Privacy Policy

This policy explains how OlivHealth handles personal data. We keep it plain and honest. OlivHealth is operated from Ajit Nagar, Rampura Phul, Bathinda, Punjab 151103, India. If anything here is unclear, write to us at [email protected].

Two kinds of data, two roles

OlivHealth serves hospitals and clinics, so it helps to separate two things:

• Your hospital’s patient data. When a hospital uses OlivHealth to run its operations, the hospital decides what patient data is collected and why. We process that data on the hospital’s behalf, under our agreement with them. The hospital is responsible for its lawful basis and for responding to its patients’ requests.
• Data we collect directly. When you visit this website, book a demo, sign up, or contact us, we collect the information you give us and basic technical data. For that, OlivHealth is responsible for how it is used.

What we collect directly

• Contact details you share, such as your name, work email, phone number and hospital.
• Messages you send us over email, WhatsApp or our forms.
• Basic technical data your browser sends, such as approximate location, device and pages viewed, used to keep the site working and understand what is useful.

How we use it

• To respond to enquiries, schedule demos, and provide the service you asked for.
• To operate, secure and improve the platform and this website.
• To send you service and product updates you have opted into. You can opt out anytime.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

Cookies and analytics

This website uses Google Analytics to understand how visitors use the site, such as which pages are viewed and which links are clicked, so we can improve it. Google Analytics sets a cookie with a random identifier and processes basic technical data on our behalf; it does not store your IP address. We do not use it for advertising, and we do not combine it with the patient data our hospital customers process on the platform. You can block cookies in your browser settings, or install Google’s opt-out add-on, without losing access to the site.

How we protect it

Access to data is role-based and least-privilege, traffic is encrypted in transit over HTTPS, and data sits in managed infrastructure with encryption at rest and automated backups, hosted in India. We are transparent about our current position: we follow these practices by design but do not presently hold formal certifications such as HIPAA or SOC 2, and we will not imply that we do.

Data residency and the DPDP Act

Data is hosted in India. We aim to align with India’s Digital Personal Data Protection Act, 2023 (DPDP Act), including honouring reasonable requests to access or correct the personal data we hold about you directly.

Retention

We keep personal data only as long as needed for the purpose it was collected, or as required by law or our customer agreements. Patient data processed for a hospital is retained and deleted according to that hospital’s instructions.

Your choices

To access, correct or delete the personal data we hold about you directly, or to raise a concern, write to [email protected]. If your request concerns patient data held by a hospital that uses OlivHealth, please contact that hospital, who is the data controller, and we will support them.

Changes

We may update this policy as the product and the law evolve. We will change the “last updated” date above when we do.