Privacy Statement

Effective Date: 03-11-2025

Introduction

Welcome to Devi Prime Care (“we”, “us”, “our”, “Dev­i Prime Care”). We respect your privacy and are committed to protecting your personal data. This Privacy Statement explains how we collect, use, disclose, transfer, store and protect personal information when you use our website www.deviprimecare.com (the “Website”) and any associated services (collectively, the “Services”). By accessing or using the Website and Services, you agree to the terms of this Privacy Statement. If you do not agree, please do not use our Website.

Scope and Applicability

This Privacy Statement applies to all visitors, users, customers, patients, clients, and other individuals (collectively, “you” or “your”) who access or use the Website or engage with our Services. It applies to personal data that we collect via the Website or through our Services, whether online or offline (to the extent applicable), and regardless of how the information is obtained or processed.
It covers data collection, processing, storage, transfer and disclosure. It also outlines your rights in relation to your data and how you can exercise them.

Regulatory Compliance and Policy Context

In today’s data-privacy and digital-services environment, regulatory requirements are evolving rapidly. For example:

• Privacy laws in multiple U.S. states—including under the Delaware Personal Data Privacy Act, Iowa Consumer Data Protection Act, Maryland Online Data Protection Act, and others—are coming into effect in 2025, increasing obligations around notice, consent, profiling, data-sharing and transparency. (osano.com)
• Industry best practices emphasise clearly disclosing categories of personal data collected, purposes of processing, third-party sharing, cookie/trackers, data retention, rights of individuals, and mechanisms for exercising those rights. (cookieyes.com)
• It is considered best practice to keep privacy policies current, update whenever there is material change, and provide effective notice of updates. (Termly)

We aim to meet or exceed applicable privacy and data protection obligations, and to provide you with transparency and control over your personal information.

What Information We Collect

Categories of Personal Information

We may collect the following categories of personal information (“Personal Data”):

• Identifiers: such as your name, postal address, email address, telephone number, government-issued identity number (if applicable).
• Contact Information: email, phone, address, emergency contact (if applicable).
• Customer/Client/Patient Information: information you provide when you register, request a service, apply for treatment, or interact with us.
• Health/Medical Information (if applicable): in case our Services include medical care, diagnostics, therapy or health-related services, we may collect health and medical data (which may be “sensitive personal data” under applicable laws).
• Financial Information: payment or billing information (credit/debit card, bank account details) if you make purchases or use payment services via our Website or Services.
• Usage Data: information about how you use the Website or our Services, e.g., IP address, browser type and version, pages visited, time and date of visits, referring website, device identifiers, geolocation data (if you permit).
• Cookies and Tracking Technologies Data: cookies, web beacons, pixels, local storage, and similar technologies – see Section 7 for more.
• Communications Data: any correspondence you send us (including emails, chat logs, feedback, queries), and related metadata.
• Inferences and Profiling: we may derive from the above data certain inferences about your preferences, behaviours or characteristics to tailor our Services, marketing, or improve our offerings.

Sources of Personal Information

We collect Personal Data from:

• You directly (when you provide it via forms, registrations, bookings, purchases, inquiries, surveys).
• Indirectly via your interactions with our Website or Services (via cookies, analytics, tracking technologies).
• Third-party sources (where you have given permission or the source is publicly available) – e.g., social media platforms if you consent, referral partners, or service providers which you authorise.

Sensitive Data

Where applicable, if we collect “sensitive personal data” (for example health information, biometric data, or data revealing racial/ethnic origin, religious beliefs, sexual orientation, political opinions, trade-union membership, etc.), we will do so only with your explicit consent (or where otherwise permitted by law), and we will clearly specify the purpose, retention and rights relating to that data.

How We Use Your Information

We use your Personal Data for one or more of the following purposes:

• To provide the Website and our Services, including registration, account creation, booking appointments, managing your profile, processing transactions, delivering notifications.
• To communicate with you — respond to your inquiries, provide customer support, send administrative messages, service announcements.
• To process payments, billing and fulfilment of orders or services.
• To personalise your experience, tailor content and offerings, provide recommendations or reminders relevant to you.
• To conduct analytics and improve the Website, our Services, user-experience, and to optimise our offerings.
• To send marketing communications (only where you have opted in or where permitted by law) such as newsletters, promotional offers, updates. You may object to these marketing communications (see Section 10).
• To conduct research and development, product/service improvement, training of staff, quality assurance.
• To comply with legal obligations, protect our rights, detect, prevent and respond to fraud, security incidents or misuse of the Website or Services.
• To share with third parties or vendors who perform services on our behalf (see Section 6).
• To engage in profiling or analytics (insofar permitted by law and with notice) to better understand the users of our Services and provide more relevant services to you.

