Privacy notice

Last updated 27 September 2026.

This notice explains what personal data the Platform collects, why, how long it is kept and how you can use your rights under the Digital Personal Data Protection Act, 2023. The Platform is operated by Marg ERP Ltd, Mumbai, India, which is the Data Fiduciary for the data described here.

The Platform and the clinic are separate

When you book, the clinic you choose receives your details for that appointment, with your consent, and keeps your medical record under its own privacy notice. The clinic is a separate Data Fiduciary: requests about your medical record go to the clinic. The Platform never receives diagnoses, prescriptions, notes or test results; it only knows that an appointment was booked, attended, missed or cancelled.

What we collect

Your mobile number and name (your account). Optionally your email and your ABHA address.
Family members you add: name, date of birth, gender and relationship.
Bookings: the doctor and clinic, time, consultation mode, the patient's name, date of birth and gender, the fee and how it was paid (a payment reference, never card or bank details).
Your consents and withdrawals, word for word, with the time.
Grievances and data requests you raise, and our answers.
A sign-in cookie that keeps you signed in. We use no advertising or tracking cookies.

What you type in search, and your location if you choose "Use my location", are used for that search only and are not stored or linked to you. Profile views are counted per doctor per day without recording who viewed.

Why we use it

To run your account and let you search, book, reschedule and cancel (account consent).
To send your booking details to the clinic you chose (a separate consent for each clinic, given at booking).
To let the clinic send confirmations and reminders on your mobile, only if you agreed to reminders.
For teleconsultations, to record your consent and identity confirmation as the Telemedicine Practice Guidelines require.
To handle payments and refunds through the Marg payment rail, to answer grievances, and to meet legal obligations.

We do not sell your data, use it for advertising, or share it with anyone other than the clinic you book with, the payment rail and the SMS provider that delivers our messages.

How long we keep it

Your account, family profiles and saved doctors: until you delete your account.
After deletion, booking and payment records are kept without your name, mobile number or date of birth, as far as tax and consumer law require.
Consent records and the grievance register are kept as evidence for as long as the law requires, even after deletion; they cannot be edited.
Sign-in codes expire after 10 minutes; sign-in sessions after 30 days.

Where your data is kept

All personal data the Platform holds is stored and processed in India: the database and the servers that run the site are in India, and it is not transferred outside India.

Your rights

See and download everything the Platform holds about you (My bookings → Download my data).
Ask for a correction, or ask us to erase specific data, from the privacy centre. We answer within 30 days.
Withdraw any consent at any time, from the privacy centre. It takes effect immediately; details already sent to a clinic stay with that clinic.
Delete your account. This does not affect medical records held by any clinic you visited.
Nominate someone to exercise these rights if you die or cannot act, by writing to the Grievance Officer.

Bookings for children or for a person who cannot consent are made by their parent, guardian or family member through their own account, with the relationship recorded.

Questions and complaints

Neha Kulkarni, Grievance Officer, Marg ERP Ltd, Andheri (E), Mumbai 400069, India. Email grievance@platform.example.in, phone +91 22 4000 1234 (Mon–Sat, 10:00–18:00 IST). You can also use the grievance page. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.