Data Security & Privacy Policy

Overview
This policy (“Data Privacy Policy”) contains what personal data is collected, how such data is
processed and secured, how it is used and conditions of disclosure if any.

Purpose
The purpose of this Policy is to explain the types of personal data concerning you is collected
from you, when and why we collect the personal data, how we use them, the conditions of our
disclosure to third parties, how we secure the stored personal data, and your rights with
respect to such personal data.

Scope
The Data Privacy Policy applies to all personal data collected, used, stored or processed by Jus’
Onco Pvt. Ltd. or any of its subsidiaries, including but not limited to when you use the website
provided by, or avail any services at, any of the Jus’ Onco centres operated by us.
“You” means any person (including anonymous or registered user) visiting the website or any
hospital operated by us or accessing any of our services or any employees, contractors, interns
or consultants engaged by us. “We”, “us”, “our”, “Jus’ Onco” refers collectively to Jus’ Onco Pvt.
Limited and / or its subsidiaries.

All the staff of Jus’ Onco Pvt. Ltd. and its legal subsidiaries are bound by this Policy.

Policy
Personal Information: Personal information is the information through which an individual can
be directly identified or accessed. The personal information collected, processed and stored by
us, includes but is not limited to:
• Name
• Gender
• Date of Birth / Age
• Contact details including mobile numbers and email id
• Contact/ Permanent Address
• Medical records and history
• Health status including physical, physiological and mental health condition
• Aadhar/Driving License / PAN or any other identity document.
• Other details provided at time of registration or voluntarily
• Financial information such as Bank account or credit card or debit card or other
payment instrument details
• Biometric information
• Cookies and data such as IP Address, login credentials, type of device, browser details,
referring URLs, web pages accessed, time zone etc. are logged in case of web site
/application /mobile application visitors or users.

Personal Information Collection: Personal Information or sensitive personal information is
collected directly from persons, on our website or web applications or when one visits any of
the Jus’ Onco centres or avails any of the services offered. Personal information of employees,
interns, consultants and contractors is collected and processed during the course of their
engagement.

The above data is collected by various methods such as those set out below:
• Registration on Jus Onco website or web applications.
• Registration at any of Jus Onco centre while availing services.
• Submitting the details to any staff of Jus Onco.
• Any information provided to us by you through any other channels.

We use cookies and similar tools to collect data to recognize you and your device(s) in
connection with services provided to you or when you access our platforms. You can opt out
from our use of such data from cookies and such similar tools, that we use to provide you with
better services, relevant advertisements or to enhance your website experience.

By sharing the information, or clicking on “I agree” or accepting any other documentation
provided, you consent to the use of the information for the purposes mentioned in this Policy.
• Usage/Processing of Personal Information: The personal information collected shall be
used in the following ways.
• To contact via phone/SMS/email on service updates, payment reminders, send reports,
invoices etc.
• To contact you via phone/SMS/email on providing information regarding promotional
offers.
• To provide services rendered by us, including medical services
• To analyze and improve our services.
• To respond to any legal summons and processes.
• For legal and compliance requirements.
• For employment related purposes.

Collection and processing of Aadhaar information: We may collect Aadhaar information from
you for identification purposes. Please note that it is not mandatory for you to provide your
Aadhaar details for [identification purposes], and you may provide other identification
documents such as [PAN card, passport or driving license]. However, we shall inform you that
collection of Aadhaar information is mandatory for the purpose of compliance with applicable
law. We will not be sharing your Aadhaar details further with third parties without your
consent. We do not retain your Aadhaar details longer than required for the purposes
mentioned above and will keep such details secure and confidential in accordance with
applicable laws.

Disclosures or Transfers: The data/ personal information may be disclosed or shared with third
parties (eg. business associates) for the following purposes
• For insurance services
• For specialized services as part of overall services provided or any schemes
• For analysis and business intelligence services or as part of monetizing or providing
better services
• For disseminating the information to the users vide channels including but not limited to
email, SMS, WhatsApp etc.
• As required under applicable laws or pursuant to any judicial or governmental
proceeding
• In connection with the sale of our business or assets or an acquisition of our business by
a third party or any other merger / amalgamation / acquisition / corporate transaction
involving us

Any such sharing or disclosure of personal and sensitive personal information is only to entities
/ individuals who adhere to the same levels of security standards as maintained by us, to ensure
the security, integrity, and privacy of your sensitive personal information
Reasonable Security Practices and Security of Personal Information: The data security is of
utmost priority for Jus Onco. We adopt adequate measures to prevent unauthorized access to
your personal information and have implemented reasonable security practices commensurate
to the standards required under applicable laws and industry best practices. These include the
following practices:
• All our applications have role-based access to the users ensuring only necessary
information is visible to the users.
• All the data storages are protected by multiple layers of security and password
protection.
• The information is accessible only on a need to know basis.
• Public display will contain only masked information and the personal information is not
revealed at any given point.
Though we try to protect the personal information and prevent any unauthorized access, no
system is 100% fool proof and Jus Onco, are not liable for unintended breach of data causing
disclosure of personal data.
Timelines of Storage: All the information will be stored as long as may be required under
applicable law or the purpose for which it has been collected
Your Rights: You have the following rights under this Policy in relation to your personal
information (subject to applicable law):
• Right of Access and Modification: You can access your personal information at any time
to review any such information that you have supplied. You may modify any such
information that has been found to be inaccurate or incomplete during such review.
• Right to Withdraw Consent: You may also withdraw your consent in relation to
processing of any sensitive personal information that you have provided to us, by
contacting our grievance officer, using the details provided below. Please note however
that this may affect our ability to provide you with services and may therefore lead to
discontinuation of such services for which this information was being used for, at our
sole discretion.

Grievance Officer: Jus Onco shall address any discrepancies and grievances of their provider of
the information with respect to processing of information in a time bound manner. For this
purpose, a Grievance Officer has been designated. The Grievance Officer shall redress the
grievances or provider of information expeditiously but within one month from the date of
receipt of grievance.

Amendments: We may revise the Policy from time to time. Any such changes will be posted on
our website and applications. We may not be able to separately notify you of the revisions each
time that we make them. We encourage you to check this page periodically for modifications or
revisions to the Policy to understand how it affects the use of your personal information. We
will not be responsible for your failure to remain informed about such changes. However,
where required under applicable law, we will obtain additional consent from you for such
changes.

Policy Compliance
Policy Owner: The grievance officer is responsible for implementation of this Policy.

Compliance: The Jus Onco team will verify compliance to this Policy through various methods,
including but not limited to monitoring tools, reports, internal and external audits, and
feedback to the Policy Owner.

Non-Compliance: An employee found to have violated this Policy may be subject to disciplinary
action, up to and including termination of employment.