1. Data fiduciary
Indigital Technologies LLP, 802, Synergy Business Park, Sahakar Wadi, Off Aarey Road, Hanuman Tekdi, Goregaon East, Mumbai ? 400063, Maharashtra, India, is responsible for processing described in this policy, except where a clinic or healthcare professional independently controls information collected through their Site5 website.
2. Information we collect
- Enquiry and account data: name, email, phone number, organisation, professional and clinic details.
- Website content: qualifications, registration details, biography, services, images, clinic hours, addresses and other content submitted for publication.
- Transaction data: invoice, amount, payment status and Razorpay identifiers. We do not directly store full card numbers, CVV, UPI PIN or banking passwords.
- Technical data: IP address, browser, device, approximate location, referral URL, timestamps, logs, cookies and interaction data.
- Support data: messages, requests, attachments and resolution history.
3. Purposes and lawful handling
We process data to respond to enquiries; prepare quotations; verify and onboard customers; generate, host and maintain websites; process and reconcile payments; provide support; secure the platform; prevent fraud; comply with law; improve performance; and send service communications. Marketing communication is sent only where permitted and can be opted out of.
4. Cookies and analytics
We may use essential cookies for security and service operation, and limited analytics to understand aggregate usage. You can restrict non-essential cookies through browser settings, although some functionality may be affected.
5. Sharing and processors
We do not sell or rent personal data. We may share only what is necessary with contracted providers for hosting, infrastructure, email, communications, analytics, support and payments; with professional advisers; with a successor during a lawful business reorganisation; or with authorities when legally required. Razorpay processes payment information under its own privacy terms.
6. Public information
Information approved for a doctor or clinic website becomes publicly accessible and may be indexed by search engines. Do not submit patient records, confidential health information or content that should not be public unless a specifically contracted, compliant feature requires it.
7. Security and international processing
We use reasonable administrative, technical and organisational controls appropriate to the data and service. No internet transmission is risk-free. Providers may process information from locations permitted by applicable law and subject to appropriate contractual safeguards.
8. Retention
We retain information only as long as necessary for the stated purpose, active service, legal compliance, accounting, dispute resolution and security. Public website content is removed or deactivated after termination according to the service order and legal obligations; backup deletion may take additional time.
9. Your rights
Subject to applicable law, you may request access, correction, updating or deletion of personal data; withdraw consent; opt out of marketing; nominate another person where available; or raise a grievance. We may need to verify your identity and may retain information where law requires it.
10. Children and patient information
Site5 is sold to adult professionals and organisations and is not directed to children. We do not knowingly collect children?s personal data through this corporate site. Each healthcare professional is responsible for privacy notices and lawful handling of patient information collected independently through their website.
11. Changes
We may update this policy to reflect legal, operational or technical changes. The effective date above identifies the current version.
12. Privacy contact
For privacy requests or grievances, email dpdp-support@indigitalit.com. General support: support@indigitalit.com. You may also write to our Mumbai address stated above.