, operating under the brand name Prajeeva Healthcare Private Limited, approaches data protection and supports individuals in exercising rights relating to their personal data.

Prajeeva Healthcare Private Limited processes personal information in connection with its website, digital services, preventive healthcare programmes, wellness services and related operations. Where health-related information is involved, additional care is applied because of the private and potentially sensitive nature of that information.

This page should be read together with Prajeeva Healthcare Private Limited's Privacy Policy, Personal & Health Data Protection Policy, Cookie Policy, and any service-specific privacy or consent notice.

Prajeeva Healthcare Private Limited processes digital personal data in accordance with applicable Indian law.

The principal statutory framework is the Digital Personal Data Protection Act, 2023, together with the Digital Personal Data Protection Rules, 2025, to the extent that the relevant provisions are in force and applicable. The legislation establishes obligations relating to lawful processing, notice, consent, security safeguards and rights of individuals whose digital personal data is processed.

The Digital Personal Data Protection Rules, 2025 were notified in November 2025 and operate under a phased commencement structure. Prajeeva Healthcare Private Limited will apply requirements according to the provisions legally operative at the relevant time.

Other Indian legal or regulatory requirements may also apply depending on the nature of a healthcare, digital, contractual or operational service.

Prajeeva Healthcare Private Limited seeks to process personal data according to clear and defined purposes.

Our approach includes:

• Collecting information relevant to the service or purpose concerned.
• Providing appropriate information about how personal data is used.
• Obtaining consent where consent is required.
• Limiting access to authorised personnel and service providers.
• Maintaining appropriate technical and organisational safeguards.
• Reviewing retention requirements.
• Supporting applicable user rights and privacy requests.
• Maintaining processes for privacy complaints and grievances.

Personal data is not treated as available for unrestricted use simply because an individual has provided it to Prajeeva Healthcare Private Limited.

Where applicable under Indian data protection law, individuals may request information concerning the processing of their personal data.

Depending on the circumstances and applicable provisions, this may include information concerning personal data being processed, processing activities, and relevant recipients or categories of recipients as provided by law.

Prajeeva Healthcare Private Limited may require reasonable information to verify the identity of the person making the request before disclosing personal information.

Where applicable, you may request correction of inaccurate or misleading personal data held by Prajeeva Healthcare Private Limited.

A correction request should identify the information concerned and provide sufficient information to enable Prajeeva Healthcare Private Limited to assess and, where appropriate, correct the record.

Where the information originated from an independent healthcare provider, diagnostic provider or another third party, Prajeeva Healthcare Private Limited may need to coordinate with that provider or direct the individual to the organisation responsible for the original record.

Individuals may request completion of incomplete personal data or updating of information that is no longer current where such rights are available under applicable law.

Accurate information can be particularly important where a preventive healthcare or wellness service depends on information supplied by the individual.

Users are encouraged to update materially changed information where the relevant Prajeeva Healthcare Private Limited service provides a mechanism to do so.

Where legally available, an individual may request erasure of personal data processed by Prajeeva Healthcare Private Limited.

An erasure request does not necessarily require immediate deletion in every circumstance. Information may need to be retained where continued retention is required or permitted for legal compliance, contractual obligations, accounting requirements, security, fraud prevention, dispute resolution, establishment or defence of legal claims, or another lawful purpose.

Where an erasure request is valid and no lawful reason for continued retention applies, Prajeeva Healthcare Private Limited will take appropriate steps to erase eligible personal data in accordance with applicable requirements.

Where processing is based on consent, you may withdraw that consent through the mechanism made available for the relevant service.

Withdrawal applies to future processing based on that consent and does not make processing undertaken lawfully before withdrawal unlawful.

Withdrawal of consent may affect Prajeeva Healthcare Private Limited's ability to continue providing a service where the information is necessary for that service and no alternative lawful basis for processing applies.

Consent provided for one purpose will not automatically be treated as consent for a separate or unrelated purpose.

Users can manage optional cookie preferences through Cookie Settings & Consent Preferences.

Where applicable, users may:

• Accept optional cookies.
• Reject non-essential cookies.
• Select individual cookie categories.
• Review their preferences.
• Change previously selected settings.
• Withdraw cookie consent.

Necessary cookies may remain active where required for website security, session management, consent preference retention or essential functionality.

Cookie consent does not constitute consent to process medical or health-related information for unrelated purposes.

Where Prajeeva Healthcare Private Limited processes health-related personal information, eligible privacy rights apply according to the nature of the data, the service involved and applicable law.

Individuals may request correction or updating of eligible information and may make other legally available requests concerning its processing.

Prajeeva Healthcare Private Limited may need to preserve certain healthcare-related records where retention is required by law, contractual obligations, clinical responsibility, dispute management or another lawful requirement.

Where an independent doctor, laboratory, diagnostic provider or healthcare organisation controls the relevant record, requests concerning that information may need to be addressed directly to that provider.

Participation in a wellness programme arranged by an employer or institution does not automatically give that organisation unrestricted access to an individual's personal health information.

Prajeeva Healthcare Private Limited will handle requests for disclosure according to the relevant programme structure, permissions, contractual arrangements and applicable legal requirements.

Where suitable, programme reporting may use aggregated or appropriately de-identified information rather than identifiable individual health information.

Individuals may raise concerns regarding the processing of their personal data or the handling of a privacy request.

The Digital Personal Data Protection Act, 2023 provides for grievance redressal as part of the rights framework for Data Principals, subject to the relevant statutory provisions being in force and applicable.

Prajeeva Healthcare Private Limited will review legitimate privacy grievances and respond according to the nature of the matter, information available and applicable legal requirements.

Where the relevant provisions of Indian data protection law are in force and applicable, an individual may have a right to nominate another person to exercise specified rights in circumstances recognised by law.

Prajeeva Healthcare Private Limited may require appropriate verification, documentation or evidence before acting upon a request submitted by a nominee.

The scope and exercise of nomination rights will be handled according to the applicable statutory requirements.

A privacy request may, where legally permitted, be made through an appropriately authorised representative.

Prajeeva Healthcare Private Limited may require evidence of identity and authority before disclosing information or acting upon instructions submitted by another person.

Additional safeguards may be applied where the request concerns personal health information, a child, an individual lacking capacity, or another circumstance requiring enhanced verification.

Prajeeva Healthcare Private Limited may take reasonable steps to confirm the identity of a person making a data protection request.

Verification helps prevent personal or health-related information from being disclosed, altered or deleted at the request of an unauthorised person.

The information requested for verification should be proportionate to the nature of the request and the sensitivity of the information concerned.

Where Prajeeva Healthcare Private Limited knowingly processes personal data relating to a child, applicable requirements concerning parental or lawful guardian involvement will be followed.

Requests concerning a child's personal information may require verification of the requesting person's identity and legal authority to act for the child.

Additional protections applicable to children's personal data will be applied where required under Indian law.

Prajeeva Healthcare Private Limited maintains reasonable technical and organisational safeguards designed to protect personal data under its control against unauthorised access, disclosure, alteration, loss, misuse or destruction.

Safeguards may include access controls, authentication, system monitoring, restricted permissions, secure technical infrastructure and appropriate requirements for personnel and service providers.

Security measures are reviewed according to the nature of the information, processing activity and associated risks.

No electronic platform can reasonably be represented as entirely free from security risk.

Where Prajeeva Healthcare Private Limited identifies a suspected or confirmed personal data breach, it will assess the incident and take appropriate steps to contain, investigate and address it.

Where legally required, notifications will be made to affected individuals, the appropriate authority or the Data Protection Board of India in accordance with requirements applicable at the relevant time.

The Digital Personal Data Protection Rules, 2025 contain provisions addressing personal data breach notifications, subject to their applicable commencement dates.

