Privacy Policy

About this policy

7 MANTRA is a healthcare technology platform used by hospitals, clinics and laboratories to manage patient care, records and billing, and to connect with the Ayushman Bharat Digital Mission (ABDM). This policy explains what personal information we collect, why we use it, who we share it with, and the choices you have.

It applies to this website (including its Book a Demo and Contact forms) and to the 7 MANTRA platform and its ABDM features. We handle personal data in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the other Indian laws that apply to us.

Who we are

In this policy, "we" and "us" mean 7 MANTRA, [registered entity name], [registered address]. Manitechnest Solutions LLP [confirm role, e.g. technology partner] builds and runs this website and the platform for us and handles personal data only on our instructions.

Information we collect

Depending on how you use this website and the platform, we may collect:

• Enquiry details: when you use the Book a Demo or Contact form, your name, designation, phone number, email address, location, facility details and message.
• Platform user details: for staff of hospitals, clinics and laboratories who use the platform, their name, role, contact details, login credentials and activity logs.
• Patient and health information: when a healthcare facility uses the platform, details such as name, age, gender, contact details, ABHA number and address, appointments, prescriptions, test results, diagnoses, billing and other health records. The facility that treats you decides what is recorded about your care.
• Technical data: your IP address, browser and device type and the pages you visit, kept in server logs to keep the website secure and working.

How we use information

We use personal information only for the purposes below, and not for any other purpose without your consent unless the law allows or requires it.

• To reply to your enquiry, arrange a demo and share information about our products. We send you an automatic acknowledgement email when you submit a form.
• To provide, support and improve the platform for the healthcare facilities that use it, including appointments, records, laboratory reports and billing.
• To create and link ABHA numbers and addresses, and to share health records through ABDM with the patient's consent.
• To send one-time passwords (OTPs) by SMS to verify your identity.
• To keep the website and platform secure, prevent misuse and fix faults.
• To meet our legal and regulatory duties.

Consent and ABDM

We process your personal data with your consent or, where the law allows, for a legitimate use such as giving you a service you asked for or complying with a legal duty.

Health records are shared through ABDM, with other facilities or with you in your health app, only with the patient's consent. You can view and withdraw these consents in the ABDM-enabled health app you use, and withdrawing a consent stops further sharing under it.

We do not store Aadhaar numbers or OTPs on this website.

You can withdraw any other consent at any time by writing to us (see "How to use your rights"). Withdrawal does not affect what we did before it, and some services may stop working without the data they need.

Who we share it with

We do not sell personal information and we do not use it for advertising. We share it only:

• With the hospital, clinic or laboratory that treats you or employs the user. That facility decides how its own patient and staff data is used.
• Through ABDM and the National Health Authority (NHA) systems, where you have given consent or the law requires it.
• With service providers that help us run the website and platform, such as hosting, SMS and email providers. They must keep the data secure and confidential and use it only on our instructions.
• With courts, regulators and government authorities where the law requires it.
• With a successor, if our business is merged or sold. The successor must keep to this policy.

Cookies

This website uses only the cookies it needs to work, such as a session cookie and a security token that protect its forms. We do not use advertising or analytics cookies or trackers.

Our forms use Google reCAPTCHA (the "I'm not a robot" box) to stop spam and automated submissions. When you load or use it, Google may set a cookie and receive your IP address and browser details, which it uses to tell people from bots under the Google Privacy Policy and Terms of Service.

How long we keep it

We keep enquiry records for [retention period] and then delete them.

Patient and health records are kept for as long as the healthcare facility needs them for care and as the law requires, and are then deleted or anonymised.

Security

We use reasonable technical and organisational safeguards: role-based access so users see only what their job requires, encryption of data in transit, audit trails for access to patient records, regular backups, and secure development and testing practices. We store personal data on servers in [hosting location, e.g. India]. No online service can be completely secure.

If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.

Your rights

Under the DPDP Act, 2023 you may:

• ask for a summary of the personal data we process about you and who we have shared it with;
• ask us to correct, complete or update it;
• ask us to erase it, unless we must keep it by law;
• withdraw your consent at any time;
• nominate another person to exercise these rights if you die or cannot do so yourself; and
• use the grievance process below.

How to use your rights

Email us at manitechnest@gmail.com. We may need to check your identity first, and we will reply within the time the law allows. For records held by a hospital, clinic or laboratory, you can also ask that facility directly.

Children

We do not knowingly collect personal data of a child (a person under 18) without the verifiable consent of a parent or lawful guardian. We do not track or monitor children's behaviour or direct advertising at them.

Links to other websites

This website links to other sites, such as ABDM and the NHA. We are not responsible for their privacy practices, so please read their policies.

Changes to this policy

We may update this policy from time to time. The effective date at the top shows the latest version. If a change is significant, we will tell you in a suitable way, such as a notice on this website.

Grievance officer

Name: [Grievance officer name]. Email: [grievance email].

We aim to resolve complaints promptly. If you are not satisfied with our reply, you may complain to the Data Protection Board of India.