Privacy Policy

Your privacy is important to us. Maintaining your trust and confidence is one of our highest priorities. We ensure secure transactions and strive to take reasonable care in the protection of information we receive during the course of us rendering services.

As used in this Privacy Policy, terms such as “we” or “our” or “us” or “Company” or “IHX” refer to IHX Private Limited and its current and future affiliate entities.

As used in this Privacy Policy, terms such as “You” or “you” or “Your” or “your” are intended to refer to (i) such person who directly or indirectly (through any person and / or body corporate) provides any Personal Information/ Sensitive Personal Data/ Information, or (ii) such person and / or body corporate who is lawfully (and with proper consent and / or authorization) disclosing and / or transferring any Personal Information / Sensitive Personal Data / Information of an individual that has been collected by such person and / or body corporate, to us, and would be governed under this Privacy Policy.

The purpose of this Privacy Policy (“Privacy Policy” / “Policy“), as amended from time to time, is to give you an understanding on how we intend to collect, share, store, transfer, disclose, process and use the information you provide to us.

IHX Tools” as used within this Privacy Policy shall refer to website, IHX Platform and / or other interfaces including health vault, software, programmes, etc. developed by the Company on which Personal Information/ Sensitive Personal Data/ Information is collected.

IHX Platform” under this Policy refers to the software, web or mobile application (whether accessed through a computer system, mobile device or any other form) and includes all past and present versions of the platform owned, developed (in part) and controlled, including under any other name, by the Company and subscribed by you to submit/ exchange/ process/ receive the necessary patient, medical, billing, KYC or any other healthcare related information and integrate with third party payer systems. For clarity, the term “IHX Platform” as specifically used within provisions of this this Privacy Policy, is intended to cover and / or refer to only the users of the IHX Platform vis-à-vis such specific provisions.

This Privacy Policy may be subject to further changes including as may be warranted by change in law. Upon updating the Policy, we may revise the “Updated” date at the bottom of this Policy. We therefore request you to go through our Privacy Policy frequently to be updated with changes incorporated from time to time. Your continued engagement with us will imply your acceptance of such updates to this Policy.

If you do not agree to the terms of this Privacy Policy, please do not (i) access or use our IHX Tools, (ii) avail services from us; and (iii) disclose your information to us.

By using the IHX Tools and providing us with your and/or your family members and/or your dependents information, you hereby consent to the use, collection, storage, disclosure, processing and transfer of such information for the purposes as disclosed in this Policy. You are providing the information out of your free will. You have the option not to provide the data or Personal Information or Sensitive Personal Data or Information sought to be collected if you do not agree with this Policy.

Collection of information and usage

We may collect certain Personal Information, Sensitive Personal Data or Information from you and/or your family members and/or your dependents while using the IHX Tools directly from the concerned payer, provider and employer, if applicable.

Personal Information or Data” or “information” means any information that relates to you and/or your family members and/or your dependents and may include date of birth, employee code, email address, residential address, mobile number, alternate telephone number, etc.

Further, you would be required to give us certain “Sensitive Personal Data or Information” about you and/or your family members and/or your dependents, Sensitive Personal Data or Information, which would include, information which consists of information relating to –

  • financial information such as bank account or any other payment instrument details;
  • physical, physiological and mental health condition;
  • medical records and history;
  • any detail relating to the above clauses as provided to body corporate for providing service; or
  • any of the information received under above clauses by body corporate for processing, stored or processed under lawful contract or otherwise:

provided that, any information that is freely available or accessible in public domain or furnished under the Right to Information Act, 2005 or any other law for the time being in force shall not be regarded as Sensitive Personal Data or Information.

Notwithstanding the above definition of “Personal Information” and “Sensitive Personal Data or Information”, the definition of “Personal Information” and “Sensitive Personal Data or Information” shall have the same meaning as provided under the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011.

We inform you that the IHX Tools may collect certain Personal Information and/or Sensitive Personal Data or Information about you and/or your family members and/or your dependents such as medical and health records including but not limited to your prescription, test reports, past medical history, etc. We understand that the Personal Information and/or Sensitive Personal Data or Information is extremely private to you and/or your family members and/or your dependents and assure you that it will be used only for providing required healthcare services as mutually agreed to be rendered by us.

While using the IHX Tools and for availing any of our services you could be required to give us your and/or your family members and/or your dependents Personal Information and/or Sensitive Personal Data or Information. This could be done post login on the IHX Tools using the credentials given by us, which will be shared with you as mentioned in this Privacy Policy by email, which is unique to you and you will be required to change the password at the time of first login.

We may, at a time, ask you for your personal and business information such as name, address, email address, designation, organization, country you belong to, in order to provide you information on our services. We will use your information to respond to you, regarding the reason you contacted us.

You may update, collect and manage Personal Information and / or Sensitive Personal Data or Information when using the IHX Tools. The Company processes such data as a processor under your direction. You, as data controllers, are responsible for complying with any regulations or laws that require providing notice, disclosure, and/or obtaining consent prior to collecting your Personal Information and/or Sensitive Personal Data or Information using the IHX Tools.

Collection and use of personal data for direct marketing purposes

In addition to the information set out above, the following describe how we use Personal Data for direct marketing purposes.

Personal Data we collect and use for marketing purposes relates to clients & prospects and other companies with which we have an existing or a new business relationship. The Company gathers individual’s business contact information like name, job role, email id, phone no, and address either from public sources, or from third party data providers.

We send e-mail, or call or mail our client, prospects or other companies with whom we want to develop or maintain a business relationship in accordance with applicable data privacy laws. The Company uses customer relationship management (CRM) database technology to manage and track our marketing efforts. Our CRM databases include personal data of our client, or prospects and other companies with whom we already have a business relationship or want to develop one.

You can exercise your right to prevent marketing communications by clicking an unsubscribe link in the emails you receive from us.

Collection and use of information to provide and improve IHX Platform

We use your Personal Information and/or Sensitive Personal Data or Information to provide the product and services to you.

We collect data about how our products and services are used by monitoring and tracking our product users. We use this data to develop and improve the IHX Platform and providing any additional services.

We also use the data (including Sensitive Personal Data or Information / information) collected from you for the following:

  • Facilitation of end to end claims management by Payer(s).
  • Provision of services including the anonymization of data, conversion of unstructured data into a usable, structured format.
  • Internal record keeping.
  • Providing services relating to contract management
  • Health Vault
  • Providing any additional services.

We use Personal Information and/or Sensitive Personal Data or Information in an anonymized manner for machine learning that supports certain product features and functionality with the IHX Platform. You may opt-out of having your Personal Information and/or Sensitive Personal Data or Information used for machine learning purposes by emailing grievance.officer@ihx.in.

Payer(s)” here refers to insurance companies and third-party administrators with whom you have an Agreement with. In the event that we have an Agreement with the same Payer(s), we may receive information about your organization or users of your IHX Platform account from the Payer(s). This will be governed by the Agreement between you and the Payer(s), IHX and the Payer(s) along with the End User License Agreement accepted by you for using IHX.

Collection and use of information to secure and protect you and IHX Tools

We use your Personal Information and/or Sensitive Personal Data or Information to investigate and help prevent security incidents. We may also use this information to meet legal requirements. We use your Personal Information and/or Sensitive Personal Data or Information to verify user accounts and new product sign-ups, and to detect and prevent Product abuse. This includes enforcing our End User License Agreement.

Collection and use of information for mobile notification

If you use the mobile applications, we may send you push notifications from time to time in order to update you about events and promotions. If you no longer wish to receive such communications, you may turn them off at the device level.

Collection and use of information for log files

Log files are used by the Company to provide general statistics regarding use of the IHX Tools. For these purposes, we do link this automatically-collected data to other personal data such as name, email address, address, and phone number. We also use log files to troubleshoot and investigate security incidents.

Collection and use of information from third parties

We receive information from third party service providers. We may receive and use this information from these service providers in combination with other information we collect through other means described in this Privacy Policy for the purposes of providing you with updates and an improved IHX Platform, like personalized communications, event promotion, and tailoring the product to improve user experience.

Collection and use of information for social media features

IHX Tools may include social media features from Facebook, Instagram, LinkedIn etc. These features may collect your IP address, which page you are visiting on our sites, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our IHX Tools. This Privacy Policy does not apply to these features. Your interactions with these features are governed by the privacy policy and other policies of the companies providing them.

