Privacy Policy

1.Scope of this policy

This policy covers personal data collected through the Qlinio marketing website at qlinio.com — principally the contact form and the demo booking form.

It does not cover patient health data. Health records processed inside our products — Qlinikit and Qlini — belong to the clinic, hospital, pharmacy or laboratory that operates them. In that context those organisations are the Data Fiduciary and we act on their instructions under a separate written agreement. If you are a patient asking about your health records, please contact the clinic that treated you; we cannot access or release those records to you directly.

2.Who we are

This website is operated by Qlinio Private Limited (“Qlinio”, “we”, “us”), CIN U62011KL2026PTC105151, registered at 2/1149/I 100, Hilite Business Park, Tower 2, Iringallur, Kozhikode, Kerala 673014, India. For personal data collected through this website, we are the Data Fiduciary.

3.What we collect, and why

Set out below, itemised, is every category of personal data this website collects, why we collect it, and what it enables.

When you submit the contact form

• Your name — so we can address our reply to you.
• Your email address — so we can send that reply.
• Your message — so we can understand and answer your enquiry.

This enables one thing: a response from a person at Qlinio to the question you asked. We do not add you to a marketing list on the basis of a contact form submission.

When you book a product demonstration

• Your name — to identify the booking and address you during the demo.
• Your phone number — to reach you about the appointment.
• Your email address — to send the verification code and the booking confirmation.
• A one-time verification code — to confirm the email address is yours, so appointments cannot be booked in your name by someone else.
• Your clinic’s name and city — optional, and only when you are enquiring about Qlinikit, so the demonstration is relevant to the kind of practice you run.
• Which product you are interested in — to route the booking to the right team.

This enables the scheduling and delivery of a demonstration appointment, and the confirmation and reminder messages that go with it.

Technical data

• Your IP address and standard request information — recorded by our hosting infrastructure as part of serving the site. When you submit a demo booking, your IP address is also passed to our booking service so it can apply rate limiting and detect automated abuse.

When you simply browse the site

Nothing beyond the technical data above. This website runs no analytics, no session recording and no advertising tags, so reading a page here is not measured, recorded or attributed to you in any way.

4.Cookies and session recording

This website sets no cookies at all. It needs none to work, and it loads no third-party tool that would set one — so there is nothing to accept, nothing to decline, and no consent banner to dismiss.

If that ever changes we will ask for your consent before the tool loads, describe every cookie here with its purpose and lifetime, and treat silence as a refusal.

5.What we still do not do

These are statements of fact about how this site is built rather than aspirations, and each one is verifiable by opening your browser’s network inspector on any page:

• We run no analytics, no heatmaps and no session recording.
• We run no advertising pixels, and no retargeting that uses your visit to this site.
• We load no third-party scripts, fonts or media — every asset comes from our own domain, and the site’s Content-Security-Policy blocks anything else.
• We do not sell personal data, and we do not share it with data brokers.
• We do not profile you, and we make no automated decisions about you.
• We do not collect health data, and we never ask for it through this website. Please do not put patient details into a contact form message — this website is not the right place for them, and we will delete any we receive.

If this changes we will update this policy before the change goes live, and ask for your consent again where the change requires it.

6.Our lawful basis

We process the data above on the basis of your consent, which you give by choosing to submit a form after reading this notice, and in reliance on the provisions of the Digital Personal Data Protection Act, 2023 permitting processing for a purpose you have voluntarily provided your data for and not indicated you object to.

Because the site performs no measurement, there is nothing else we need your consent for — the only personal data we hold is what you deliberately typed into a form.

You can withdraw any consent at any time by writing to support@qlinio.com. Withdrawal does not affect processing already carried out, and where a demonstration is already scheduled we may need to contact you once to cancel it.

7.Who we share it with

We share personal data only with the following, and only as far as each needs it:

• Our own demo booking service, which is part of the Qlinikit platform and operated by us. Demo bookings are handled there rather than on this website.
• An email delivery provider, to send verification codes and replies to you.
• Our hosting and infrastructure providers, who process data on our instructions in order to run the website.
• Professional advisers, or a public authority, where we are required to disclose by law or legal process.

Each provider is engaged under a contract requiring it to process personal data only on our instructions and to protect it. We do not disclose personal data for any other purpose.

8.Transfers outside India

Some of the service providers above — principally our hosting and email delivery providers — store or process personal data on infrastructure outside India.

These transfers are made in accordance with Section 16 of the Digital Personal Data Protection Act, 2023, which permits transfer other than to countries restricted by notification of the Central Government.

9.How long we keep it

We keep personal data only as long as the purpose it was collected for requires:

• Contact form enquiries — 24 months from your last correspondence with us, then deleted.
• Demo bookings — 24 months from the appointment, then deleted.
• Server logs — 90 days.

We delete sooner if you withdraw consent or ask for erasure, unless we are required by law to keep the record. We keep it longer only where a legal obligation or an ongoing dispute requires it.

10.How we protect it

We take reasonable security safeguards to protect personal data, including:

• Encryption in transit — the whole site is served over HTTPS.
• Access limited to the people who need it to do their job.
• A standing rule that submitters’ names and email addresses are never written to application logs or error reports.
• Automated abuse controls on the forms, so they cannot be used to send bulk traffic in your name.

No system is perfectly secure, and we do not claim otherwise. What we commit to is that a failure will be handled as set out below rather than concealed.

11.Your rights

Under the Digital Personal Data Protection Act, 2023 you have the right to:

• Access — obtain a summary of the personal data we hold about you and how we are processing it.
• Correction and completion — have inaccurate or incomplete data corrected or completed, and outdated data updated.
• Erasure — have your personal data deleted, unless we are required by law to keep it.
• Withdraw consent — at any time, as easily as you gave it.
• Grievance redressal — raise a complaint with us and receive a response.
• Nominate — nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

Exercising any of these rights is free, and we will not treat you differently for doing so.

12.How to exercise your rights

Write to our Grievance Officer at support@qlinio.com, or by post at 2/1149/I 100, Hilite Business Park, Tower 2, Iringallur, Kozhikode, Kerala 673014, India. Tell us which right you want to exercise. We may need to ask a question to confirm your identity before we act, so that we do not disclose your data to someone else.

We respond to requests and grievances within 30 days of receiving them. The statutory outer limit for grievance redressal is 90 days; our published period is shorter and is the one we hold ourselves to.

13.Complaining to the Data Protection Board

If you are not satisfied with our response, or we do not respond within the period above, you may complain to the Data Protection Board of India. Raising the matter with us first is ordinarily expected, but it does not limit your right to approach the Board.

14.Children

Under the Act, a child is anyone under 18. This website is aimed at clinicians and healthcare businesses, not children, and we do not knowingly collect personal data from anyone under 18. We do not track, profile or serve behavioural advertising to children — we do none of those things to anyone.

If you believe a child has given us personal data without verifiable parental consent, write to support@qlinio.com and we will delete it.

15.If there is a data breach

If a personal data breach affects your data, we will inform the Data Protection Board without delay, and we will tell you directly — in plain language, describing what happened, what data was involved, what we are doing about it, what you can do to protect yourself, and who to contact with questions. A fuller report follows to the Board within 72 hours, as the Rules require.

16.Changes to this policy

When this policy changes we will update the effective date at the top of the page and, for any change that materially affects how we handle your data, contact you directly where we hold a means of doing so.

17.Contact

The Grievance Officer
Qlinio Private Limited
2/1149/I 100, Hilite Business Park, Tower 2, Iringallur, Kozhikode, Kerala 673014, India
support@qlinio.com