Privacy Notice

This notice explains how Vitalix Diagnostics (“Vitalix”, “we”) handles personal information on this website and in the Vitalix platform. It is written to be read by workers who attend a health camp, staff who use the platform, and visitors to this site.

1. Who is responsible

• Website visitors and platform staff: Vitalix Diagnostics decides why and how your details are used.
• Patient and employee health records: the diagnostic centre or company that runs your camp decides why your health information is collected and what is done with it. Vitalix provides the software and processes those records on that centre’s instructions. Questions about a specific medical report should go to the centre that examined you.

2. What we collect

On this website

• Demo requests: name, work email, phone number, organisation, role, expected camp volume, preferred time and any note you type.
• Technical data: your IP address is used briefly to limit abusive traffic. We do not run advertising trackers.
• Optional analytics: only if you choose “Accept analytics” in the cookie banner and analytics is configured. See section 7.

In the platform (entered by the centre’s staff)

• Identity and contact details: name, employee code, date of birth or age, gender, phone number, employer, department and designation.
• Health information recorded during the examination: height, weight, blood pressure, pulse, oxygen saturation, vision, audiometry, ECG, lung-function and X-ray findings, blood and urine results, the doctor’s remarks and the fitness declaration.
• Documents: machine-generated report files (PDF or image) and the compiled medical report.
• Staff accounts: name, work email, role and sign-in activity.

Health information is sensitive. We ask staff not to type it into the demo-request form, and we never use it for advertising.

3. Why we use it

• To run the camp: record findings, let the doctor sign off, and produce the medical report and Form 7 certificate.
• To deliver the report to the worker, for example by a WhatsApp message with the report attached as a PDF.
• To respond to demo requests and support questions.
• To keep the platform secure, prevent misuse and keep an activity log of who accessed or changed records.
• To meet legal obligations, such as statutory occupational-health record keeping.

4. Who we share it with

• The examining centre and the employer’s authorised contacts, as set up by the centre.
• WhatsApp delivery: when a centre sends a report, the worker’s phone number and a private report link are passed to our messaging provider (Zapwire) and then to WhatsApp (Meta) to deliver the message. The link works without signing in, is signed so it cannot be guessed, and expires.
• Hosting and infrastructure providers that store data on our behalf, under confidentiality obligations.
• Authorities, where the law requires it.

We do not sell personal information.

5. How long we keep it

Patient records are kept for as long as the centre keeps them or the law requires, and can be deleted by authorised staff of that centre. Demo requests are kept while we are in contact with you and for a reasonable period afterwards. Activity logs are kept for security and accountability.

6. How we protect it

Sign-in is required for every patient screen. Passwords are stored only as salted hashes. Each staff role can reach only the screens and actions it needs. Sessions end after a period of inactivity. Access to records is logged. Details are on the Security page. No system is perfectly secure; if a breach affects your information, we will notify the centre and the authorities as the law requires.

7. Cookies and similar storage

• Essential: a sign-in session cookie (staff only) and your chosen colour theme stored in your browser. These are needed for the platform to work and do not need consent.
• Analytics (optional): off by default. If you accept it in the cookie banner, we may measure page visits in aggregate. You can change your mind at any time from the “Cookie settings” link in the footer.
• We do not use advertising or cross-site tracking cookies.

8. Your rights

Under India’s Digital Personal Data Protection Act, 2023 and related rules you can ask to access your information, have it corrected or erased, withdraw consent where processing relies on it, and make a complaint. For health records, contact the centre that examined you first; we will help the centre act on your request. For website and demo-request details, contact us as below.

9. Children

The platform is built for adult employee medical examinations. If a record concerns a child, it is entered by the centre with the consent of a parent or guardian.

10. Grievance officer and contact

Please use the details on the Contact page and address your message to the Grievance Officer. Postal address: Office No 525, Swaraj Capital, Borhade Wadi, Moshi, Pune 412105, Maharashtra, India.

11. Changes

If we change this notice in a way that matters, we will update the date above and, for platform users, tell them in the product.