Access

You may be given the privilege to upload and store your and/or your family members and/or your dependents medical and health records on the IHX Tools to which only you, authorised Company personnel and third parties duly authorised by the Company shall have access to by using their unique username.

Information we collect on IHX Tools

Usage Information. Whenever you visit/ use the IHX Tools, we, as well as any third-party advertisers and/or service providers, you may use a variety of technologies that automatically or passively collect information about how the IHX Tools is accessed and used (“Usage Information”). Usage Information may include browser type, device type, operating system, application version, the page served, the time, the preceding page views, and your use of features or applications on the IHX Tools. This information helps us keep the IHX Tools fresh and interesting to our visitors and allows us to tailor content to a visitor’s interests.

Device Identifier. We automatically collect your IP address or other unique identifier (“Device Identifier”) for the Device (computer, mobile phone, tablet or other device) you use to access the IHX Tools. A Device Identifier is a number that is assigned to your Device when you access a IHX Tools or its servers, and our computers identify your Device by its Device Identifier. We may use a Device Identifier to, among other things, administer the IHX Tools, help diagnose problems with our servers, analyze trends, track users’ web page movements, help identify you and your interests, and gather broad demographic information for aggregate use.

The technologies used on the IHX Tools to collect Usage Information, including Device Identifiers, include but are not limited to: cookies (data files placed on a Device when it is used to visit the IHX Tools), mobile analytics software and pixel tags (transparent graphic image, sometimes called a web beacon or tracking beacon, placed on a web page or in an email, which indicates that a page or email has been viewed). Cookies may also be used to associate you with social networking sites like LinkedIn, Facebook and Twitter and, if you so choose, enable interaction between your activities on the IHX Tools and your activities on such social networking sites (for clarity, this Privacy Policy does not apply to these features and your interactions with these features are governed by the privacy policy and other policies of the companies providing them). We, or our vendors, may place cookies or similar files on your Device for security purposes, to facilitate site navigation, to perform analytics, and personalize your experience while visiting our IHX Tools (such as allowing us to select which ads or offers are most likely to appeal to you, based on your interests, preferences, location, or demographic information). A pixel tag may tell your browser to get content from another server.

To learn how you may be able to reduce the number of cookies you receive from us, or delete cookies that have already been installed in your browser’s cookie folder, or prevent tracking activities, please refer to your browser’s Tools or help menu or other instructions related to your browser. Because an industry-standard Do-Not-Track protocol has not yet been established, our information collection practices on our IHX Tools will continue to operate as described in this online privacy policy regardless of any “Do Not Track” signals that may be sent by certain browsers. However, you may refuse to accept cookies in order to prevent tracking activities. If you do disable or opt out of receiving cookies, please be aware that some features and services on our IHX Tools may not work properly because we may not be able to recognize and associate you with your account(s). In addition, the offers we provide when you visit us may not be as relevant to you or tailored to your interests.

Account and User Information. We collect Personal Data and/or Sensitive Personal Data or Information when you register to use the IHX Tools, create or modify user information / ID for your organization, set preferences, or provide any other related information to access or utilize the IHX Tools.

Payment Information. We collect payment and billing information when you register for paid products or services. For example, we may ask you to provide a billing address, or a billing contact for your IHX Platform account. If you give us payment information, we use it solely as authorized by you in accordance with this Privacy Policy.

You may also provide payment information, such as a credit card number or bank account numbers, when purchasing products or services. We use secure third-party payment service providers to manage payment processing, which is collected through a secure payment process.

Third Party Integrations. You may connect third party integrations to your IHX account, which may ask for certain permissions to access data or send information to your IHX account. It is your responsibility to review any third-party integrations you authorize.

Any permission(s) granted by you, grants these third parties’ access to your data, which may include (but is not limited to) granting third-party applications access to view, store, and modify your data on IHX. We are not responsible for the practices of third-party integrations, so please carefully review the permissions you grant to third-party applications.

