PRIVACY POLICY

Please read this privacy policy carefully by accessing or using the website, you agree to be bound by the terms described herein and all the terms incorporated by reference. If you do not agree to all of these terms, do not use the website.

1. Content & Purpose
   1. This privacy policy (“Privacy Policy”) applies to your use of the domain name access.mediangels.com, an internet based portal for the PAP program, owned and operated by TATA 1MG Technologies Private Limited (formerly known as 1MG Technologies Private Limited), a company duly incorporated under the provisions of the Companies Act, 2013 (hereinafter, referred to as “Tata 1mg” or “We” or “Our” or “Us” or “Company”). The domain name and the mobile application are collectively referred to as “Website”.
   2. The Website is a platform that facilitates the patient assistance program (PAP Program) services for patients (hereinafter referred to as “Services”).. The Services would be made available to such natural persons who have agreed to become Users on the Website after obtaining due registration, in accordance with the procedure as determined by Tata 1mg - MediAngels, from time to time (referred to as “You” or “Your” or “Yourself” or “User”, which terms shall also include natural persons who are accessing the Website merely as visitors).
   3. We have implemented reasonable security practices and procedures that are commensurate with the information assets being protected and with the nature of our business. While we try our best to provide security that is commensurate with the industry standards, because of the inherent vulnerabilities of the internet, we cannot ensure or warrant complete security of all information that is being transmitted to us by you.
   4. For the purpose of providing the Services and for other purposes identified in this Privacy Policy, Tata 1mg - MediAngels will be required to collect and host certain data and information of the Users. Tata 1mg - MediAngels is committed to protecting the Personal Information of the Users and takes all reasonable precautions for maintaining confidentiality of the User’s Personal Information. This Privacy Policy has been designed and developed to help you understand the following:
      1. The type of Personal Information (including Sensitive Personal Data or Information) that Tata 1mg - MediAngels collects from the Users;
      2. The purpose of collection, means and modes of usage of such Personal Information by Tata 1mg - MediAngels;
      3. How and to whom Tata 1mg - MediAngels will disclose such information post user’s consent on sharing the information;
      4. How Tata 1mg - MediAngels will protect the Personal Information including Sensitive Personal Data or Information that is collected from the Users; and
      5. How Users may access and/ or modify, delete their Personal Information.
   5. This Privacy Policy shall apply to the use of the Website by all Users. Accordingly, a condition of each User's use of and access to the Website and to the other services provided by Tata 1mg - MediAngels to Users is their acceptance of this Privacy policy. Any User is required to read and understand the provisions set out herein prior to submitting any Sensitive Personal Data or Information to Tata 1mg - MediAngels, failing which they are required to leave the Website immediately.
2. What is the personal information?
   1. “Personal Information” means any information that relates to a natural person, which, either directly or indirectly, in combination with other information available with Tata 1mg, is capable of identifying the person concerned.
   2. “Sensitive Personal Data or Information” means Personal Information of any individual relating to physical, physiological and mental health condition; sexual orientation; medical records and history; biometric information; any detail relating to the above as provided to or received by Tata 1mg - MediAngels for processing or storage. However, any data/ information relating to an individual that is freely available or accessible in public domain or furnished under the Right to Information Act, 2005 or any other law shall not qualify as Sensitive Personal Data or Information.
3. Types of personal information collected by Tata 1mg - MediAngels:
   1. A User may have limited access to the Website and utilize some of the Services provided by Tata 1mg - MediAngels without creating an account on the Website. Unregistered Users can access some of the information and details available on the Website. In order to have access to all the features and benefits on our Website, a User may be required to first create an account on our Website and enroll into the PAP Program. As part of the registration process, Tata 1mg - MediAngels may collect the following categories of Personal Information from the Users (hereinafter collectively referred to as “User Information”):
      1. Name
      2. User ID
      3. Email address;
      4. Address (including country and ZIP/postal code)
      5. Gender
      6. Age
      7. Phone Number
      8. Password chosen by the User
      9. Other details as the User may volunteer
   2. In order to avail the Services, the Users may be required to upload copies of their prescriptions, on the Website and/ or e-mail the same to Tata 1mg - MediAngels in accordance with the Terms of Use and the prescriptions will be stored/ disclosed by Tata 1mg - MediAngels only in the manner specified in this Privacy Policy and the Terms of Use. The term “User Information” shall also include any such prescriptions uploaded or otherwise provided by Users.
   3. Tata 1mg may keep records of telephone calls received and made for making inquiries, orders, or other purposes for the purpose of administration of Services.
   4. Internet use:Tata 1mg - MediAngels may also receive and/or hold information about the User’s browsing history including the Internet Protocol (IP) address of each User's computer (or the proxy server a User used to access the World Wide Web), User's computer operating system and type of web browser the User is using as well as the name of User's ISP. The Website uses temporary cookies to store certain data (that is not Sensitive Personal Data or Information) that is used by Tata 1mg - MediAngels and its service providers for the technical administration of the Website, research and development, and for User administration.
