Privacy Policy

CancerBro Healthcare Private Limited (“Company”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains the privacy practices and policies adopted by the Company and covers the data processing activities of the company as a data controller.

By visiting and/or using the Platform, you agree to the terms of this Privacy Policy and it shall be deemed that you have read in full, accepted and agreed to the terms herein.


“Personal Information” means any information which relates to a living, identifiable person. It may include information such as name, address, email and any other identifier which is used to identify a person. However, it may also include certain sensitive information such as credit card number, health reports, bank account number etc or any data that renders a person identifiable.
“Processing” includes all activities relating to the use of personal data by the Company which is and not limited to data collection, storage, and sharing of the data.
“Data Subject” is the person whose personal information is being collected.
“Services” include any service which may be provided to You via the website, which includes but is not limited to the second opinion service, feedbacks and follow-up queries.

Principles of Data Privacy

The Company believes user protection and data privacy are human rights. The company takes protecting your privacy seriously and recognizes a duty of care towards people to whose data it holds. While the Company would make all efforts to ensure the safety and security of the information provided by you, it shall not be responsible for any loss or theft of data.
We will keep confidential and protect all your personal information except where disclosure is required or permitted by the law.

What Information May Be Collected

In the course of providing services, the Company may have to collect certain personal information from you. This information would, inter alia, include the following:

  1. Contact information: The Company may collect any contact information from You such as your name, address, phone number, email ID etc.
  2. Information to provide the Services: The Company may collect information regarding your medical history, medical reports, details of medication taken, health condition, prescriptions, allergies, age, body weight, medical insurance data, family medical history etc. in order to provide the Services in an efficient manner.
  3. Payment and billing information: The Company may collect your billing name, billing address and payment method when you pay for the Services availed by you on the Platform
  4. Other information: While you use the Platform, the Company may collect information about your IP address and the browser you are using.
You acknowledge and agree that any and all information that is provided by you on the Platform is provided by you voluntarily and at your own risk. You shall be responsible for the accuracy of the information provided to the Company for the use of the Platform and the Services. You shall be solely liable for the consequences of providing incomplete, inaccurate or incorrect information on the Platform, under which circumstances the Company may restrict you from using the Platform by disabling your User Account.
If we learn that we have received any information from an individual under the age of 18, we will use that information only to respond directly to the minor (or a parent or legal guardian) to inform him or her that he or she cannot use the Services and subsequently we will delete that information from our own servers.

How does the Company collect the data

  1. Personal Data provided to the Company:  You willingly consent to provide the Company your personal data when you register on the Company’s online platform or interact with service providers registered therein. You also consent to sharing your personal data with the Company when you subscribe to receive our marketing.
  2. Personal data collected automatically:  Some data such as your browser type, internet protocol address used, your usage habits may be automatically collected by the Company using cookies. Cookies are small pieces of information that a website sends to your computer’s hard drive while you are viewing a website. Cookies are used by the Company to provide you with a more interactive and personal experience on the website. Most browsers allow you to have full control over your cookies which includes whether or not you want to accept them or remove them or modify them in any manner.
  3. Google Analytics:  We use Google Analytics, which uses cookies and similar technologies to collect and analyze information about the use of the Services and report on activities and trends:
    • Remarketing details and Google Display Features.
    • Collect IPs for Geolocation.
    • Event tracking – button clicks, scroll, etc. to learn user behavior and improve our services and add new features.
This service may also collect information regarding the use of other websites, apps, and online resources. You can learn about Google’s practices by going to www.google.com/policies/privacy/‌partners/ and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

What Purposes is the Data Collected Used For?

The purposes for which the Company uses the data collected are:

  1. Verifying your identity: The contact details collected may be used to verify your identity. You agree that such verification is essential for the Company to run the website smoothly and to comply with its legal and other obligations.
  2. Personalizing your experience on the website: The information collected from you would help the Company in personalizing your experience and providing you a better and more efficient service.
  3. Improving the design and style of website.
  4. Providing you with communication regarding offers, products or services, if you have chosen to subscribe to such communication.
  5. For security purposes: The Company might use the information provided by you on the Platform to protect our company, our users, our partners or our associates.
You agree that the aforementioned purposes are valid and give Your informed consent to the collection of data for such purposes.