Gmail Integration. If you use the Gmail integration with IHX Platform, you will be asked to give us access to information from your Gmail or Google account. By using the ‘Gmail Integration’ with the IHX Provider Platform you will grant the IHX Provider Platform ability to send emails from your connected Gmail account. All information which is a part of the email triggered by IHX on your behalf, such as contents of the email body, attachments and ‘to’ addresses will be filled / verified by you on IHX prior to making the submission. You can learn more about how we access this via in-app notice from Google when you connect to Gmail through IHX Platform.

Additional Limits on Use of Your Google User Data. IHX Platform’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Generic Mailbox Connection (Non-Gmail). If you connect your mailbox to IHX through entering the email ID and the password/app password (Generic Inbox Connection), we will use the data to send an email on your behalf based on the information entered by you. We may also read specific responses received on your email (from email IDs specified / confirmed by your users) through the mailbox connection which will be used for the purpose of updating the IHX Platform for your consumption.

You will be able to remove the Gmail integration or generic mailbox connection at any time on the IHX Platform.

Information we receive from third parties

We may receive information about you from third parties such as consumer or other reporting agencies and medical or health care providers; or through your interactions with our affiliated companies. In addition, if you are on another website and you opt-in to receive information from us, that website will submit to us your email address and other information about you so that we may contact you as requested. You may also choose to participate in a third-party application or feature (such as one of our LinkedIn, Facebook or Twitter applications or a similar application or feature on a third-party website) through which you allow us to collect (or the third party to share) information about you, including Usage Information and Personal Information such as lists of your friends, “likes”, comments you have shared, groups and location. Services like LinkedIn, Facebook Connect give you the option to post information about your activities on our IHX Tools to your profile page to share with others within your network. In addition, we may receive information about you if other users of a third-party website give us access to their profiles and you are one of their “connections” or information about you is otherwise accessible through your “connections’” web page, profile page, or similar page on a social networking or other third-party website or interactive service. We may supplement the information we collect about you through the IHX Tools with such information from third parties in order to enhance our ability to serve you, to tailor our content to you and/or to offer you opportunities to purchase products or services that we believe may be of interest to you.

Purpose for which personal information and/or sensitive personal data or information is collected and processed

We would like to state that we collect Personal Information and/or Sensitive Personal Data or Information that is absolutely necessary and relevant for us to make your experience hassle-free, convenient, smooth and most importantly, safe. This will also help us in providing you with customized services, assist you with all your queries, resolve the issues faced by you, to follow up with you in order to ensure a long, sustained relationship and most importantly to safeguard you from any kind of fraudulent and unlawful usage. Personal Information and/or Sensitive Personal Data or Information may be collected by us directly from you and/or your family members and/or your dependents for the purpose of providing inpatient and outpatient services. We use data collection methods / mechanisms such as “Cookies” on certain pages of the IHX Tools to help analyze our web page flow and promote trust and safety. “Cookies” are small files placed on your hard drive that assist us in providing our services. We offer certain features that are only available through the use of “Cookies”. We also use “Cookies” to allow you to enter your password less frequently during a session. Most “Cookies” are “Session Cookies”, meaning that they are automatically deleted from your hard drive at the end of a session. You are free to decline our “Cookies” if your browser permits you to do so although we recommend strongly that you allow them to ensure you have access to all of our services.

IHX allows you to among other things, manage cashless health insurance claims across all Payer(s). When you use the Platform, you may enter Personal Data such as first and last name, email address, physical address, phone number, medical information, KYC or other information about you. We do not control the content of the data you enter on the IHX Tools outside the validation logics if any. We store the information entered by you on our service providers’ servers but process it as a processor under your instructions and in accordance with our End User License Agreement.

You control and are responsible for entering or updating the information you process using IHX Platform and for complying with any regulations or laws that require providing notice, disclosure, and/or obtaining consent prior to transferring the Personal Data and / or Sensitive Personal Data or Information to IHX for processing purposes.

Data storage and retention

All your Personal Information and/or Sensitive Personal Data or Information is hosted and/or processed by us securely at Google Cloud Platform (GCP)and Amazon Web Services data centres situated at Mumbai and New Delhi, India or at such location(s) in India as the Company may so desire to store.

We use a variety of security technologies and procedures to help protect your Personal Information and/or Sensitive Personal Data from unauthorized access, use or disclosure. We secure the Personal Information and/or Sensitive Personal Data you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. All Personal Information and/or Sensitive Personal Data is protected using appropriate physical, technical and organizational measures and is in compliance with applicable laws.

Your and/or your family members and/or your dependents’ Personal Information and/or Sensitive Personal Data or Information is retained by us only for the purpose of providing the required services or for historical or statistical or legal purposes and such retention shall be for a period as required under applicable law.

We retain Personal Information and/or Sensitive Personal Data or Information that you provide to us where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations, resolve disputes and enforce our agreements).

When we have no ongoing legitimate business need to process your Personal Information and/or Sensitive Personal Data or Information, we securely delete the information or anonymize it or, if this is not possible, securely store your Personal Information and/or Sensitive Personal Data or Information and isolate it from any further processing until deletion is possible. We will delete this information at an earlier date if you so request.

If you have elected to receive marketing communications from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our content, products, or services, such as when you last opened an email from us or stopped using IHX. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.

The data you process in connection with the IHX Platform is retained according to IHX End User License Agreement.

Transfer / sharing of information and safety precautions

We respect your privacy and hereby declare we do not transfer and / or disclose your and/or your family members and/or your dependents’ Personal Information and/or Sensitive Personal Data or Information except as under:

  • To law enforcement agencies in connection with an investigation having the interest of general public at large, after having been approved by the due process of law;
  • To our associates and affiliates to help detect and prevent fraud, identity theft and other illegal activities, correlate related or multiple accounts to prevent abuse of our services; and to facilitate joint or co-branded services that you request where such services are provided by more than one corporate entity;
  • To our full-time employees and associates on a need-to-know basis for the purpose of enabling the Company to provide the necessary services to you;
  • With our empanelled healthcare ecosystem participants on a need-to-know basis for the purpose of enabling the Company to provide the necessary services to you. We may employ other third parties and service providers to provide services on our behalf to you on the IHX Platform. We may need to share your information with service providers to provide information about products or services to you. Examples may include providing customer service or support, notification services through chat to you / your customers or any other necessary services to you. The data will be shared on a ‘need to know’ basis and these service providers are prohibited from using your Personal Information and/or Sensitive Personal Data or Information except for the specific purposes they are engaged, and they are required to maintain the confidentiality of your information. In all cases where we share your information with such agents, we explicitly require the agent to acknowledge and adhere to our privacy and data protection policies and standards. For clarity, any permissions(s) granted by you to IHX, grants these third parties access (by way of transfer, disclosure or otherwise) to your data, for the purposes provided herein.
  • We shall also share such information with our associates or affiliates should the Company decide to undergo restructuring in anyway or is acquired by any other entity and ensure that in such an event the other entity continues to follow this policy strictly;
  • With your employer or its authorized representatives, if applicable, and on receipt of a formal request from your employer and upon receipt of necessary approval(s).
  • Your authorized representatives, if applicable, and on receipt of a formal request from your organization and upon receipt of necessary approval(s).

We never sell your personal information including your Sensitive Personal Data or Information.

Links to external websites

IHX Tools may provide links that may lead the user to third-party websites. IHX does not control those sites or their privacy practices, which may differ from IHX’s practices. We are not responsible for the privacy practices or the content of such other websites. We encourage you to review the privacy policy of any website before submitting your personal information.

Consent

By using the IHX Tools and providing your and/or your family members and/or your dependents’ Personal Information and/or Sensitive Personal Data or Information, you hereby consent to the collection, storage, disclosure, transfer, processing and usage of your and/or your family members and/or your dependents’ Personal Information and/or Sensitive Personal Data or Information by us as per the terms of this Privacy Policy. Kindly frequent this section to keep yourself updated of any changes made by us in the Privacy Policy.

You hereby confirm to the Company that you have taken necessary consent from your family members and/or your dependents for submission of their Personal Information and/or Sensitive Personal Data or Information with us.

Request to know

You may request and, subject to certain exemptions, we will provide:

  • The categories of personal information we collect about you.
  • The categories of sources of the personal information we collect about you.
  • Our business or commercial purpose for collecting your personal information.
  • The categories of personal information we disclose about you.
  • The specific pieces of personal information we collect about you.

