ASK-DOCTORS.COM GDPR COMPLIANCE POLICY

Effective Date: 25th November, 2024

This GDPR Compliance Policy ("Policy") explains how Ask-Doctors.com ("Platform"), operated by SWISS AYURVEDA PRIVATE LIMITED ("Company"), registered in India under CIN U86901MP2024PTC073695, with its registered office at H. No. 186, Bhel, Bhopal, Huzur, Madhya Pradesh, India, 462022, ensures compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 for users based in the European Union (EU).

By using the Platform, you agree to the terms outlined in this Policy. If you do not agree, please discontinue use immediately.

1. Data Controller and Data Protection Officer (DPO)

The Company acts as the Data Controller for personal data collected on the Platform.
A Data Protection Officer (DPO) has been appointed to oversee GDPR compliance.
EU Users can contact the DPO at info@ask-doctors.com for GDPR-related inquiries.

2. Lawful Basis for Data Processing

The Company processes personal data based on the following lawful grounds under GDPR:

User Consent – When Users provide explicit consent for data processing.
Contractual Necessity – When processing is required for providing services.
Legal Obligations – To comply with applicable legal requirements.
Legitimate Interests – For fraud prevention, security, and service improvements.

3. Personal Data We Collect

We collect and process the following types of data from EU Users:

Identity Data – Name, email, phone number.
Medical Data – Health-related information voluntarily shared with Doctors.
Financial Data – Payment information processed via third-party providers.
Technical Data – IP address, device type, cookies, and analytics data.

4. User Rights Under GDPR

EU Users have the following rights under GDPR:

Right to Access – Request copies of personal data stored by the Company.
Right to Rectification – Request corrections to inaccurate or incomplete data.
Right to Erasure (‘Right to be Forgotten’) – Request deletion of personal data.
Right to Restrict Processing – Request limitations on how data is processed.
Right to Data Portability – Request transfer of data to another service provider.
Right to Object – Object to certain types of data processing.
Right to Withdraw Consent – Withdraw consent at any time without affecting prior lawful processing.

Users can exercise their rights by contacting info@ask-doctors.com.

5. Data Retention Policy

Personal data is retained only as long as necessary for service provision and compliance.
Data is deleted or anonymized when it is no longer required.
Users can request deletion of their data as per GDPR rights.

6. Data Security Measures

The Company implements industry-standard security measures to protect user data.
Encryption, access controls, and monitoring systems are in place to prevent data breaches.
If a data breach occurs, affected users will be notified as required by GDPR.

7. Data Transfers Outside the EU

The Company stores and processes data outside the EU, primarily in India.
All data transfers are conducted in compliance with GDPR adequacy standards.
The Company uses Standard Contractual Clauses (SCCs) for legal data transfers.

8. Use of Third-Party Services

Payment processors, analytics providers, and cloud storage services may process personal data.
Third-party providers are required to comply with GDPR in their operations.
Users are encouraged to review the privacy policies of third-party services.

9. Complaints and Dispute Resolution

EU Users can file GDPR-related complaints with the Data Protection Authority (DPA) in their country.
The Company will cooperate with regulatory authorities in GDPR enforcement.

10. Changes to This Policy

The Company reserves the right to modify this Policy at any time.
Continued use of the Platform after modifications constitutes acceptance of the updated terms.

11. Governing Law

This Policy is governed by GDPR and relevant EU laws.
Any disputes shall be resolved under applicable EU data protection laws.

For GDPR inquiries, contact info@ask-doctors.com.