Privacy Policy

1. Who We Are

Lynkcare HealthTech Private Ltd is a company incorporated under the Companies Act, 2013, with its registered office at Ground Floor, 766, Shakti Towers 1, Anna Road, Anna Salai, Chennai, Tamil Nadu 600002. We operate the MedLynk digital staffing platform connecting healthcare providers with healthcare professionals across India.

We act as the Data Fiduciary under the DPDPA for all personal data processed through the Platform.

2. Information We Collect

2.1 Information You Provide

• Identity data: Full name, date of birth, gender, Aadhaar number (for verification only), PAN (for TDS purposes)
• Contact data: Mobile number, email address, postal address
• Professional data (Professionals): Qualifications, registration certificates, employment history, skills, specialisations
• Business data (Providers): Hospital/clinic name, GST registration number, contact person details, facility address
• Financial data: UPI ID or bank account details for payouts (Professionals); shift payment and settlement history (Providers)

2.2 Information Collected Automatically

• Device information: device type, operating system, app version
• Location data: GPS location when using check-in/check-out features (with consent)
• Usage data: pages/screens viewed, features used, session duration
• Log data: IP address, timestamps, error logs

2.3 Information from Third Parties

• Identity and document-verification data obtained — only with your explicit consent — through DigiLocker and MeriPehchaan (Government of India, via API Setu) and other UIDAI-authorised e-KYC providers
• Payment confirmation data from UPI payment partners

3. How We Use Your Information

4. Data Sharing

We share your personal data only in the following circumstances:

• Between Platform users: A Professional's professional profile (name, tier, rating, specialisation) is shared with Healthcare Providers for matching purposes. Contact numbers are masked during in-Platform communication.
• Service providers: Payment partners (UPI processors), cloud infrastructure providers, SMS/OTP providers, analytics tools — all under strict data processing agreements
• Legal authorities: Where required by law, court order, or government direction
• Business transfers: In the event of a merger, acquisition, or sale, with prior notice to users

We never sell personal data to third parties for marketing purposes.

5. Sensitive Personal Data

We process sensitive personal data including identity, PAN, and professional qualification documents. This data is:

• Collected only with your explicit consent
• Stored in encrypted form using AES-256 encryption
• Accessible only to authorised MedLynk verification staff
• Never shared with Healthcare Providers (only verification status is shared)
• Retained only as long as necessary for verification and compliance purposes

5.1 Aadhaar & DigiLocker

Where you choose to verify your identity using Aadhaar or DigiLocker / MeriPehchaan, you authenticate and provide consent directly on the Government of India platform. We follow a strict data minimisation principle: we do not store your full Aadhaar number in our application databases or logs. We retain only the last 4 digits of your Aadhaar, your verified name, and your verification status. Documents shared via DigiLocker are accepted only where they are issuer-signed (“issued”) documents, and are used solely for identity and credential verification and statutory tax (TDS) compliance.

6. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations. Specifically:

• Account data: retained for the duration of the account plus 7 years (for tax and legal compliance)
• Transaction and shift records: 7 years (GST and income tax requirements)
• Credential documents: retained while the account is active; deleted within 90 days of account closure
• Location data: retained for 30 days after the relevant shift

7. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

To exercise any of these rights, contact us at [email protected] or through the in-app support feature. We will respond within 30 days.

8. Cookies

Our web dashboard and website use cookies and similar technologies. Please refer to our Cookie Policy for full details on what cookies we use and how to manage them.

9. Data Security

We implement industry-standard technical and organisational measures to protect your data, including:

• AES-256 encryption for sensitive documents at rest
• TLS 1.3 for all data in transit
• Role-based access controls limiting staff access to personal data
• Regular security audits and penetration testing
• Mandatory security training for all staff with data access

In the event of a data breach that is likely to result in high risk to your rights, we will notify you and the Data Protection Board of India within 72 hours of becoming aware of the breach.

10. Children's Privacy

The MedLynk platform is intended for users aged 18 and above. We do not knowingly collect personal data from children. If we become aware that personal data has been collected from a person under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via push notification, email, and in-app banner at least 14 days before they take effect. The “Last Updated” date at the top of this page will always reflect the most recent version.

12. Grievance Officer & Contact

As required under the IT Act, 2000, and the DPDPA, 2023, we have designated a Grievance Officer to address data-related concerns:

For general data enquiries, write to us at [email protected].