Request to delete

You may request that we delete the Personal Information and/or Sensitive Personal Data or Information we have collected about you. Subject to exemptions, such as a need to retain the information to service products you have purchased from us or existing commercial customer or partner commercial contracts who are a party to a particular transaction, or such as requirements under applicable law, we will delete the Personal Information and/or Sensitive Personal Data or Information we have collected from you.

Your privacy rights, choice and access

You control the Personal Information and/or Sensitive Personal Data or Information that you provide to us on the IHX Tools, but some Personal Information and/or Sensitive Personal Data or Information is required by us in order for you to obtain services from us or for you to use the IHX Tools. If you choose not to provide us with your Personal Information and/or Sensitive Personal Data or Information on the IHX Tools, you may not be able to take advantage of some of the services we offer or use some functionality on the IHX Tools. Except as provided above, we will not share Personal Information and/or Sensitive Personal Data or Information collected on the IHX Tools with third parties without your consent. You may also direct us to stop sending you promotional emails by following the removal instructions in a communication you receive from us. Your opt-out request will be processed within 10 business days of the date on which we receive it.

If you wish to modify, verify, correct, or delete any of your Personal Information and/or Sensitive Personal Data or Information collected through the IHX Tools, you may edit your registered user information or contact us atgrievance.officer@ihx.in. In accordance with our routine record keeping, we may delete certain records that contain Personal Information and / or Sensitive Personal Data or Information you have submitted through the IHX Tools.. It may not always be possible to completely remove or delete all of your information from our databases without some residual data because of backups and other reasons. We will retain your information (including geo-location data) for as long as your account is active or as needed to provide you services. If you wish to cancel your online account or request that we no longer use your information to provide you services through the IHX Tools, you may contact us, we will retain and use your information as necessary to comply with our legal obligations, partner or other customer commitments who might be other party to the transactions, resolve disputes, comply with our internal compliance and record retention policies, enforce our agreements, carry out legitimate business functions, and for any other purpose permitted by law. We do not control certain privacy settings and preferences maintained by our social media partners like LinkedIn, Facebook and Twitter. If you wish to make changes to those settings and preferences, you may do so by visiting the settings page of the appropriate social media site.

Right to opt out

The Company respects your privacy considerations and hence provides an option to you, to not provide the Personal Information and / or Sensitive Personal Data or Information sought to be collected. Further, you can also withdraw your consent which was earlier given to the Company, and the same must be communicated to the Company in writing. However, we inform you that on your electing to opt out (as envisaged in this section) or on withdrawal of your consent, the Company may not be in a position to provide you necessary services / benefits for which the Personal Information and/or Sensitive Personal Data or Information was sought to be collected.

Further, you will have the option to not provide your consent, or withdraw any consent given earlier, provided that the decision to not provide consent / withdrawal of the consent is communicated to us at grievance.officer@ihx.in.

Grievance Officer

The name and contact details of the Grievance Officer is provided hereunder to address all your queries and grievances in accordance with the Information Technology Act, 2000, and Rules made thereunder.

Grievance Officer Email: grievance.officer@ihx.in
Address:IHX Private Limited,
No. 9, Shendge Avenue 1st Floor, 2nd Street, Kamaraj Road, Bengaluru - 560042

If you have any reason to believe that we or any company associated with us has misused any of your and/or your family members and/or your dependents Personal Information and/or Sensitive Personal Data or Information please contact us immediately and report such misuse.

We can address any questions, comments and concerns about our online privacy practices and policy. Please write to our Grievance Officer at the above-mentioned email address.

Governing rules and law

If you choose to visit the IHX Tools, your visit and any dispute over privacy is subject to this Privacy Policy. In addition to the foregoing, any disputes arising under this Privacy Policy shall be governed by the laws of India.

This Privacy Policy is compliant with the provisions of The Information Technology Act, 2000 and Rules made thereunder including any modifications or amendments made thereto. The Company may made necessary changes to this Privacy Policy consequent upon any changes or modification in the law. It is hence imperative that you frequently read this Privacy Policy to keep yourself updated of any changes made by us.

Last updated on: 11th October 2022