Privacy Policy
At HealthRaksha Private Limited, we are deeply dedicated to safeguarding the personal information and privacy of medical, nursing, pharmacy, and allied healthcare learners.
- Zero selling, renting or trading of student data.
- Encrypted cloud storage with Supabase Row Level Security.
- RBI-compliant Razorpay tokenized payments.
- Compliant with India's DPDPA 2023 & IT Act 2000.
1. Overview & Statutory Framework
This Privacy Policy outlines how HealthRaksha Private Limited ("HealthRaksha", "Company", "We", "Us", or "Our") collects, processes, stores, protects, and manages the personal data of users, learners, students, instructors, and visitors across our platform (healthraksha.in) and mobile-responsive applications.
We operate in strict adherence to Indian legal mandates, including the Digital Personal Data Protection Act (DPDPA), 2023, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. Information We Collect
To facilitate course enrollment, verify student identities, coordinate live clinical workshops, and generate authenticated digital certificates, we collect the following categories of data:
Identity & Contact Information
Full student name, primary email address, active WhatsApp/mobile telephone number, and residential state/city.
Academic & Professional Background
Designation/profession (e.g., Medical Student, MBBS, BDS, B.Pharm, Nursing, Clinical Intern, Resident Doctor), medical college or affiliated institution name, and year of study.
Financial & Transaction Identifiers
Razorpay order IDs, payment transaction references, generated Registration IDs (e.g. HR-REG-YYYY-XXXXX), order timestamps, and course enrollment records. Note: HealthRaksha does not store credit/debit card numbers, CVVs, or bank net banking passwords.
Technical & Verification Telemetry
Browser type, operating system, IP address, session access logs, assessment scores, and certificate issuance records.
3. How We Use Your Information
We process your personal information exclusively for legitimate educational and operational purposes:
- Enrollment & Platform Access: Provisioning course dashboards, video lecture streaming, and learning management system (LMS) modules.
- Instant Digital Delivery: Generating the on-screen official registration receipt slip immediately upon successful payment verification.
- Cohort Coordination: Providing direct one-click WhatsApp cohort links (
wa.me/916392282328) and lecture reminders for live Zoom/Google Meet workshops. - Official Communications: Dispatching essential transactional notifications, receipts, syllabus schedules, and assessment links via email.
- Verifiable Certification: Rendering cryptographic certificate verification records on our public verification portal (/verify) to enable healthcare recruiters and hospital administrators to validate student credentials.
4. Database Architecture & Data Security
Student enrollment data, profiles, and order records are stored within an enterprise-grade Supabase Cloud database powered by PostgreSQL. We enforce strict Row Level Security (RLS) policies ensuring that students can only inspect their own authenticated data records.
All data in transit is encrypted using modern TLS 1.3 / HTTPS cryptographic protocols. Data at rest is secured using AES-256 encryption. We conduct regular security audits and defensive vulnerability inspections to safeguard student records against unauthorized access, leaks, or tampering.
5. Strict Zero Third-Party Selling or Sharing Policy
Our Absolute No-Spam & Non-Disclosure Guarantee:
HealthRaksha Private Limited does NOT sell, rent, monetize, broker, or trade your name, email address, phone number, or academic profile to third-party commercial marketing companies, telemarketers, or advertising agencies under any circumstances.
Your personal information is shared strictly and solely with essential trusted operational infrastructure partners necessary to fulfill our educational contract with you:
- Razorpay Software Private Limited: RBI-authorized payment aggregator for processing checkout transactions securely.
- EmailJS / Transactional Mail Relay: For automated delivery of enrollment confirmations and auto-reply support receipts.
- Statutory Authorities: Strictly when compelled by an authoritative court order, governmental regulatory directive, or applicable Indian law.
6. Payment Processing & Financial Security
All financial transactions on HealthRaksha are handled via Razorpay, India's leading PCI-DSS Level 1 compliant payment gateway.
- When you check out, payment credentials (card numbers, expiry dates, CVVs, and UPI pins) are tokenized within Razorpay's encrypted checkout modal.
- HealthRaksha servers and databases never handle, log, or store raw credit/debit card numbers or sensitive banking secrets.
- Order verification uses server-side HMAC-SHA256 signature verification in constant time to thwart fraud and price manipulation.
7. Cookies & Browser Storage
We use minimal, privacy-respecting browser storage techniques (such as cookies and LocalStorage) strictly for functional purposes:
- Preserving authenticated login sessions and dashboard states.
- Maintaining local registration receipt backups so students can re-print their admission slips offline.
- We do not employ aggressive cross-site tracking cookies, behavioral tracking pixels, or intrusive ad networks.
8. Your Legal Rights (DPDPA 2023)
Under the Digital Personal Data Protection Act, 2023, you are entitled to exercise the following rights:
- Right to Access: You may request a summary of the personal information stored in your account.
- Right to Correction & Updating: You may request corrections to any inaccuracies in your name, contact details, or profile via your dashboard or by emailing support.
- Right to Erasure: You may request the deletion of your account and personal data, subject to statutory accounting, audit, and tax retention obligations under Indian law. (Note: Revoking verification data may render previously issued certificates unverifiable).
- Right to Grievance Redressal: You have the right to register a formal complaint with our designated Grievance Officer regarding any data handling concern.
9. Data Retention
We retain student personal information for the duration of the active course enrollment and for a reasonable statutory period thereafter to maintain academic transcripts, facilitate lifetime certificate verification on /verify, comply with taxation audits, and resolve any warranty or payment disputes.
10. Designated Grievance Officer & Contact
In compliance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are set forth below:
*Grievances are acknowledged within 48 hours and resolved within 30 days of receipt.