LifeBridge MedTech Private Limited ("LifeBridge MedTech", "we", "us", or "our") — CIN: U32509MH2026PTC472729 · GSTIN: 27AAGCL9486J1ZQ, with its registered office at Room No. 7, Plot No. 324, Prabhodhankar CHS, RSC 32, Charkop Sector No. 3, Kandivali West, Mumbai – 400067, Maharashtra, India — is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us, in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act). By accessing or using our platforms, you consent to the practices described in this policy.
Information We Collect
We collect information that you provide directly to us, information collected automatically (only with your consent), and information necessary to fulfil your orders.
- Enquiry Data You Provide: Name, email address, phone/WhatsApp number, hospital or organization name, and your requirement details submitted via our quote forms, contact form, product "Enquire" buttons, WhatsApp links, or direct email.
- Chatbot Data: Messages typed into the LifeBridge Assistant and any name/phone submitted through its quotation form.
- Consent Records: Your cookie and communication preferences (essential, analytics, functional, marketing) with a timestamp — retained as lawful proof of consent under the DPDP Act.
- Technical Information: Browser type, operating system, device information, and access timestamps. For consent-audit records only, IP addresses are stored in hashed (HMAC-peppered, truncated) form — never as plain text — and collected only when you make an explicit consent choice.
- Usage Data: Pages visited and interaction patterns, collected only via analytics cookies you have consented to.
- Transaction Data: Order details, purchase history, and delivery information for processed orders.
How We Use Your Information
We use the information we collect for the following purposes only:
- Enquiry Response: Responding to your enquiry and preparing quotations — within our 48-hour proposal commitment.
- Service Delivery: Processing orders, delivering products, installing equipment, and providing after-sales support and maintenance.
- Communication: Contacting you by email, phone, or WhatsApp regarding your enquiry, order, delivery, or service — only with your consent, which you may withdraw at any time.
- Compliance Records: Maintaining records of consent, enquiries, and transactions as required under the DPDP Act, 2023, tax laws, and other Indian regulations.
- Improvement: Analyzing website usage (only with analytics consent) to improve user experience and service quality.
- Security: Detecting and preventing fraud, spam, and unauthorized access.
Cookies & Consent
Our website presents a granular cookie consent banner on your first visit. You may Accept All, choose Essential Only, or Customize your preferences. Your choice is recorded with a timestamp as proof of consent under the DPDP Act, 2023.
- Essential Cookies: Always active — required for website function, security, and form submissions. Cannot be disabled.
- Analytics Cookies: Optional — Google Analytics, loaded only with your explicit consent. Our website implements Google Consent Mode v2: analytics and advertising tags remain in "denied" state until you grant consent.
- Functional Cookies: Optional — enable preferences and the AI chat assistant. If declined, the AI chatbot will not open automatically (you may still open it manually).
- Marketing Cookies: Optional — advertising measurement and retargeting (Google Ads, Meta, LinkedIn). Declined by default.
- Consent Logs: Your choices (with hashed IP and timestamp) are stored securely and automatically deleted after 24 months.
- Withdrawal: Change your preferences anytime by clearing your browser site data and revisiting, or by writing to our Grievance Officer. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Data Sharing & Third Parties
We do not sell, rent, or trade your personal information. We share data only with the following categories of recipients, strictly to the extent necessary:
- WhatsApp (Meta Platforms): When you choose WhatsApp contact, your message and phone number are processed under Meta's privacy policy.
- Google: Google Maps (office location embeds) and — only with your analytics consent — Google Analytics.
- Hosting & API Provider (Render): Securely stores enquiry and consent records in our access-controlled database.
- Logistics & Installation Partners: Only your delivery details, strictly to fulfil your order.
- Regulatory Authorities: Government bodies, courts, or law enforcement when required by applicable Indian law (e.g., CDSCO, GST authorities).
- Business Transfers: In the event of a merger or acquisition, personal data may transfer subject to continued privacy protections.
Data Security
We apply reasonable security safeguards as required under Section 8(5) of the DPDP Act, 2023 and the IT (Reasonable Security Practices and Procedures) Rules, 2011.
- Encryption: HTTPS/SSL encryption for all data transmitted through this website.
- Pseudonymization: IP addresses in consent records are HMAC-peppered and truncated before storage — they cannot be reversed to identify you without a server-side secret.
- Access Controls: Database access is restricted to authorized personnel only.
- Rate Limiting: Public form endpoints are rate-limited to prevent abuse and spam injection.
- Incident Response: Defined protocols for detecting, reporting, and mitigating data breaches in accordance with Indian law, including notification to the Data Protection Board and affected users where required.
Your Rights Under the DPDP Act, 2023
As a Data Principal under the DPDP Act, 2023, you have the following rights regarding your personal data:
- Right to Access: Request a summary of the personal data we hold about you, the processing activities, and the identities of third parties with whom it has been shared.
- Right to Correction & Erasure: Request correction of inaccurate or incomplete data, or erasure of your data — subject to legal retention obligations (e.g., tax records).
- Right to Withdraw Consent: Withdraw consent for future contact or cookie processing at any time, without giving a reason. Withdrawal does not affect processing already carried out.
- Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (Section 10), and if unresolved, with the Data Protection Board of India.
- Right to Nominate: Nominate another individual to exercise your rights in case of death or incapacity.
Data Retention
We retain personal data only as long as necessary for the purpose collected:
- Enquiry & Quotation Records: Up to 24 months from your last interaction, unless a transaction requires longer retention.
- Consent Logs: 24 months, then automatically and securely deleted.
- Invoices & Tax Records: Retained per statutory periods under Indian tax and corporate law (typically 8 years).
- Warranty & AMC Records: For the duration of the warranty or service agreement.
Once the retention period expires, data is securely deleted or anonymized.
Children's Privacy
Our website and services are directed at hospitals, clinics, healthcare institutions, and business professionals — not individuals under 18. We do not knowingly collect personal data from children. Where verifiable consent of a parent or lawful guardian is required under Section 9 of the DPDP Act, we shall seek it before processing any child's data.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, the DPDP Rules, or operational needs. The "Last Updated" date at the top of this page will always show the current version, and material changes will be highlighted on this page.
Grievance Officer
Under the DPDP Act, 2023, the Information Technology Act, 2000 (Section 118A of the IT Rules), and the Consumer Protection (E-Commerce) Rules, 2020, our Grievance Officer is:
CIN: U32509MH2026PTC472729
Mumbai – 400067, Maharashtra
Redressal within 30 days