What is the legal basis for collection of data?

The Company collects data from you on the following legal basis:

  1. a) Performance of a contract with you as a consumer: By accepting the Terms of Use which have been separately published on the website, You agree to enter into a binding legal agreement with the Company. In pursuance of the same, You agree, that, for a valid performance of that contract, it is necessary, that the Company shall collect Your data for the purposes mentioned above.
  2. b) To protect your vital interests by connecting you with service providers.
  3. c) On the basis of consent obtained from you.

How long will the data collected be retained by the Company?

The Company shall not retain your data longer than is necessary for it to fulfill the aforementioned purposes.

Any information that is provided by you may be retained by the Company for:

  1. Providing the Services; and/or
  2. For meeting its obligations under applicable law.
  3. For providing any promotional or advertising materials to You, if You have chosen to subscribe to the same.
Even if you delete your User account on the Platform, the Company may have to retain the information provided by you for a short period of time until the same can be erased from its servers, and for compliance with its obligations under applicable law (if any).

If you want to discontinue the use of the Platform, or if you want to withdraw the consent granted to the Platform for collecting and processing your data, please notify the Company at [email protected] Once you discontinue the use of the Platform or withdraw your consent, the Company shall retain the personal information provided by you on the Platform for such time period as may be mandated by applicable law (if any) and thereafter erase the same in full.

Processing of the data collected by the Platform

All data that is shared by you on the Platform may be processed by the Company. Personally identifiable data shared by you shall be stored and processed only for the purpose of providing the Services, and to contact you. Medical data and reports shared by you on the Platform may be processed for research and analysis in a de-identified form. If you would, at any time, revoke your consent for the processing of the data shared by you on the Platform, you could do so by sending an email to [email protected] Once such an email is received, the Company will remove your personal data from the data that is being processed in the manner set out in the aforesaid paragraphs.

Whom does the Company share your personal data with?

The Company may share your personal data, with:

  1. Service Providers: The company shall share your information with third parties who the company has contracted with for assistance with performing the services such as doctors, the Medical Board constituted by the company to provide you second opinion on your cancer in a deidentified form, payment processors engaged by the Company to safely store and handle payments information. In future, your medical data and history in a deidentified form may be shared with researches for study, analysis and publication.
  2. Compliance with law: The Company can share your information when compelled by a government agency, law, regulation, a court or other legal process, if we believe you are, have or may violate any law, regulation, or our Terms of Use. To enforce our Terms of Use or any other agreements we may have with you; In order to investigate, respond to or resolve problems or inquiries or defend our interests and when you otherwise consent.
  3. Mergers and Acquisitions: The Company reserve the right to share your information in a merger, acquisition, change of control, joint venture or other business combination.

Data Transfers

The Company may transfer to and store the data collected in countries other than the country in which the data was collected. Those countries may not have similar data protection laws as the country in which your data was collected. When we transfer your data, we shall take adequate measures of data protection in accordance with all applicable legal requirements. If you are a resident of EEA, then your data shall be transferred only in compliance with the EU-GDPR Regulations.

The company will keep a copy of all the data stored by it in India at all times as required by the law.

Rights of the Data Subject

You shall have the following rights under this Privacy Policy:

  1. Right to Request access to your personal data: You may, during anytime, after You have given Your consent to the collection of Your data, may request the access to the same, by sending an email to [email protected]. The Company shall provide you with a reasonable access to Your data within 7 working days or within such timeline as mandated under the applicable law.
  2. Right to Request correction of your data: You may, during anytime, after You have given Your consent to the collection of Your data, may request the correction of the same, by sending an email to [email protected]. Please note that failure to do so, shall be Your sole responsibility and the Company shall not be responsible for any incorrect information that You may have supplied.
  3. Request erasure of your data.
  4. Right to demand erasure or deletion of your data.
  5. Right to restrict processing of data: You may at anytime, after You have given consent to the collection of data, request the Company to process or not to process the same in a specific manner. You may send an email to [email protected] in order to request the same. Subject to the applicable law, the Company shall make all reasonable efforts to meet Your request at the earliest. However, You agree, that there could be genuine delays in immediately meeting this request, hence You agree to provide the Company 30 working days to implement Your request.
  6. Right to request transfer of data: You may request to get Your data transferred from one jurisdiction to the other. However, please note that the Company shall not take responsibility if the jurisdiction where You wish Your data to be transferred has inadequate data protection laws or measures.

Security of Your Information

Please note that neither the Company nor any of its employees will have access to the password of your user account that you create on this website. You shall be solely responsible for protecting your login credentials to the website, and the Company shall not be liable for any manner of unauthorized use of your account. You shall be liable to the company for any loss suffered by the Company as a result of unauthorized use of your login credentials. In the event of any misuse or suspected misuse of the same, please notify the Company at [email protected]

How do we protect your information?

We employ various security measures designed to help protect the personal information that we collect from you online. For example, we require that those with access to your personal information commit to us that they will not use or disclose your information outside the scope of this Privacy Policy. Unfortunately, no collection or transmission of information over the Internet can be guaranteed to be 100% secure, and therefore, we cannot ensure or warrant the security of any such information. The Company shall not be liable in any case of improper use or disclosure, authorized modification and unlawful destruction or accidental loss of information, or any security breach which is beyond the reasonable control of the Company.

Third Party Websites

If you click on a link to a third-party site or otherwise leave the Website, you will go to a website that is outside the scope of our platform. The Company does not accept responsibility for any use of your Personal Information by such third parties, and cannot guarantee that they will adhere to the same privacy and security practices as we do. The use of Personal Information by such websites shall be governed by the privacy policies provided therein. Therefore, if you visit a third-party website that is linked to the Company’s Website, you should consult that website’s privacy policy before providing any Personal Information.

Changes to Privacy Policy

There may be changes to this Privacy Policy from time to time. The last effective date shall be highlighted at the top of policy information.

Redressal Of Grievances

If you have any questions or grievances regarding about our platform, the content thereof, our data handling policies, or about our Services, you can reach out to The Grievance Officer of the Company customer support at [email protected] The Grievance Officer shall address any complaint or grievance that is raised by a User within a period of one (1) month from when it is raised.

Where the Company requires additional information to process and respond to the query raised by you, the Company shall notify you the same.

Miscellaneous Provisions

Severability: If any part of this Privacy Policy becomes invalid or unenforceable due to any reason whatsoever, that shall not render the entire Privacy Policy invalid or unenforceable.

Force Majeure: The Company shall not be responsible for any cessation, interruption or delay in the performance of its obligations hereunder due to earthquake, flood, fire, storm, natural disaster, act of God, war, terrorism, armed conflict, labor strike, lockout, or boycott. The Company may at any time, in its sole discretion and without advance notice to you, cease operation of the Platform and the provision of the Services.

No Waiver: A delay or failure by the Company to exercise or enforce any right or provision of this Privacy Policy will not constitute a waiver of such right or provision.

Notices: All notices given to You by the Company or by You to the Company or another user shall be in writing and in the English language. Such notice shall be sent by e-mail or mailed by a prepaid internationally-recognized courier service to the intended recipient at the address set out below:

To the Company: 301 Vardhman Chamber, Vikaspuri, Delhi, India - 110084 To the user: At the email ID provided at the time of registration. Governing Law; Jurisdiction: This Privacy Policy is governed by the provisions of Indian law and is subject to the jurisdiction of the courts at New Delhi. Alternatively, the Parties may decide to submit to arbitration. The arbitrator would be a sole arbitrator chosen by the Company and the venue would be New Delhi. The language of arbitration shall be English.

Contact us

If you have any queries about the Privacy Policy, please write to us on . [email protected].