Privacy Notice

Our name and address

Alpha MD Private Limited, 1st Floor, 315, Balgovind Wadi, New Prabhadevi Road, Prabhadevi, Mumbai 400025.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you still have any questions or concerns, please contact our Data Protection Officer, Mr. Nilesh Abhang, at nilesh.abhang@alphamd.com. To contact Alpha MD’s Support Team: https://www.alphamd.com/connect-us

What we do

We are a global healthcare consulting company. We work with industry and other healthcare providers to drive change and improve the delivery of care, leveraging the latest technology and best practices to ensure that everyone has access to high-quality, affordable healthcare.

We might collect personal information while delivering our services in the form of:

• AMDHA Application, designed to help patients manage their health and engage in self-care and preventive care outside of hospitals and clinics. A separate Privacy Notice for AMDHA is available as “Privacy Notice AMDHA – Alpha MD”.
• Clinical Development, where we help organisations with clinical trial design and management, data analysis and interpretation, and regulatory support, with procedures in place to protect the personal information of study subjects.
• Orcha India Data Protection Mark (OIDPM), where we might collect personal information at the time of webinars and other related events, which can be used to engage with us in sales, marketing or future events.
• Job Applicants and Prospects, where, if you apply for a role at Alpha MD, we collect your name, telephone number, email address, employment history, assessments completed as part of the application process, and feedback from our staff and your referees.

You will not be subject to decisions that have a significant impact on you based solely on automated decision-making, including profiling, unless you have given us your consent, or it is necessary for entering into or performing a contract.

1. What information do we collect?

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us. We collect and process users’ personal information in accordance with this privacy notice and applicable laws and regulations. The personal information we collect may include:

• Names
• Contact numbers
• Email addresses
• Mailing addresses
• Contact or authentication data
• Date of birth / age
• Job title

Sensitive information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information: health data and financial data.

Information automatically collected. We automatically collect certain information when you visit, use or navigate the Services. This does not reveal your specific identity but may include your IP address, browser and device characteristics, operating system, language preferences, device name, country and location, and information about how and when you use our Services, pages visited and time spent. This is primarily needed to maintain the security and operation of our Services, and for internal analytics and reporting purposes.

2. How do we process your information?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts.
• To deliver and facilitate the delivery of services to users and clients.
• To respond to user enquiries and offer support to users and clients.
• To send administrative information to you, such as changes to our terms and notices.
• To request feedback and to contact you about your use of our Services.
• To send you marketing and promotional communications, in accordance with the consent provided. You can opt out at any time.
• To save or protect an individual’s vital interest, such as to prevent harm.

3. What legal basis do we rely on to process your personal information?

Alpha MD business operations are in compliance with the Digital Personal Data Protection Act, 2023. As such, we may rely on the following legal bases to process your personal information:

• Consent: we may process your information if you have given us permission for a specific purpose. You can withdraw your consent at any time.
• Performance of a contract: where necessary to fulfil our contractual obligations to you, including providing our Services or at your request prior to entering a contract.
• Legitimate interests: where necessary to achieve our legitimate business interests, provided those interests do not outweigh your interests and fundamental rights and freedoms.
• Legal obligations: where necessary to comply with our legal obligations, such as cooperating with a law enforcement body or regulatory agency.

4. When and with whom do we share your personal information?

We do not use or disclose your information to anyone except as described in this Privacy Notice. If you send us a request for help, you are likely to tell us your name and email address; we will only use this information to provide the help you have requested. Alpha MD may further share your personal information in the following situations:

• Business Transfers: in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business.
• Business Partners: we may share your personal information with our business partners to offer you certain products, services or promotions.

Alpha MD may contract companies to provide services on our behalf, such as our support desk. We give those organisations access only to the minimum personal information needed to help you, and they are bound by a contract and a duty of confidentiality. These companies cannot access your health information, which is encrypted.