   5. Tata 1mg - MediAngels does not knowingly collect Personal Information from children.
   6. Tata 1mg - MediAngels may in future include other optional requests for information from the User including through user surveys in order to help Tata 1mg – MediAngels customize the Website to deliver personalized information to the User and for other purposes are mentioned herein. Any such additional Personal Information will also be processed in accordance with this Privacy Policy.
4. Purposes for which your information may be used by Tata 1mg - MediAngels:
   1. Tata 1mg - MediAngels will retain User Information only to the extent it is necessary to provide Services to the Users. The information which Tata 1mg - MediAngels collects from you may be utilized for various business and/or regulatory purposes including for the following purposes:
      1. Registration of the User on the Website and the PAP Program
      2. Processing the User’s requests and provision of Services (including provision of safe Services)
      3. Enable Tata Group Entities and Partners to offer their products and/or services and communicate with you about such products and/or services
      4. Processing, disclosing, transmitting, and/or sharing the data/information with Tata Group Entities, and other third parties which have business or contractual dealings with us
      5. Technical administration and customization of Website
      6. Ensuring that the Website content is presented to the Users in an effective manner
      7. Delivery of personalized information to the User
      8. Improvement of Services, features and functionality of the Website
      9. Research and development and for User administration (including conducting user surveys)
      10. Dealing with requests, enquiries, complaints or disputes and other customer care related activities including those arising out of the Users’ request of the Services and all other general administrative and business purposes
      11. Communicate any changes in our Services or this Privacy Policy or the Terms of Use to the Users
      12. Verification of identity of Users and perform checks to prevent frauds and
      13. Investigating, enforcing, resolving disputes and applying our Terms of Use and Privacy Policy, either ourselves or through third party service providers.
5. Disclosure and transfer of your personal information:
   1. Tata 1mg - MediAngels may need to disclose/ transfer User’s Personal Information to the following third parties for the purposes mentioned in this Privacy Policy and the Terms of Use:
      1. To other service providers appointed by Tata 1mg - MediAngels for the purpose of carrying out services on Tata 1mg’s behalf under contract. Generally these contractors do not have any independent right to share this information, however certain contractors who provide services on the Website, including the providers of online communications services, will have rights to use and disclose the Personal Information collected in connection with the provision of these services in accordance with their own privacy policies.
      2. Tata Group Entities: We may make available to you products, services and /or applications of Tata Group Entities, to assist them to reach out to you in relation to their programs or campaigns and to process your queries and requests. Accordingly, we may share your Personal Information with Tata Group Entities. We may also share your Data with the Tata Group Entities as is relevant for the purposes set out in Clause 4 above, and to facilitate the operation of our business.
      3. Tata Consumer Platform: Your Personal Information may be shared with Tata Group Entities and other participating entities on the Tata Consumer Platform operated by Tata Digital Limited ("TCP") for purposes of enrolment, offering you products, services and benefits on the TCP. Accordingly, we may share your Data with other Tata Group Entities, Partners and Service Providers and as a part of this unification your account information across several Tata Companies may be merged, to offer You a single login for seamless experience.
      4. To our affiliates in India who may use and disclose your information for the same purposes as us.
      5. To government institutions/ authorities to the extent required a) under the laws, rules, and regulations and/ or under orders of any relevant judicial or quasi-judicial authority; b) to protect and defend the rights or property of Tata 1mg - MediAngels; c) to fight fraud and credit risk; d) to enforce Tata 1mg - MediAngels's Terms of Use (to which this Privacy Policy is also a part) ; or e) when Tata 1mg - MediAngels, in its sole discretion, deems it necessary in order to protect its rights or the rights of others.
      6. If otherwise required by an order under any law for the time being in force including in response to enquiries by Government agencies for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution, and punishment of offences.
   2. Tata 1mg - MediAngels makes all User Information accessible to its employees and data processors only on a need-to-know basis. All Tata 1mg - MediAngels employees and data processors, who have access to, and are associated with the processing of User Information, are obliged to respect its confidentiality.
   3. Tata 1mg - MediAngels may also disclose or transfer the User Information, to another third party as part of reorganization or a sale of the assets or business of a Tata 1mg corporation division or company. Any third party to which Tata 1mg - MediAngels transfers or sells its assets will have the right to continue to use the Personal Information and/ or other information that a User provide to us.
6. Retention of the information:
   1. All the information collected/ stored under this Privacy Policy and Terms of Use is maintained by Tata 1mg - MediAngels in electronic form on its equipment, and on the equipment of its employees. User Information may also be converted to physical form from time to time. Regardless of the manner of storage, Tata 1mg - MediAngels will keep all User Information confidential and will use/ disclose it only the manner specified under the Privacy Policy and Terms of Use.
   2. Tata 1mg – MediAngels will also ensure that User Information is not kept for a period longer than is required for the purposes for which it is collected or as required under any applicable law.
7. Security practices and procedures:
   1. Tata 1mg - MediAngels adopts reasonable security practices and procedures to include, technical, operational, managerial and physical security control measures in order to protect the Personal Information in its possession from loss, misuse and unauthorized access, disclosure, alteration and destruction.