Prajeeva Healthcare Private Limited retains personal data according to the purpose for which it was collected and applicable legal, contractual, regulatory, security and dispute-resolution requirements.

A user request for deletion or withdrawal of consent will be considered together with these retention requirements.

Information will not be retained solely because storage is technically possible.

Where retention is no longer necessary and no lawful basis for continued storage remains, appropriate deletion, anonymisation or other disposal measures may be applied.

Prajeeva Healthcare Private Limited may use technology, hosting, payment, communications, analytics, healthcare, diagnostic or other service providers where required to support its operations.

Where another organisation processes personal data on behalf of Prajeeva Healthcare Private Limited, appropriate contractual, privacy and security requirements should apply according to the nature of the processing.

Where a third party independently determines the purposes and means of processing personal data, requests concerning that processing may need to be submitted directly to the relevant organisation.

Certain service providers may use technology infrastructure located outside India.

Where personal data is processed outside India, Prajeeva Healthcare Private Limited will consider applicable Indian requirements concerning cross-border transfers, restrictions and safeguards in force at the relevant time.

Prajeeva Healthcare Private Limited will not state that all personal data is stored exclusively within India unless this is confirmed by the relevant technical and contractual arrangements.

Data protection rights are subject to applicable statutory conditions, exceptions and lawful retention requirements.

Prajeeva Healthcare Private Limited may decline, restrict or defer a request where doing so is required or permitted by applicable law. Where appropriate, the reason for such a decision may be communicated to the individual.

Nothing on this page is intended to restrict any mandatory statutory right that cannot lawfully be excluded.

Requests relating to personal data may be submitted to:

Email: enquiries@prajeeva.com

Where possible, the request should include:

• The name of the individual concerned.
• Relevant contact information.
• The nature of the request.
• The Prajeeva Healthcare Private Limited service or interaction concerned.
• Sufficient information to identify the relevant record.
• Supporting authorisation where the request is made for another person.

Users should not send unnecessary medical records, passwords or highly confidential information merely to initiate a privacy request.

Prajeeva Healthcare Private Limited will review privacy requests according to their nature, applicable legal requirements and the information reasonably necessary to process the request.

Additional information may be requested where required to confirm identity, clarify the request or locate relevant records.

Prajeeva Healthcare Private Limited will seek to address valid requests within the timeframes required by applicable law.

Individuals are encouraged to raise privacy concerns with Prajeeva Healthcare Private Limited through the available grievance process so that the matter can be reviewed and addressed.

Where applicable law provides a right to approach the Data Protection Board of India or another competent authority, nothing in Prajeeva Healthcare Private Limited's internal process removes or restricts that statutory right.

The Data Protection Board of India was established under the notified implementation framework for the Digital Personal Data Protection Act.

Prajeeva Healthcare Private Limited may update this Data Protection & User Rights page to reflect changes in legislation, regulatory requirements, services, technology or internal data protection procedures.

Where changes materially affect how personal data is processed or how rights may be exercised, additional notice or consent will be provided where legally required.

The current version will be made available on the Prajeeva Healthcare Private Limited website.

Please also review:

• Privacy Policy
• Personal & Health Data Protection Policy
• Cookie Policy
• Cookie Settings & Consent Preferences
• Terms & Conditions
• Medical Disclaimer & Health Advice Warning
• Diagnostic & Third-Party Healthcare Services Policy

For privacy, data protection, user rights or grievance-related enquiries:

Prajeeva Healthcare Private Limited

Email: enquiries@prajeeva.com
Phone: +91-95913-21052
Website: https://prajeeva.com
Office: Prajeeva Healthcare Private Limited, Units B-403 & B-404, 4th Floor, Garden of Eden by UKN, Pattandur Agrahara, Whitefield, Bengaluru – 560066, India.

If you have questions about this page or how your information is handled, reach out to our team directly.