Request a callbackRequest a callback
Back to home

Privacy Policy

Confidentiality is central to how we deliver care. We collect only what we need to look after your health, and we never expose your personal data.

1About this policy

This Privacy Policy explains how TAAL+ Integrated Health Centre ("TAAL+", "we", "us", "our") collects, uses, shares and protects your personal data when you use our consultation services for HIV prevention (PrEP and PEP) and HIV treatment and care (ART), whether online or in clinic, along with related counselling, Whatsapp and phone support, and our website (together, the "Services").

We follow the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000 and rules made under it, the HIV and AIDS (Prevention and Control) Act, 2017, the Telemedicine Practice Guidelines, and the confidentiality duties that apply to registered medical practitioners in India.

Confidentiality is central to how we deliver care. We collect only what we need to look after your health, and we never sell your personal data.

2Who we are

TAAL+ Complete Health Care is operated by TAAL+ INTEGRATED HEALTH CENTRE (IHC), with its registered office at 401, 3rd Floor, Ganga Prestige Arcade, 612M, Nana Peth, Opp. Ghodepeer Bus Stop, Pune – 411002. For the purposes of Indian data protection law, we are the Data Fiduciary responsible for your personal data.

3Information we collect

Information you give us

  • Identity and contact details: name, phone number, email address.
  • Payment information: consultation fee payments are processed directly by our payment partner. We do not store your full card number, CVV or UPI PIN.
  • Communications: messages, call notes and recordings (where we tell you a call is recorded), and feedback you send us.
  • Identity documents, only where the law requires them.

Information collected automatically

  • Device and usage data: IP address, browser type, device type, pages visited, time spent on pages and referring website.
  • Cookies and similar technologies, as explained in Section 8.

4How we use your information

We use your personal data only for the specific purposes below:

  • To provide PrEP, PEP and ART consultations, including assessment, counselling, prescriptions where clinically appropriate, monitoring advice and follow-up care.
  • To schedule consultations and send appointment reminders, follow-up reminders and responses to your queries.
  • To contact you on Whatsapp, phone call, SMS or email about your enquiry, consultation, appointments and follow-up care, where you have agreed to be contacted through these channels. Our messages will not mention your health condition in the notification preview, and you can opt out of Whatsapp messages at any time by replying STOP or contacting us.
  • To process consultation fee payments, refunds and invoices.
  • To keep our Services secure and prevent fraud or misuse.
  • To meet our legal, medical record-keeping and regulatory obligations.
  • To improve our website and Services using aggregated or de-identified data.
  • To send you health information or updates, only if you have separately agreed to receive them.

5Our basis for processing

We process your personal data:

  • With your consent, which you give through a clear action such as ticking an unticked box or submitting a form after reading our notice. We ask for consent separately for each purpose where needed. Consent for marketing is always separate and optional.
  • For legitimate uses permitted by law, such as responding to a medical emergency, complying with a legal obligation or court order, or where you have voluntarily shared data for a specific purpose (for example, sharing an earlier test report so our doctor can review it).

Refusing marketing consent will never affect the care you receive.

6Your health information and HIV confidentiality

We treat all health information as strictly confidential.

  • We do not disclose your HIV status, test results, diagnosis or treatment to anyone, including family members or employers, without your informed consent, except where the HIV and AIDS (Prevention and Control) Act, 2017 or another law permits or requires it (for example, sharing with healthcare professionals directly involved in your care, or under a court order).
  • Only authorised doctors, counselors and care staff who need your information to support you can access it.
  • SMS, email and Whatsapp messages are worded neutrally and do not mention your condition or treatment in previews, unless you ask us to.

7Who we share information with

We share only the minimum personal data needed, and only with:

  • Doctors and counselors within TAAL+ who are involved in your care.
  • Technology service providers who host our website, store records, or operate our teleconsultation, CRM and messaging tools (including Whatsapp Business messaging providers).
  • Government authorities, courts or regulators, only where the law requires it.
  • A successor entity, if TAAL+ is merged or acquired, subject to the same protections in this policy.

Every partner that processes data for us does so under a written agreement that limits use to our instructions and requires appropriate security. We never sell, rent or trade your personal data.

8Cookies, analytics and advertising

We use cookies and similar tools to run our website, remember your preferences, understand how visitors use our site, and measure the performance of our advertising.

  • Essential cookies are needed for the website, appointment booking and payments to work. These cannot be switched off.
  • Analytics cookies (such as [Google Analytics]) help us understand site usage in aggregate.
  • Advertising cookies (such as [Google Ads and Meta pixel]) help us measure whether our ads lead to visits or enquiries.

Analytics and advertising cookies are used only with your consent, which you can give or change at any time through the cookie settings on our website.

We do not share your health conditions, test results, prescriptions or the type of consultation you book with advertising platforms, and we do not use this information to target ads to you.

9Marketing communications

If you opt in, we may send you health awareness content or service updates by email, SMS or Whatsapp. You can opt out at any time by clicking "unsubscribe" or replying "STOP". Service messages about your appointments and follow-ups will continue, as they are part of your care.

10How we protect and store your data

We use reasonable security safeguards, including HTTPS encryption, encrypted storage of records, role-based access controls, access logs, and regular security reviews. Our staff are trained on confidentiality and bound by confidentiality obligations.

No system can be completely risk-free. If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as required by law, and explain what happened and what we are doing about it.

Your data is primarily stored on servers located in [India / specify]. Where a service provider processes data outside India, we transfer it only as permitted by Indian law and with safeguards in place.

11How long we keep your data

We keep personal data only as long as needed for the purpose it was collected, or as required by law. Medical and consultation records are retained for the periods required under medical regulations. Certain logs and records are retained for a minimum of one year as required under the DPDP Rules. When data is no longer needed, we securely delete or anonymise it.

12Your rights

You have the right to:

  • Get a summary of the personal data we hold about you and how we use it.
  • Know which partners we have shared your data with.
  • Correct, complete or update inaccurate or incomplete data.
  • Ask us to erase your data, subject to records we must legally keep.
  • Withdraw consent at any time.
  • Nominate a person to exercise your rights if you pass away or become unable to do so.
  • Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied with our response.

To exercise any of these rights, write to contact@taalhealthcare.com or use [privacy request form link]. We may need to verify your identity before acting on your request. We will respond within [30] days, and in any case within the time allowed by law.

13Withdrawing consent

You can withdraw consent as easily as you gave it, by writing to contact@taalhealthcare.com or using the settings on our website. Once withdrawn, we will stop processing your data for that purpose within a reasonable time, unless the law requires us to keep it. Withdrawing consent does not affect processing done before withdrawal, and it may mean we cannot continue certain Services, such as online consultations.

14Age requirement

Our Services are intended for people aged 18 and above. We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or lawful guardian. If you believe a minor has shared data with us, please contact us and we will delete it.

16Beware of fraud

TAAL+ will never ask for your OTP, CVV, card PIN, UPI PIN or passwords by call, SMS, Whatsapp, email or link. If anyone claiming to be from TAAL+ asks for these, do not share them and report it to contact@taalhealthcare.com.

17Changes to this policy

We may update this policy to reflect changes in our Services or the law. We will post the updated version on this page with a new "Last updated" date, and notify you by email or on the website if the changes are significant.

18Contact and grievance redressal

For any questions, requests or complaints about your personal data:

We will acknowledge your complaint within [48 hours] and aim to resolve it within [30] days.

Great, before we get started

Share a few details and we'll take you straight to WhatsApp.