   2. Tata 1mg - MediAngels takes adequate steps to ensure that third parties to whom the Users’ Sensitive Personal Data or Information may be transferred adopt reasonable level of security practices and procedures to ensure security of Personal Information.
   3. You hereby acknowledge that Tata 1mg – MediAngels is not responsible for any intercepted information sent via the internet, and you hereby release us from any and all claims arising out of or related to the use of intercepted information in any unauthorized manner.
8. User’s rights in relation to their personal information collected by Tata 1MG:
   1. All the information provided to Tata 1mg - MediAngels by a User, including Sensitive Personal Data or Information, is voluntary. User has the right to withdraw his/ her/ its consent at any time, in accordance with the terms of this Privacy Policy and the Terms of Use, but please note that withdrawal of consent will not be retroactive.
   2. Users can access, modify, correct and delete the Personal Information provided by them which has been voluntarily given by the User and collected by Tata 1mg - MediAngels in accordance with this Privacy Policy and Terms of Use. However, if the User updates his/ her information, Tata 1mg - MediAngels may keep a copy of the information which User originally provided to Tata 1mg - MediAngels in its archives for User documented herein. In case the User seeks to update or correct, his/ her Personal Information, the User may exercise these rights by emailing Tata 1mg - MediAngels at [email protected] and communicate the change(s) for updating Tata 1mg - MediAngels’s records.
   3. If a User, as a casual visitor, has inadvertently browsed any other pages of this Website prior to reading the Privacy Policy and the Terms of Use, and such User does not agree with the manner in which such information is obtained, stored or used, merely quitting this browser application should ordinarily clear all temporary cookies installed by Tata 1mg - MediAngels. All visitors, however, are encouraged to use the "clear cookies" functionality of their browsers to ensure such clearing/ deletion, as Tata 1mg - MediAngels cannot guarantee, predict or provide for the behavior of the equipment of all the visitors of the Website.
   4. If a User has inadvertently submitted any Personal Information to Tata 1mg - MediAngels prior to reading the Privacy Policy and Terms of Use, and such User does not agree with the manner in which such information is collected, stored or used, then such User can ask Tata 1mg - MediAngels, by sending an email [email protected] containing the rectification required, whether Tata 1mg - MediAngels is keeping Personal Information about such User, and every User is also entitled to require Tata 1mg - MediAngels to delete and destroy all such information relating to such user (but not other Users) in its possession.
   5. In case the User does not provide his/ her information or consent for usage of Personal Information or subsequently withdraws his/ her consent for usage of the Personal Information so collected, Tata 1mg - MediAngels reserves the right to discontinue the services for which the said information was sought.
9. Additional notes to the user:
   1. 1mg shall not be responsible in any manner for the authenticity of the Personal Information or Sensitive Personal Data or Information supplied by the User to Tata 1mg - MediAngels . If a User provides any information that is untrue, inaccurate, not current or incomplete (or becomes untrue, inaccurate, not current or incomplete), or Tata 1mg - MediAngels has reasonable grounds to suspect that such information is untrue, inaccurate, not current or incomplete, Tata 1mg - MediAngels has the right to suspend or terminate such account at its sole discretion.
   2. Tata 1mg - MediAngels shall not be responsible for any breach of security or for any actions of any third parties that receive Users' Personal Information or events that are beyond the reasonable control of Tata 1mg - MediAngels including, acts of government, computer hacking, unauthorized access to computer data and storage device, computer crashes, breach of security and encryption, etc.
   3. The User is responsible for maintaining the confidentiality of the User's account access information and password, if applicable. The User shall be responsible for all uses of the User's account and password, whether or not authorized by the User. The User shall immediately notify Tata 1mg - MediAngels of any actual or suspected unauthorized use of the User's account or password.
   4. Tata 1mg - MediAngels will communicate with the Users through email and notices posted on the Website or through other means available through the Service, including text and other forms of messaging. The Users can ask Tata 1mg, by sending an email to [email protected] containing the rectification required.
10. Changes in the privacy policy:
    1. Tata 1mg - MediAngels may update this Privacy Policy at any time, with or without advance notice. In the event there are significant changes in the way Tata 1mg - MediAngels treats User's Personal Information, Tata 1mg - MediAngels will display a notice on the Website or send Users an email. If a User uses the Service after notice of changes have been sent to such User or published on the Website, such User hereby provides his/ her/ its consent to the changed practices.
11. Complaints and grievance redressal:
    1. Tata 1mg - MediAngels addresses discrepancies and grievances of all Users with respect to processing of information in a time bound manner. For this purpose, Tata 1mg - MediAngels has designated Mr. Jehan Jit Singh as the grievance officer, who will redress the grievances of the Users expeditiously but within one month from the date of receipt of grievance, and who can be reached by:
       1. Sending a letter marked to the attention of “Grievance Officer, Tata 1mg to Level 3, Vasant Square Mall, Pocket V, Sector B, Vasant Kunj, New Delhi-110070”, or
       2. Sending an email to [email protected]