Sharing and Disclosure of Information

Service Providers, Vendors and Third-Party Partners

We may share your Personal Data with third-party service providers, vendors or contractors who perform certain business functions on our behalf including payment processing, hosting, analytics, email communications, marketing automation, customer-service platforms, and others. These service providers have access to your Personal Data only for purposes of performing their tasks on our behalf and are obligated to keep it secure and not use it for their own independent purposes.

Legal Requirements and Protection of Rights

We may disclose your Personal Data if required to do so by law, regulation, legal process (such as a court order or subpoena), or government request. We may also disclose your data to enforce our terms, protect our rights or property, investigate fraud, abuse or unauthorized use of the Website or Services.

Business Transfers

If we are involved in a merger, acquisition, reorganisation, or sale of assets, your Personal Data may be transferred as part of that transaction, but only if the acquiring entity assumes the data protection obligations described in this Privacy Statement or otherwise provides comparable protections.

Marketing and Advertising

We may share certain data (in aggregated or de-identified form) for marketing, advertising, research or analytics purposes. If we share personal identifiers or categories, we will provide clear notice and obtain required opt-ins or consents. You will always have the ability to opt-out (see Section 10).

Cross-Border Transfers

Because we operate in a global digital environment, your Personal Data may be transferred to, stored, or processed in countries outside your country of residence. These countries may have data protection laws different from those in your country. In such cases, we will implement appropriate safeguards (for example standard contractual clauses, encryption, and other transfer mechanisms) to ensure your data receives adequate protection in accordance with applicable laws (for example if transfers from the EEA to other jurisdictions). See Section 12 for more about security.

Cookies and Tracking Technologies

What Are Cookies and Tracking Technologies

We and our service-providers use cookies, web beacons, pixels, local storage, device identifiers, SDKs, and similar technologies to recognise you, manage your sessions, monitor and collect device and usage data, improve the Website’s performance and security, and provide tailored content.

Purpose and Categories

Cookies and tracking technologies may serve purposes such as: essential site functionality, session management, preferences, analytics, advertising/marketing, performance measurement, fraud prevention. We may use first-party cookies (set by us) and third-party cookies (set by other domains). Some cookies may be persistent (remain after you close your browser) and others may be session-based (deleted when you close your browser).

Your Consent and Control

Where required by applicable law (for instance for analytics and marketing cookies), we will obtain your prior consent before placing cookies on your device. You may withdraw your consent at any time via the cookie‐consent banner or preference centre. You can also usually configure your browser or device to reject or delete cookies, though disabling some cookies may affect the functioning of the Website.
We honour “Do Not Track” signals if required by law (or will provide an alternative opt-out mechanism).

Cookie Preferences & Management

On our Website you will find a cookie consent banner and/or preferences centre that allows you to accept or reject non-essential cookies. For more information about how we use cookies and tracking technologies (including specific types, duration and purposes) please refer to our Cookie Policy [link].

Data Retention and Deletion

We will retain your Personal Data only for as long as necessary to fulfil the purposes described in this Privacy Statement (including to provide you the Services, enforce our terms, comply with our legal obligations, resolve disputes and maintain records) or for the period required by law. The criteria used to determine retention periods include: the nature of the data, the purpose for which it was collected, whether the purpose can be fulfilled, legal/regulatory retention requirements, and whether deletion or anonymisation is feasible. Once retention is no longer necessary, we will securely delete, destroy or anonymise your Personal Data in accordance with our data-retention and information-governance policies.

Data Security

We implement appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental or unlawful destruction, loss or alteration, and disclosure. These may include encryption, pseudonymisation, restricted access, security monitoring, regular audits and vulnerability testing. (Termly) While we strive to protect your data, you acknowledge that no system is completely secure; we cannot guarantee absolute security, and you transmit information at your own risk.

Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your Personal Data:

• Right of Access: to request access to the data we hold about you and to receive a copy of that data.
• Right of Correction/Rectification: to request correction of inaccurate or incomplete data.
• Right of Deletion/Erasure: to request deletion of your data in certain circumstances.
• Right to Restrict or Object to Processing: to ask us to limit or cease processing your data (for instance, for direct marketing or profiling).
• Right to Data Portability: to receive your data or request it be transferred to another service provider (where technically feasible).
• Right to Withdraw Consent: where we rely on consent, you may withdraw anytime without affecting processing based on consent before withdrawal.
• Right to Opt-Out of Sale or Sharing: in jurisdictions such as California, you may have the right to opt-out of “selling” or “sharing” your personal information for cross-context behavioural advertising or other monetisation models. (https://secureprivacy.ai/)
• Right to Not Be Subject to Automated Decision-Making/Profiling: you may object to processing that is based solely on automated decision-making or profiling that has legal or similarly significant effects. (IAPP)

If you wish to exercise any of these rights, please contact us (see Section 14). We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before acting on your request. We will not discriminate against you for exercising your rights.

Children’s Privacy

Our Website and Services are not directed to individuals under the age of [enter age, e.g., 16 or 18 depending on jurisdiction]. We do not knowingly collect Personal Data from minors without parental or guardian consent. If we become aware that a minor’s data has been collected without required consent, we will take steps to delete such information.
If you are a parent or guardian and believe that your child has provided Personal Data without your consent, please contact us immediately.

International and Cross-Border Transfers

Because we provide global online services, your Personal Data may be transferred to, stored or processed in jurisdictions outside your country of residence (for example, outside India). These jurisdictions may have data-protection laws that differ from those in your home country. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your Personal Data — for instance, standard contractual clauses, binding corporate rules, or other legal mechanisms as required under applicable law.
You understand and consent to the transfers of your Personal Data as described in this Privacy Statement.

Contact Information and Data-Protection Officer (DPO)

If you have questions, concerns, complaints or you wish to exercise your rights regarding your Personal Data, you may contact us at:
Dev­i Prime Care
Address: Residency Road, Chamkkada, Kollam, Kerala, India. PIN:691001
Email: contact@deviprimecare.com
Phone: +91 474 2761999

Changes to this Privacy Statement

We may update this Privacy Statement from time to time (e.g., to reflect changes in our business practices, services, legal/regulatory requirements, or technology). When we do, we will revise the “Last Updated” date at the top of this statement and may provide additional notice (for instance via banner, email or posting on our Website). We encourage you to periodically review this Privacy Statement so you are aware of any updates. (Termly)

Links to Other Websites

Our Website may contain links to third-party websites, services or platforms (for example social-media pages, external booking platforms, partner websites). We are not responsible for the privacy practices of those external sites. We encourage you to review the privacy notices of any website you visit.
If you follow a link to a third-party service, you should understand that your Personal Data will be subject to that third party’s privacy policy, not ours.

Consent and Acknowledgement

By using our Website or Services, you acknowledge that you have read this Privacy Statement, understand it, and consent to our collection, use, disclosure and processing of your Personal Data as described herein.
Where we rely on your explicit consent (for example for sensitive personal data, health information, or marketing communications), you may withdraw such consent at any time (without affecting the lawfulness of processing based on consent obtained prior to withdrawal).

Additional Provisions Specific to India (if applicable)

If you are located in India or our services are offered into India, the following applies:

• We comply with the requirements of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “IT Rules” under the Indian IT Act) as applicable, and any successor legislation.
• If we transfer your Personal Data outside India, we will ensure appropriate contractual or other safeguards in compliance with applicable Indian law.
• Where applicable, you may have rights under Indian data-protection frameworks (including any upcoming legislation) to withdraw consent, request correction or deletion of data, and to be informed of data breaches.
• Our cross-border transfers will be managed in accordance with Indian law and international best practices, including encryption and contractual protections.

Jurisdiction and Governing Law

This Privacy Statement is governed by and construed in accordance with the laws of [enter jurisdiction, e.g., the Republic of India or state of Kerala/India], without regard to its conflict of laws rules. If you are accessing the Website from another jurisdiction, you agree that the local legal requirements will apply as required, but we will act in accordance with this Privacy Statement and applicable law.
Any dispute relating to the interpretation or application of this Privacy Statement or our processing of your Personal Data will be subject to the exclusive jurisdiction of the courts of [enter location].

Severability & No Waiver

If any provision of this Privacy Statement is found to be invalid, unlawful or unenforceable, that provision will be severed from the remainder of the statement, which will continue in full force and effect. Our failure to enforce any right or provision under this statement will not constitute a waiver of that right or provision unless acknowledged in writing.

