Privacy Policy
Effective 18 September 2026
1. What this policy covers
This policy explains how Spot Healthcare Solutions Pvt Ltd collects, uses, and protects your personal and health information when you use SpotSense, in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian data protection law.
2. Information we collect
Booking details: name, date of birth, gender, phone number, and home address for the person being tested.
Health information: the tests you book and the results generated during your visit.
Technical information: device/browser session identifiers used to let you track a booking without an account.
3. How we use your information
To schedule and carry out your booking, assign a phlebotomist, generate and deliver your report, and provide customer support.
To resolve your delivery address to a serviceable location (via a geocoding service) and assign the nearest available phlebotomist.
To understand usage of the site and booking flow (via Firebase/Google Analytics) so we can improve it — see our Cookie Policy for details. This analytics data is never combined with your name or health information.
We do not sell your personal or health information, and we do not use it for advertising.
4. Who we share it with
The phlebotomist assigned to your visit (name, address, phone, and the tests booked).
Cashfree Payments India Private Limited, to process online payments — they receive only what is needed to complete your payment; we never see or store your full card/bank details.
Our cloud infrastructure provider (Google Firebase/Google Cloud), which stores and processes data on our behalf under contractual confidentiality obligations, and Firebase/Google Analytics for aggregate usage analytics (see our Cookie Policy).
We do not share your health information with any other third party without your consent, except where required by law.
5. Data retention
We retain booking and result records for as long as needed to provide the service, meet legal/medical record-keeping obligations, and resolve disputes, after which they are securely deleted or anonymised.
6. Your rights
Under the DPDP Act, you may request access to, correction of, or erasure of your personal data, or withdraw consent previously given, by writing to info@spotsense.in. We will respond within a reasonable time.
If you have a SpotSense account (signed in with your phone number), you can also self-serve this from Account → Danger zone → Delete my data. This removes your name, phone, and address from your past bookings and deletes your downloadable reports; test records are kept in de-identified form as required for lab record-keeping.
7. Security
We use industry-standard safeguards (encryption in transit, access controls, and role-based permissions) to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information appropriately to its sensitivity.
8. Children & dependants
If you book a test on behalf of a minor or dependant, you confirm you have the authority to consent to the collection and processing of their health information on their behalf.
9. Grievance officer & contact
For privacy questions, data requests, or grievances, contact us at info@spotsense.in or +91 86003 79146. Registered office: 209, Iris Apartment, Whitefield Main Road, Pattandur Agrahara, Bengaluru, Karnataka 560066, India.