Privacy Policy

We are committed to protecting your privacy and ensuring the security of your personal information. This privacy policy outlines how Crossroads Health Services Private Limited, called as AuraeHealth here and referred to as “we”, “us”, “company”, and “Auraehealth”, collect, use, disclose and protect your information when you use our services. Our services include services delivered whether through our website (www.auraehealth.com) or through the company's web or mobile applications, or through any of our services linked to cancer screening.

Terms of Reference for this document:

“Personal Data” : any information that can be used to contact or identify the user (such as name, contact details, health records, specific health-related information or any other such information). “User” : any individual using Auraehealth services.

What information do we collect?

1. We collect “Personal Data” i.e. personal information about you like your name, email address, date of birth and other relevant information when you register for our services.

2. We will also collect information about your health, lifestyle, medical and cancer history, clinical data, including diagnostic reports and any other data you share with us and treat it as “Personal data”.

By accepting the terms and conditions on our website, including but not limited to this Privacy Policy and by providing us with your Personal Data, it is agreed that you have voluntarily consented to the collection, storage, processing, disclosure and transfer of your personal data in accordance with applicable laws prevalent in India and internationally. You acknowledge that you have provided your Personal Data of your free will after understanding the purpose of how it will be used.

How do we use your information?

We use the information collected through our services for the following purposes:

• To provide our services which include cancer risk assessment, cancer screening, video consultations
• To communicate with you and send important updates, newsletters and any other communications related to our services. You can opt-out of these communications at any time
• We may use aggregated and anonymised data for research and analytics purposes to improve our services and contribute to health-related knowledge and demographic profiling
• To detect, investigate and prevent activities that may violate our policy

What information do we share with third party?

• We may share your Personal Data with service providers who have a contractual relationship with Auraehealth in capacity with the operation of our services
• When you give us your consent to do so, we may disclose information to service providers that assist us in delivering our services, which would be having their means of protecting data privacy
• We may disclose your information if required by law or if we believe such action is necessary to comply with legal obligations, protect our rights or ensure the safety of our users

Data Security

• We adhere to best practice guidelines and regulations for our network servers and web applications for data security.
• We implement reasonable security measures to protect your personal data from unauthorised access, disclosure and destruction.
• The person who wants to withdraw consent needs to email us to opt out at hello@auraehealth.com . All requests will be completed within the 24 hours of being received.
• Users provide explicit consent for the collection and processing of their personal data through affirmative actions such as form submission or account creation.

Data Subject Rights

• Right to Access: You can request confirmation of whether we process your personal data and obtain a copy of the data we hold about you.
• Right to Rectification: You can request correction of inaccurate, incomplete, or outdated personal data.
• Right to Deletion (Erasure): You can request deletion of your personal data where we no longer need it, where you withdraw consent (when consent is the basis), or where processing is unlawful, subject to legal and contractual retention requirements.
• Right to Restrict Processing: You can request that we temporarily or permanently limit how we process your personal data in certain situations (e.g., while a correction request is being reviewed).
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you can request a copy of your personal data in a structured, commonly used, machine-readable format, or ask us to transmit it to another provider where technically feasible.
• Right to Object: You can object to processing based on legitimate interests and you can object at any time to processing for direct marketing.
• Right to Withdraw Consent: Where we rely on consent (including explicit consent for sensitive/health data where applicable), you can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
• Rights Related to Automated Decision-Making: If we use automated processing (including profiling) that produces legal or similarly significant effects, you may request human review, express your point of view, and contest the decision (where applicable).
• Right to Lodge a Complaint: You can lodge a complaint with your local data protection authority/supervisory authority if you believe our processing violates applicable law.

• Link to Data Processing Agreement (DPA)

To submit a request, contact us at hello@auraehealth.com. We may need to verify your identity before processing your request. We respond within a reasonable timeframe and, where required by law, within one month, with extensions permitted in certain cases.

Your options

You have the right to access, modify, or delete your personal information at anytime. You can manage your preferences by emailing us at hello@auraehealth.com.

Contact us

• If you have any concerns, questions, requests, or grievances regarding this policy or your personal data, please write to hello@auraehealth.com. Once we receive your request, we will aim to reply within five working days.
• Aurae Health has appointed a Data Protection Officer (Rishabh Verma) to oversee data protection matters. Contact: rishabh@auraehealth.com
• In accordance with GDPR Article 27, Aurae Health has appointed an EU Representative to act as a point of contact for data protection matters within the European Union. Contact: muskan@auraehealth.com