Privacy Policy

1. Who we are

ALTRcare Pvt. Ltd. (“ALTRcare”, “we”, “us”, or “our”) operates the website altrcare.com and provides a doctor-led weight loss programme using GLP-1 medication in India.

Registered address:
B1 301 Anandvan Phase 1
Indore, Madhya Pradesh 452016
India

Privacy contact: help@altrcare.com

2. What data we collect

We collect the following categories of personal data when you use our website or services:

Identity and contact data

• Full name
• Mobile phone number (WhatsApp-enabled)
• Email address (optional)

Health and biometric data (sensitive personal data)

• Body weight, height, and BMI
• Waist circumference
• Medical conditions (e.g. PCOS, diabetes, hypertension, thyroid disorders)
• Previous weight loss attempts and methods
• Awareness of and prior use of GLP-1 medications
• Blood test results (where bloodwork is conducted)
• Medication prescribed and dosage history

Technical and usage data

• IP address and approximate location
• Browser type and device information
• Pages visited and time spent on site
• Referral source (how you found our website)

Note on sensitive health data:Health and biometric data is classified as sensitive personal data under India's Digital Personal Data Protection Act, 2023 (DPDP Act). We process this data only with your explicit consent and only to the extent necessary to provide you with medical consultation and care.

3. How we collect your data

• Assessment quiz: When you complete the eligibility quiz on our website, you directly provide your health and contact information.
• WhatsApp conversations: When you contact us via WhatsApp, we receive and store conversation content.
• Doctor consultations: Medical information gathered during consultations conducted by our partner physicians.
• Meta Pixel: We use the Meta Pixel (Facebook Pixel) on our website, which automatically collects technical data about your visit (IP address, browser, pages viewed) to help us measure the effectiveness of our advertising campaigns. This does not collect your health data.

4. Why we use your data

5. Who we share your data with

We do not sell your data. We share it only with the following parties, and only to the extent necessary:

• MCI-registered physicians: Your health profile is shared with the doctor conducting your consultation, for the purpose of medical assessment and prescription.
• Licensed pharmacy partners: Your name, phone number, and delivery address are shared with our licensed pharmacy partner to dispatch your medication.
• WhatsApp (Meta Platforms): Our primary communication channel. Messages you send via WhatsApp are subject to WhatsApp's Privacy Policy.
• Meta Platforms (Facebook Pixel): Technical data (IP, browser, site behaviour) is shared with Meta for advertising measurement purposes. No health data is shared with Meta.
• Google (Sheets/Forms): Lead data from our quiz is stored in Google Sheets, subject to Google's Privacy Policy.
• Legal and regulatory authorities: We may disclose your data if required to do so by law, court order, or a government authority.

6. Payments

ALTRcare does not process payments on its website. All payments are made directly via WhatsApp conversation using UPI, PhonePe, or Cashfree. We do not collect, store, or have access to your UPI ID, bank account details, or card information. Payment transactions are governed by the terms and privacy policies of the respective payment providers.

7. How long we keep your data

• Medical records: Retained for a minimum of 7 years from the date of last consultation, as required under the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002.
• Lead and quiz data: Retained for up to 2 years unless you request earlier deletion.
• Marketing communications: Until you withdraw consent or opt out.
• Technical/usage data: Up to 12 months.

8. Cookies and tracking

We use one tracking technology on our website:

We do not use Google Analytics, Hotjar, or any other analytics or tracking tool beyond the Meta Pixel.

9. Your rights under the DPDP Act 2023

Under India's Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data (subject to our legal retention obligations for medical records).
• Right to withdraw consent: Withdraw your consent to data processing at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to grievance redressal: Lodge a complaint with us or with the Data Protection Board of India.

To exercise any of these rights, email us at help@altrcare.com with the subject line “Data Request”. We will respond within 30 days.

10. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These include access controls, encrypted communications (HTTPS), and restricted access to medical data on a need-to-know basis. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children

Our services are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us at help@altrcare.com and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If the changes are material, we will notify you via WhatsApp or email. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact us

For any questions, concerns, or requests related to this Privacy Policy or your personal data: