Privacy Policy

Asthra Healthcare Services Private Limited ("Asthra", "we", "us") respects your privacy. This Privacy Policy explains how we collect, use, share, store and protect your personal data when you use asthracare.com or the services of Asthra Pharmacy, Asthra Lab and Asthra Clinic. It is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023 ("DPDP Act"). For the purposes of the DPDP Act, Asthra is the Data Fiduciary for the personal data described here.

1. Personal data we collect

Contact details: name, mobile number, email address and delivery or sample-collection address.
Health information: prescriptions, the medicines, tests or packages you ask for, clinical history you share with our doctors or pharmacists, test samples and reports.
Order and service details: order references, branch, delivery preferences, appointment details and payment status. We do not collect or store card numbers or UPI PINs on the Website.
Messages you send us through the order form, WhatsApp, phone or email.
Technical data: basic information your browser sends when you visit the Website (such as IP address, browser type and pages visited), used to run and secure the Website. The Website does not use advertising or tracking cookies.

Health information is sensitive. We collect only what is needed to provide the service you request.

2. How we use your personal data

To process and deliver your pharmacy orders, including verifying prescriptions as required by the Drugs and Cosmetics Act, 1940 and its Rules.
To book and carry out lab tests and home sample collection, and to share reports with you (and, where you ask, with your doctor).
To book clinic appointments and provide consultations.
To contact you about your orders, bookings, reports and payments.
To keep records required by law and to respond to lawful requests from authorities.
To keep the Website secure, prevent fraud and misuse, and improve our services.

We do not sell your personal data, and we do not use your health information for advertising.

We process your personal data on the basis of the consent you give when you place an order, book a test or appointment, or contact us, and for legitimate uses permitted under the DPDP Act, such as complying with law, responding to medical emergencies and fulfilling a service you have requested. You may withdraw consent at any time by contacting us; this will not affect processing already carried out, and we may then be unable to provide the service that depends on it.

We share personal data only as needed to provide our services, with parties bound to keep it confidential:

Our partner laboratory, QXL Diagnostics, for tests processed there.
Our doctors, pharmacists and staff at the Asthra branch handling your order, and our delivery staff (name, phone and address only).
Service providers that run our Website and communications: website hosting and security (Cloudflare), email delivery of order notifications (Resend), and messaging when you choose to contact us on WhatsApp (Meta).
Government, regulatory or law-enforcement authorities where required by law, court order or for public health purposes.

Some service providers may store or process data on servers outside India. Where this happens, we take reasonable steps to ensure your data is protected as required by Indian law.

5. How long we keep your data

We keep personal data only for as long as needed for the purposes above or as required by law. Prescription and sale records are kept for the periods required under the Drugs and Cosmetics Rules, 1945, and lab and medical records as required by applicable regulations. After that, data is securely deleted or anonymised.

6. How we protect your data

We use reasonable security practices, including encrypted connections (HTTPS) for the Website, restricted staff access to health information, and secure handling of prescriptions and reports. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a personal data breach as required by law.

7. Your rights

Under the DPDP Act you have the right to:

Access a summary of the personal data we hold about you and how it is processed.
Correct, complete or update inaccurate or incomplete personal data.
Ask us to erase personal data that is no longer needed, unless we must keep it by law.
Withdraw your consent.
Nominate another person to exercise your rights in the event of your death or incapacity.
Raise a grievance with us, and if unresolved, with the Data Protection Board of India.

To exercise these rights, email asthracare@gmail.com or contact our Grievance Officer. We may need to verify your identity before acting on a request.

8. Children

We process personal data of a child (under 18) only with verifiable consent of a parent or lawful guardian, for example when a parent orders medicines or books a test for their child.

9. Links to other websites

The Website links to third-party websites and apps (such as WhatsApp, Google Maps and social media). Their privacy practices are governed by their own policies.

10. Changes to this policy

We may update this Privacy Policy from time to time. The updated policy will be posted on this page with a new "Last updated" date.

Grievance Officer

In accordance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 and the Consumer Protection (E-Commerce) Rules, 2020, you may contact our Grievance Officer with any complaint or concern:

Grievance Officer, Asthra Healthcare Services Private Limited
Address: #15 Surabhi Complex, BB Road, Near Karnataka Bank, Prashanth Nagar, Devanahalli, Bengaluru, Karnataka - 562110
Email: asthracare@gmail.com
Phone: +91 91080 73247 (Monday to Saturday, 10:00 am – 6:00 pm)

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days of receipt.

Contact us

Company: Asthra Healthcare Services Private Limited
Registered address: #15 Surabhi Complex, BB Road, Near Karnataka Bank, Prashanth Nagar, Devanahalli, Bengaluru, Karnataka - 562110
Email: asthracare@gmail.com
Asthra Pharmacy: +91 80882 18917 · Asthra Lab / Asthra Clinic: +91 91080 73247