Privacy Policy

1. Who we are (Data Fiduciary)

Mission Mad is operated by [LEGAL ENTITY NAME], a company incorporated in India with its registered office at [REGISTERED OFFICE ADDRESS] ("Mission Mad", "we", "us"). We determine the purpose and means of processing your personal data and are the Data Fiduciary responsible for it.

2. Personal data we collect

• Identity & contact data: name, email address, phone number, date of birth, gender.
• Health data (sensitive): medical history, fertility/IVF records, prescriptions, lab results, clinical notes, and treatment details.
• Account & usage data: login credentials, device and IP information, and activity logs used to secure the service.

3. Lawful basis & purpose

We process your personal data on the basis of the consent you provide at registration (or as otherwise permitted as a "legitimate use" under the DPDP Act), for these purposes only:

• Creating and securing your account and verifying your identity.
• Delivering fertility and clinical services and connecting you with the verified hospital you choose.
• Sending appointment, billing, and care communications you have asked for.
• Meeting our legal, regulatory, and record-keeping obligations.

4. Sharing your data

We share your data with the verified hospital you engage (to provide your care), and with Data Processors who operate our platform under written contracts (hosting, communications, and payments). We do not sell your personal data. We disclose data to authorities only where required by law.

5. Retention

We keep your personal data only for as long as needed for the purposes above or as required by applicable medical-records and tax laws, after which it is deleted or irreversibly anonymised. If you withdraw consent and no legal obligation requires retention, we will erase your personal data.

6. Your rights as a Data Principal

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we process it.
• Correct, complete, update, or erase your personal data.
• Withdraw your consent at any time (as easily as you gave it).
• Nominate another individual to exercise your rights in the event of death or incapacity.
• Grievance redressal, and to escalate to the Data Protection Board of India.

7. Children's data

Our services are intended for individuals aged 18 and above. We do not knowingly process the personal data of children without verifiable parental/guardian consent as required by the DPDP Act.

8. Security

We apply reasonable security safeguards including encryption in transit, access controls, tenant isolation, and audit logging to protect your data, and will notify you and the Data Protection Board of a personal data breach as required by law.

9. Grievance Officer

To exercise your rights or raise a concern, contact our Grievance Officer:

• Name: [GRIEVANCE OFFICER NAME]
• Email: [GRIEVANCE OFFICER EMAIL]
• Phone: [GRIEVANCE OFFICER PHONE]
• Post: [REGISTERED OFFICE ADDRESS]

We will acknowledge and respond to your request within the timelines prescribed under the DPDP Act.