5. Do we use cookies or other tracking technologies?

We use cookies and similar tracking technologies (pixels or web beacons) to enhance your experience on our website, maintain the security of our Services, prevent crashes and assist with basic site functions. Specific information about the cookies we use, expiry periods and how you can refuse certain cookies is set out in our Cookie Policy.

We may share your information with Google Analytics to track and analyse the use of our Services. To opt out, visit the Google Analytics Opt-out Browser Add-on. Our website may also contain social media buttons (X, Facebook, LinkedIn, YouTube, Instagram) and links to other websites; this Privacy Notice does not extend to those third-party websites, as their policies may differ from ours.

6. How long do we keep your information?

Whenever we collect or process your personal data, we only keep it for as long as is necessary for the purpose for which it was collected or until you ask us to delete it. At the end of that retention period, or as per applicable legal requirements, we will either delete your data completely or anonymise it. If this is not possible (for example, where your information is stored in backup archives), we will securely store your data and isolate it from any further processing until deletion is possible.

7. How do we keep your information safe?

We have put in place appropriate administrative, technical and physical security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, destroyed or accessed without authorisation. These measures include confidentiality agreements with third parties, secure development practices, security due diligence of service providers, and ISO 27001-based organisational security policies. We also have procedures to deal with any suspected personal data breaches and will notify you and any applicable regulator where legally required.

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee that unauthorised third parties will never be able to defeat our security and improperly access your information.

8. Do we collect information from minors (children)?

We adopt a range of measures to try to ensure that no information is knowingly solicited from individuals who do not meet the minimum age of 18 (or other applicable age based on your jurisdiction). Processing of any personal data of a child or a person with a disability is done through verifiable consent of the parent or lawful guardian. No processing is done to cause any detrimental effect on the well-being of a child, and Alpha MD does not undertake tracking, behavioural monitoring or targeted advertising directed at children.

9. What are your personal data rights?

Where Alpha MD acts as the Data Fiduciary, we will respect your rights under data protection law. We verify all requests through email before actioning them and reserve the right to deny a request where we are unable to verify your identity satisfactorily. Your rights include:

• Access: you have the right to ask us for copies of your personal data.
• Rectification: you have the right to ask us to rectify any personal data you think is inaccurate, incomplete or not updated.
• Erasure: you have the right to ask us to erase your personal data in certain circumstances.
• Restriction: you have the right to ask us to restrict the processing of your personal data in certain circumstances.
• Portability: you have the right to ask us to transfer the information you provided from one organisation to another, or to give it to you.
• Objection / opt-out: you have the right to object to processing based on legitimate interests, or where it is used for direct marketing.
• Withdrawing consent: you can withdraw consent previously given at any time, without affecting the lawfulness of prior processing.
• Grievance redressal: you have the right to readily available means of grievance redressal in respect of any act or omission by Alpha MD relating to your personal data.
• Nominate: you have the right to nominate another individual to exercise your rights in the event of your death or incapacity.

You have the right to complain to the Data Protection Board of India, only after exhausting the opportunity of grievance redressal with Alpha MD. If you have any questions or comments about your privacy rights, you may email us at nilesh.abhang@alphamd.com.

10. What are your duties?

With rights come duties. We encourage you to observe the following:

• Do not impersonate another person while providing personal data for a specified purpose.
• Do not suppress any material information while providing personal data for a specified purpose.
• Do not register a false or frivolous complaint or grievance with Alpha MD or a Supervisory Authority.
• Furnish only verifiably authentic information while exercising the right to rectification or erasure.

11. How can you contact us about this notice?

If you have any questions or comments about this Notice, you may contact our Data Protection Officer (DPO) by email at nilesh.abhang@alphamd.com, or by post at: Alpha MD Private Limited, Data Protection Officer, 1st Floor, 315, Balgovind Wadi, New Prabhadevi Road, Prabhadevi, Mumbai 400025, India.

12. Changes to this Privacy Notice

We may update our Privacy Notice from time to time. The updated version will be indicated by an updated “Revised” date at the top of this privacy notice. We will notify you of any changes either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice periodically.