Privacy Policy & Data Protection

1. Introduction & Aggregator Role

This Privacy Policy outlines how the Cannulix technology platform ("Cannulix", "we") manages your "Digital Personal Data". We operate solely as a digital bridge between patients and independent professionals.

Because we do not provide medical services directly, our role as a "Data Fiduciary" is limited to the collection and transmission of your service request to the relevant independent contractor.

2. Data We Collect

We collect only the minimum data required to facilitate logistics and coordination:

• Account Data: Name, Mobile Number, Email Address, and Home Address.
• Service Data (Sensitive): The specific medical requirement (e.g., "Need IV Drip", "CBC Test"), patient age, gender, and basic instructions provided by you in our booking forms.
• System Data: IP Address, device parameters, and platform usage metrics collected automatically via secure third-party databases (e.g., Firebase).

3. Purpose of Processing

We process your data purely for logistical and technical facilitation:

3.1 Service Fulfillment: To create your booking, broadcast your request to our local network of independent professionals, and confirm assignments.

3.2 Communication: To send you WhatsApp/SMS updates regarding your booking status or to contact you from our digital support desk.

3.3 Platform Security: To prevent fraudulent bookings and maintain the integrity of our digital ecosystem.

4. Consent & Delegation

4.1 Explicit Consent: By submitting a form on Cannulix, you explicitly consent to our processing of your data for the stated purposes.

4.2 Delegation of Liability: You acknowledge that to fulfill your request, your sensitive service data MUST be passed to an independent nurse or lab technician. Once your data is transmitted to the assigned independent professional for the home visit, Cannulix holds no liability for how that individual professional stores or handles your data locally.

5. Data Sharing Protocol

We do not sell your personal data. Your data is disclosed under strict necessity:

5.1 Independent Professionals: Your name, contact number, address, and medical requirement are shared exclusively with the assigned independent professional to facilitate the requested home visit.

5.2 Cloud Partners: We use encrypted, industry-standard cloud infrastructure (like Google Firebase) to host and process data securely.

5.3 Legal Authorities: We will disclose data without prior consent if mandated by a court order or to comply with Indian law enforcement agencies.

6. Your Rights (DPDP Act)

As a Data Principal, you are entitled to:

• Right to Access: Request details of the personal data we hold about you.
• Right to Correction: Update or correct your profile details via your Cannulix Account dashboard.
• Right to Erasure: Request the deletion of your account and associated non-transactional data. (Note: Logs of completed medical bookings may be retained to comply with legal auditing requirements).

7. Security & Retention

Digital Security: We deploy modern web security protocols and rely on secure databases to protect your data from unauthorized access.

Retention Period: We retain your data as long as your account is active or as needed to resolve disputes, prevent fraud, and comply with the law. Once the retention period expires, data is securely erased or irreversibly anonymized.

8. Cookies & Analytics

Cannulix uses temporary session cookies and local storage to keep you logged in and to ensure the platform functions smoothly. We do not use intrusive third-party health-tracking cookies to monitor your activity across other websites.

9. Children's Data

Cannulix does not independently collect data from minors. If a booking is made for a patient under 18 years of age, the person creating the booking affirms they are the lawful guardian providing consent for data processing.

10. Digital Grievance Desk

Cannulix operates as a digital-first platform. For any privacy concerns, data erasure requests, or to exercise your DPDP rights, please contact our Digital Data Protection Desk: