Privacy Policy

Last updated: July 2026

DPDP Act, 2023

Privacy at a glance

The short version. The full policy below governs.

What we collect: Your name, work email, phone number, organization and role — only the fields on the form you are filling in.
Why we collect it: To reply to your enquiry, arrange a demo, and send service updates you ask for. Nothing else.
We never sell your data: Your details are not sold, rented, or shared with advertisers. Processors who host or deliver this for us are bound by contract.
How long we keep it: For as long as needed to answer you and meet our legal obligations, after which it is deleted.
Your rights: Access, correct, or erase your data, withdraw consent, nominate someone to act for you, or raise a grievance — at any time.
How to reach us: Our Data Protection Officer answers rights requests and grievances at dpo@b12healthcare.in.

1. Introduction

B12 Healthcare Private Limited ("B12", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our clinical operating system platform (collectively, the "Service").

This policy is compliant with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and aligns with ISO 27001 information security standards.

2. Information We Collect

We may collect the following categories of information:

Personal Information: Name, email address, phone number, organization name, and job title when you submit forms or contact us.
Usage Data: IP address, browser type, operating system, pages visited, and time spent on the Service.
Clinical Data: When deployed in healthcare facilities, we process patient health records as a data processor under contractual agreements with the healthcare provider (the data fiduciary).

3. How We Use Your Information

To provide, maintain, and improve the Service
To respond to inquiries and provide customer support
To send administrative notifications (service updates, security alerts)
To comply with legal obligations under Indian law
To detect and prevent fraud or security incidents

4. Data Security

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 encryption in transit, role-based access controls, and comprehensive audit logging. Our platform is ISO 27001 certified and undergoes regular third-party security audits.

5. Data Retention

We retain personal data only as long as necessary to provide the Service or comply with legal obligations. Clinical data processed on behalf of healthcare providers is retained per the provider's data retention policies and applicable regulations including the DPDP Act and ABDM guidelines.

6. Your Rights

Under the DPDP Act, you have the right to:

Access and obtain a copy of your personal data
Correct inaccurate personal data
Request erasure of your personal data
Withdraw consent at any time
Grievance redressal for data-related complaints

7. Cookies & Similar Technologies

We use a small number of cookies and browser storage entries. You choose which non-essential ones to allow the first time you visit, and you can change that choice at any time using the “Cookie preferences” link in the footer.

Essential: Required for the site to function — including remembering your cookie choice itself. These are always active and cannot be switched off.
Analytics: Google Analytics, used to understand which pages are read and how the site performs. These load only after you accept. If you decline, no analytics cookies are set and no analytics tag is requested.

We do not use advertising or cross-site tracking cookies. Declining analytics does not limit your access to any part of the Service.

8. Third-Party Services

We may use third-party service providers for hosting, analytics, and communication. These providers are contractually obligated to protect your data and are not permitted to use it for purposes other than providing services to us.

9. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

For questions about this Privacy Policy or to exercise your rights under the DPDP Act, contact our Data Protection Officer at:

Email: dpo@b12healthcare.in
Address: B12 Healthcare Private Limited, WeWork Olympia Cyberspace, Alandur Road, Thiru Vi Ka Industrial Estate, SIDCO Industrial Estate, Guindy, Chennai, Tamil Nadu 600032, India