Additional Information for Healthcare/Medical Services (if applicable)

If Devon Prime Care provides medical, diagnostic or therapeutic services, the following additional statements apply:

• We may collect and process “health information” and/or “medical information” which in many jurisdictions is defined as “sensitive personal data.” We will obtain your explicit consent prior to processing such data, except in emergencies or as permitted by law.
• We will only use your health/medical information for treatment, billing, patient communication, service improvement, research (with your consent) and compliance with legal obligations.
• If we share such information with third-party service providers (e.g., laboratories, hospitals, diagnostic centres, specialists), we will require them to maintain confidentiality and secure handling of such information.
• We maintain appropriate safeguards in line with healthcare-specific obligations, confidentiality standards, and professional codes.
• If applicable, we may obtain additional consent for research, anonymised data use, or secondary use of data.
• You have the right to request access, correction, deletion (where not required to be retained by law), and to restrict use or disclosure of your health data, subject to applicable law.

Visitor Analytics and Third-Party Tools

We may use third-party analytics tools (for example Google Analytics, Hotjar, etc) and marketing/advertising platforms to collect, process and analyse usage data (such as pages visited, time spent, device/browser information, geographical region).
These tools may collect IP-addresses, device identifiers, cookies and similar technologies depending on their configuration. We keep usage data aggregated and anonymised where possible.
If you have signed up or logged in, such analytics may be linked to your account only where you have permitted.
You may control or opt-out of tracking via cookie settings or using browser add-ons/blockers or device settings.

Policy for Non-Customers and Prospective Visitors

If you visit our Website as a prospective customer, partner, or simply browse informational pages, we may still collect usage data (see Section 4.1). We will not treat you less favourably if you choose not to register or provide optional data; the basic functionality of the Website (such as browsing public pages) will still be available.

Logging, Audit, Risk Management and Incident Response

We maintain logs of access, use of the Website, system events and may monitor for security incidents, unauthorised access, or abuse. If a data breach or incident occurs that may result in a risk to your rights, we will follow applicable local laws (for example notification obligations) and will notify affected individuals or regulators as required.

Consent for Marketing or Promotional Communications

If you provide your contact details and explicitly opt-in, we may send you marketing communications about our Services, special offers, news and updates. You may unsubscribe at any time by clicking the “unsubscribe” link in any email or by contacting us directly (see Section 14).
Even if you have opted in, you may still receive transactional or service-related communications (for example appointment reminders) which are necessary for the Services and do not require separate marketing consent.

Data Minimisation and Purpose Limitation

We collect only the Personal Data that is necessary or proportionate for the specific purpose(s) described in this Privacy Statement. We will not use your data for unrelated purposes without further notice or your consent (where required).
We may anonymise or aggregate data so that you are no longer identifiable; those anonymised or aggregated data may be used for analytics or research without further notice and are no longer subject to this Privacy Statement’s restrictions.

Third-Party Links and Embedded Features

Our Website may embed features or content from third parties (for example social-media widgets, videos, maps, payment gateways). These third-party features may collect or process your Personal Data under their own privacy policies. We are not responsible for their practices. Please review the privacy policy of each third-party service.
If you link to another website, this Privacy Statement does not cover the other website’s practices.

International Users and Applicable Law

If you are accessing the Website from outside India or from any other jurisdiction, your use of the Website is governed by this Privacy Statement and by applicable local law. You consent to the transfer, storage and processing of your Personal Data in India or other jurisdictions in accordance with this Privacy Statement.
In some jurisdictions you may have additional rights in relation to your personal information — for instance under the European General Data Protection Regulation (GDPR), or other regional/privacy-law regimes. If so, then this policy shall be read in a manner consistent with those rights.

Feedback, Questions, Complaints

We welcome your feedback on our privacy practices. If you have any questions, concerns or complaints about this Privacy Statement or how we handle your Personal Data, please contact us at the contact details in Section 14.
If you are located in a jurisdiction with a supervisory authority (for example in the EU/EEA, UK or other region), you may also have the right to lodge a complaint with your local data-protection regulator.

Summary Table (Quick Reference)

Closing Statement

Your trust is important to us. We strive to protect your Personal Data and to process it in a transparent, responsible and lawful manner. We invite you to review this Privacy Statement and contact us if you have any questions or concerns.
Thank you for choosing Dev­i Prime Care for your [insert type of service – e.g., healthcare, wellness, service-provider] needs.

End of Privacy Statement