Consent & Data Rights

Where consent is required for processing your personal data, SehatGraph will request consent through an appropriate notice and consent mechanism.

The consent process is designed to make clear:

• What personal data is being collected
• Why the data is being collected
• The purpose for which the data will be processed
• Relevant processing or sharing arrangements
• How consent can be withdrawn
• How applicable data rights can be exercised

Consent should be freely given, specific, informed and capable of being withdrawn through an accessible mechanism, subject to applicable law.

Where processing is based on consent, you may withdraw your consent at any time through the available SehatGraph settings, controls or by contacting us.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

After withdrawal, SehatGraph will stop or restrict the relevant processing where required, subject to applicable legal obligations and other lawful grounds for processing.

Withdrawal of consent may affect our ability to provide certain features or services that require the relevant personal data.

Subject to applicable law and its conditions, you may have the right to:

You may submit a request through the relevant SehatGraph account controls or by contacting:

Please include:

• Your name
• Registered email address or mobile number
• Type of request (Access, Correction, Erasure, Consent Revocation, Nomination)
• Relevant details of the request
• Supporting information where reasonably necessary

For security purposes, SehatGraph may request reasonable information to verify your identity before completing certain requests.

If you want your personal data deleted, you may submit a Data Deletion Request through the available SehatGraph mechanism or contact us at:

Support@sehatgraph.com

Some information may need to be retained where required or permitted by applicable law, including for legal, regulatory, security, fraud-prevention, accounting or dispute-resolution purposes.

Where applicable, SehatGraph may maintain records relating to consent, including information necessary to demonstrate that consent was obtained or withdrawn.

Such records may include the relevant purpose, date/time and consent status, subject to applicable law and our retention practices.

Where applicable, SehatGraph will implement the requirements of the DPDP Act and applicable rules relating to children's personal data, including requirements concerning verifiable parental or lawful guardian consent.

Some SehatGraph services may involve third-party healthcare providers, laboratories, pharmacies, technology providers, payment providers or other service partners.

Where applicable, personal data may be processed or shared as necessary to provide the requested service and in accordance with applicable law.

SehatGraph takes reasonable technical and organisational measures to protect personal data against unauthorised access, use, disclosure, alteration, loss or destruction.

SehatGraph will process requests relating to consent and applicable Data Principal rights in accordance with applicable law and within the timelines prescribed by the applicable legal framework.

Certain requests may be subject to verification or lawful limitations.

Sehat Graph Technologies Private Limited

Website: https://www.sehatgraph.com

Privacy & Data Rights: Support@sehatgraph.com

Subject: Consent / Data Rights Request

For any concern regarding consent, withdrawal of consent, access, correction, deletion or other applicable data rights, please contact us through the above channel.