Privacy Policy

Last updated: August 2026

This policy is a general template for the OSPEX platform. Please have it reviewed by qualified legal counsel and adapt it to the laws that apply to your operations before publishing.

OSPEX (“we”, “us”, “the platform”) connects patients with healthcare providers such as doctors, laboratories, pharmacies, hospitals, ambulance services and blood banks. This Privacy Policy explains what information we collect and how we handle it when you use our websites, apps and provider dashboards (together, the “Services”).

1. Information we collect

Account information — name, phone number, email, password and, for providers, business and licence details.
Health information — appointments, prescriptions, lab test requests and reports, orders, admissions and related records you or your provider add.
Family members — details of dependents you add to book care on their behalf.
Payment information — transaction amounts, method and status. Card/UPI details are handled by our payment partners, not stored by us.
Location & device — approximate location (e.g. to find nearby providers or dispatch an ambulance) and device/log data for security and performance.

2. How we use information

To provide the Services — bookings, diagnostics, prescriptions, orders, emergency dispatch and payments.
To connect you with the provider you choose and share the details they need to deliver care.
To verify providers and keep the platform safe and trustworthy.
To send notifications about your appointments, reports, orders and account.
To improve the Services and comply with legal obligations.

3. How we share information

We share your information only as needed to deliver the Services: with the provider you book, with payment and delivery partners to complete a transaction, and where required by law. Provider staff can access patient information only to the extent their role permits. We do not sell your personal data.

4. Data security

We use technical and organisational measures — including encryption in transit, access controls and role-based permissions — to protect your information. No system is perfectly secure, but we work to safeguard your data and limit access to those who need it.

5. Your choices & rights

Access, update or correct your account and health records.
Request deletion of your account, subject to records we must retain by law.
Manage notification preferences.

6. Data retention

We keep information for as long as your account is active or as needed to provide the Services, resolve disputes and meet legal, accounting or reporting requirements.

7. Children

Accounts are for adults. Care for minors and dependents should be managed by a responsible adult through the family-members feature.

8. Changes to this policy

We may update this policy from time to time. Material changes will be notified through the Services. Continued use after changes take effect means you accept the updated policy.

9. Contact us

Questions about privacy? Contact us and we'll be glad to help.