This notice applies to the T3Care website (www.t3care.in), the patient teleconsultation portal at /teleconsultation, and the T3Care software used by clinics, doctors, front-desk staff, pharmacies and laboratories.

• The clinic or doctor you consult is the Data Fiduciary under the DPDP Act: it decides why and how your health record is used.
• T3Care [legal entity name, registered address — placeholder] is the clinic's Data Processor and technology provider. T3Care operates the website, the patient portal and the servers on the clinic's behalf and processes your data only on its instructions and as described here.

Patients (portal and clinic records)

• Identity and contact: name, date of birth, gender, mobile number (verified by SMS one-time code), email and address where you give them, emergency contact.
• Health data: blood group, allergies, medical history, the reason for a consultation you type when booking, and the clinical record the doctor creates - notes, prescriptions, reports, uploaded documents and photos.
• Family profiles: the same details for the family members you add to your account, and for a child under 18 the name and relationship of the parent or guardian who consents.
• Consent records: which notice version you agreed to, when, and the IP address and browser used to give it.
• Teleconsultation call metadata: appointment time, when the call started and ended and who ended it. Video and audio are not recorded or stored.

Clinic users (doctors and staff)

• Name, professional registration details, work phone/email, clinic and login credentials.

Technical data

• Server logs: IP address, browser type, request time, request identifier and the action performed (access audit trail).
• On your device, the portal stores your sign-in session and a short-lived copy of your own profile and appointment list in browser storage so pages load quickly. It is removed when you sign out. We do not use advertising or analytics cookies.

• Treatment and teleconsultation: to register you with the clinic, match you to a doctor, schedule the consultation, run the video call and keep your clinical record.
• Communication about your care: SMS one-time codes, appointment confirmations, time changes and the join link for your call.
• AI-assisted documentation (doctor-side, where enabled): a doctor may use AI features to read uploaded reports or draft notes. This is a tool for the doctor; it is used only where the clinic has enabled it and the required consent is on record.
• Security, audit and legal obligations: keeping access logs, detecting misuse, and meeting record- keeping duties under medical-council and other laws.

We do not sell personal data, use it for advertising, or profile you for marketing.

• Consent (DPDP Act s.6): for the health data you enter in the portal and for teleconsultation. You give it by ticking the consent box on the registration and booking screens; the exact text and version are recorded. You can withdraw it at any time (section 8 below).
• Legitimate uses (DPDP Act s.7): data you voluntarily provide for a specified purpose (s.7(a)), compliance with a legal obligation (s.7(d)), and responding to a medical emergency (s.7(f)).
• Until the DPDP Rules take full effect, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 apply to health data, and this notice is also published under Rule 4.

Your data is shared with the clinic and doctor you choose. To run the service, T3Care uses the following processors under contract; each only receives what its function needs:

• Supabase - database and file storage, hosted in Mumbai, India (AWS ap-south-1).
• Render - application servers (API and video signalling), hosted in Oregon, United States.
• OpenRouter / Google - AI models used for the doctor-side document analysis described above, processed in the United States. Only the document or note being analysed is sent, and only where that feature is enabled.
• Twilio - SMS delivery for one-time codes and appointment messages (your mobile number and the message text).
• Google Firebase - sign-in for doctors' devices and crash reporting for the doctor app. Patients do not sign in through Firebase.
• Vercel - hosts this website and the patient portal pages.

We may also disclose data where the law requires it (for example a court order or a notifiable-disease report) and, with notice to you, to a successor if T3Care is merged or acquired.

Your clinical records are stored in India. However, the application servers that process each request, and the AI models used by doctors, run in the United States, so your data is transmitted to and processed on servers outside India in the course of providing the service. Transfers are made under contracts that require the processor to protect the data to the standard required by Indian law (DPDP Act s.16; SPDI Rules r.7). If the Central Government restricts transfers to any country we will stop using processors located there.

• Clinical records (profile, consultations, prescriptions, reports): 3 years after your last visit with the clinic, in line with the record- keeping norms of the National Medical Commission / Indian Medical Council regulations, unless a longer period is required by law or by a pending legal claim.
• Consent and audit records: for as long as the record they relate to, so we can demonstrate lawful processing.
• Server and access logs: 1 year (this meets the 180-day minimum in the CERT-In directions of April 2022).
• SMS one-time codes: minutes - they expire after 5 minutes.

When the retention period ends, or when you validly ask for erasure and no legal duty requires keeping the record, the data is deleted or irreversibly anonymised.

Under the DPDP Act you may, free of charge:

• Access a summary of the personal data held about you and who it has been shared with (s.11).
• Correct or update inaccurate or incomplete data, and erase data that is no longer needed for the purpose it was collected for (s.12).
• Withdraw consent at any time (s.6(4)). Withdrawal stops future processing based on consent but does not affect processing already carried out lawfully, and the clinic may still have to keep your clinical record under medical-record rules.
• Nominate a person to exercise these rights for you if you die or become incapacitated (s.14).
• Raise a grievance with the Grievance Officer below (s.13) and, if unresolved, with the Data Protection Board of India.

To exercise a right, write to the clinic you consulted or to the Grievance Officer with your registered mobile number so we can verify it is you. We respond within 30 days.

A profile for anyone under 18 may only be created and used by that child's parent or legal guardian, who must give consent on the child's behalf (DPDP Act s.9). We record the guardian's name, relationship and verified mobile number with that consent. An adult guardian must be present with the child during any video consultation, as required by the NMC Telemedicine Practice Guidelines. We do not track children or show them targeted content.

• All traffic between your browser, our servers and our processors is encrypted in transit (TLS). Video and audio in a teleconsultation are encrypted in transit (DTLS-SRTP) and may be relayed through our servers when a direct connection is not possible; they are never recorded.
• Data at rest is stored with our hosting providers' managed encryption. It is decrypted on our servers to provide the service; we do not claim end-to-end encryption.
• Access to records is limited by role (doctor, front desk, pharmacy, lab, patient) and every access to a patient record is written to an audit log.

If a personal-data breach affects you, we will notify the Data Protection Board of India and you, in the form and time required by the DPDP Act (s.8(6)) and the DPDP Rules, and report cyber-security incidents to CERT-In within the time its directions require. The notice will describe what happened, what data was involved, what we are doing about it and what you can do.

We will post any change on this page with a new version number and effective date. Where a change affects how your health data is used, we will ask for your consent again in the portal before relying on it.