Privacy Policy
Introduction
We, Clinic Collective Co, a product of Krystal Group , we respect the privacy of everyone who uses our platform. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices and rights you have, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDPA") and other applicable Indian law.
By creating an account or using Clinic Collective Co, you agree to this Policy, along with our Terms and Conditions.
The Data Fiduciary
Clinic Collective Co. is operated by Krystal Group, which determines the purpose and means of processing personal data collected through the platform.
Personal Information We Collect
- Name, email address, and mobile number, collected at registration
- Login credentials (passwords always stored encrypted, never in plain text)
- Basic technical details — IP address, device/browser type, and cookies — so the platform works properly and securely
- A date-of-birth or age confirmation at sign-up, with parental/guardian consent captured where a minor is detected
How We Use Your Information
- Create and manage your account, and let you log in securely
- Operate the core functionality of the platform (see application-specific purposes below)
- Respond to your questions, complaints, or support requests
- Keep the platform secure and prevent fraud or misuse
- Meet our legal obligations, such as record-keeping required by law
Your Consent and Right to Withdraw
Where we rely on your consent, it is always freely given, specific, and clearly explained — never through a pre-ticked box. You can withdraw consent at any time through your account settings or by writing to our Grievance Officer. Withdrawing consent won’t affect anything we did with your data before that point, but it may mean we can no longer provide certain parts of the service.
Sharing and Disclosure of Personal Data
We do not sell personal data. We only share it with service providers who help us run the platform (hosting, analytics, support), under confidentiality obligations, or with government/regulatory authorities where required by law.
Data Security
- Encryption of sensitive data at rest
- HTTPS enforced platform-wide, with secure, encrypted session cookies
- Role-based access, restricting personal data to authorized personnel on a need-to-know basis
- Audit logging of administrative access to personal data
Data Retention
Personal data is retained only as long as necessary for the purpose it was collected, or as required by law, and is thereafter securely deleted or anonymized.
Your Rights Over Your Data
- Know what information we hold about you and how it’s used
- Access a copy of your personal information
- Correct any information that’s inaccurate or incomplete, generally through your own profile settings
- Ask us to delete your account and associated personal data, subject to records we must legally retain
- Nominate someone to exercise these rights on your behalf in the event of your death or incapacity
- Raise a grievance if you’re unhappy with how your data has been handled
Children’s Data
Where we know an account belongs to someone under 18, we do not use their data for tracking, profiling, or targeted advertising, in line with the DPDPA’s protections for children, and we capture parental/guardian consent before creating the account.
Where Your Data Is Stored
Personal data is processed and stored within India. We do not transfer it outside the country except where required and permitted by law.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law or how our service works. We will notify you of significant changes through the platform or by email. Continued use after such changes means you accept the updated Policy.
Governing Law
This Privacy Policy is governed by the laws of India, and courts in [City, State] shall have exclusive jurisdiction over any dispute arising from it.
Grievance Redressal
If you have any concern about how your personal information has been handled, you can reach our Grievance Officer:
Field Details
Name [Name / Designation]
Email [grievance@domain]
Phone [Phone number]
Address [Registered postal address]
Acceptance of Terms
These Terms and Conditions ("Terms") govern your access to and use of [Application Name] (the "Platform"), operated by [Legal Entity Name]. By registering for or using the Platform, you agree to be bound by these Terms and by our Privacy Policy.
Eligibility
You must be able to form a legally binding contract to use the Platform. Where a minor is permitted to hold an account, use is subject to verified parental or guardian consent, as described in the Privacy Policy.
Account Registration and Security
- You are responsible for maintaining the confidentiality of your login credentials
- You must provide accurate and current information when registering
- You must notify us promptly of any unauthorized use of your account
Use of the Platform
You agree to use the Platform only for its intended purpose and in compliance with applicable law.
User Obligations and Acceptable Use
- You will not use the Platform to upload unlawful, defamatory, or infringing content
- You will not attempt to gain unauthorized access to the Platform or other users’ accounts
- You will not misuse or attempt to circumvent any security feature of the Platform
Intellectual Property
All content, trademarks, and technology on the Platform are owned by [Legal Entity Name] or its licensors. You may not copy, modify, or distribute any part of the Platform without written permission.
Limitation of Liability
To the maximum extent permitted by law, [Legal Entity Name] is not liable for indirect, incidental, or consequential damages arising from your use of the Platform. The Platform is provided on an "as is" basis.
Indemnity
You agree to indemnify and hold [Legal Entity Name] harmless from any claims arising out of your breach of these Terms or misuse of the Platform.
Suspension and Termination
We may suspend or terminate your access to the Platform for violation of these Terms, suspected fraud, or at your own request, subject to any data retention obligations described in the Privacy Policy.
Dispute Resolution and Governing Law
These Terms are governed by the laws of India. Any dispute arising from these Terms shall be subject to the exclusive jurisdiction of the courts in [City, State].
Force Majeure
Neither party shall be liable for any failure to perform due to causes beyond its reasonable control, including natural disasters, government action, or failure of third-party infrastructure.
Amendments
We may amend these Terms from time to time. Material changes will be notified through the Platform or by email, and continued use after such changes constitutes acceptance.