This Privacy Policy explains how BharatConnector, a product of TechForBharat.com (“TechForBharat.com”, “we”, “us” or “our”), collects, uses, shares and protects personal data when you visit bharatconnector.com (the “Website”) or contact us through it. We are committed to handling your personal data in accordance with the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and other applicable Indian law.
In short: we collect the details you submit through our enquiry form and limited technical data via cookies (with your consent) to respond to you, run and improve the Website, and keep it secure. We do not sell your personal data, and we do not store patients’ clinical or claims data through this Website.
Contents
1. Who we are
The Website is operated by TechForBharat.com, the provider of the BharatConnector platform. For the purposes of the DPDP Act, we act as the Data Fiduciary in respect of personal data collected through this Website. Our registered legal entity is [Legal Entity Name], with its registered office at [Registered Address, City, State, PIN]. You can reach us at hello@techforbharat.com.
2. Information we collect
Information you provide to us
When you complete our enquiry / “Request an integration consult” form, we collect the details you enter, which may include your full name, work email address, phone number (with country code), organisation name, organisation type, the connector or service you are interested in, and any message or requirements you choose to share.
Information collected automatically
Subject to your cookie choices, we and our service providers may collect limited technical information automatically, such as your IP address, browser and device type, pages viewed, referring pages, and interactions with the Website. This helps us keep the Website secure and understand how it is used.
3. How we use your information
- To respond to your enquiry and provide the information, demonstration or consultation you request;
- To provide, operate, administer and improve the Website and our services;
- To communicate with you about your enquiry, our services and, where you have consented, relevant updates;
- To maintain the security and integrity of the Website and prevent misuse or fraud;
- To comply with applicable legal, regulatory and contractual obligations.
4. Our lawful basis
We process your personal data on the basis of your consent and, where applicable, other legitimate uses permitted under the DPDP Act — for example, to respond to a request you have voluntarily initiated. Where we rely on consent, you may withdraw it at any time (see Your rights); withdrawing consent does not affect processing carried out before the withdrawal.
5. Cookies
We use cookies and similar technologies to make the Website work and, with your permission, to measure and improve it. You are asked for your preferences through our cookie banner, and you can change them at any time using the “Cookie settings” link in the Website footer. We group cookies as follows:
- Strictly necessary — required for the Website to function and to remember your consent choices. These are always on.
- Analytics — help us understand which pages are useful and how the Website performs. Set only with your consent.
- Marketing — used to measure campaigns and reach relevant audiences. Set only with your consent.
Analytics and marketing technologies are loaded only after you accept the corresponding category. You can also control cookies through your browser settings.
6. How we share information
We do not sell your personal data. We share it only in the following circumstances:
- Service providers (Data Processors): trusted third parties that process data on our behalf and under our instructions, such as our form-handling provider (used to deliver enquiry submissions to us and send you an acknowledgement), hosting providers, and analytics providers you have consented to.
- Legal and regulatory: where required to comply with applicable law, a lawful request from a public authority, or to establish, exercise or defend legal claims.
- Business transfers: in connection with a merger, acquisition, reorganisation or sale of assets, subject to appropriate safeguards.
Where we provide integration services to organisations, any exchange of data with national digital public infrastructure (such as ABDM or NHCX) or with insurers, providers and third-party administrators occurs strictly as part of delivering those services, under separate contractual terms and on the instructions of the relevant organisation.
7. Health & clinical data
This Website is an informational and enquiry site. We do not collect, request or store the clinical, health or insurance-claims data of patients through this Website. Within our connector platform, such data is processed only in transit (pass-through) to enable interoperability, is not warehoused by us, and is governed by separate agreements with the organisations we serve.
8. Data security
We implement reasonable technical and organisational measures to protect personal data, including encryption of data in transit (TLS 1.3), authenticated access controls (OAuth 2.0 and JWT within the platform), access restrictions, logging and regular security reviews consistent with ISO 27001 practices. No method of transmission or storage is completely secure, but we work to protect your information and to address incidents promptly.
9. Data retention
We retain personal data only for as long as necessary for the purposes described in this Policy — for example, to respond to and follow up on your enquiry, to meet our legal and contractual obligations, and to maintain business records — after which it is deleted or anonymised.
10. International transfers
Some of our service providers may process data outside India. Where personal data is transferred outside India, we do so in accordance with the DPDP Act and applicable transfer requirements, and we take steps to ensure your data continues to be protected.
11. Your rights
Subject to the DPDP Act, you have the right to:
- access a summary of the personal data we process about you and how we process it;
- request correction, completion or updating of inaccurate or incomplete data;
- request erasure of your personal data where it is no longer required;
- nominate another individual to exercise your rights in the event of death or incapacity;
- withdraw your consent at any time; and
- raise a grievance about our handling of your personal data.
To exercise any of these rights, email us at hello@techforbharat.com. We may need to verify your identity before acting on a request.
12. Grievance Officer
If you have any concern or complaint about how we handle your personal data, you may contact our Grievance Officer:
| Grievance Officer | [Name of Grievance Officer] |
|---|---|
| Entity | TechForBharat.com / [Legal Entity Name] |
| hello@techforbharat.com | |
| Address | [Registered Address, City, State, PIN] |
We aim to acknowledge and address grievances within the timelines prescribed under applicable law. If you remain dissatisfied, you may have the right to approach the Data Protection Board of India.
13. Children
The Website and our services are intended for business and professional users and are not directed at children. We do not knowingly collect the personal data of children through this Website. If you believe a child has provided us personal data, please contact us so we can take appropriate action.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page and revise the “Last updated” date above. Material changes may be communicated more prominently where appropriate.
15. Contact us
For any questions about this Privacy Policy or our data practices, contact us at hello@techforbharat.com.