Privacy Policy

Introduction

This Privacy Policy shall be applicable to all customers of SVAAS Wellness Pvt Ltd and users of www.svaaswellness.com By accessing the Website or using any of our services, you have read and understood the terms and conditions of usage, which includes this Privacy Policy and agree to the terms.

Definitions

SVVAS Wellness” or “Us” or “We”– refers to SVAAS Wellness Private Limited.
“Privacy Policy”– refers to this Policy (Notice)
“You” or “Your” or “User(s)”– refers to the person accessing the Website in any capacity.

“Website”– refers to www.svaaswellness.com and any subsequent pages under its sitemap
“Services” – all services made available by SVAAS Wellness.

Personal Data

Data about or relating to a natural person who is directly or indirectly identifiable, having regard to any characteristic, trait, attribute or any other feature of the identity of such natural person, whether online or offline, or any combination of such features with any other information, and shall include any inference drawn from such data for the purpose of profiling.

Limited Usage Policy

Our app uses Google Fit to provide read-only access to your fitness activity data, such as step counts. This data will be used solely for the purpose of providing and improving our app’s features and will not be shared with any third-party services. By connecting our app with Google Fit, you agree to the Google Fit Limited Use Policy, which outlines the ways in which your data may be collected, used, and shared within the platform. You have control over which apps and devices you connect with Google Fit, and can delete your data from the platform at any time. We take user privacy seriously and strive to be transparent in our data practices. If you have any questions or concerns about the use of your data, please contact us. By using our app to connect it with Google Fit, you agree to this Limited Use Policy, use and transfer of information received from Google APIs to any other app adhering to Google API Services User Data Policy.

Sensitive Personal Data

Means such personal data, which may, reveal, be related to, or constitute financial data, health data, official identifier, sex life, sexual orientation, biometric data, genetic data, transgender status, intersex status, caste or tribe, religious or political belief or affiliation. This also includes “Sensitive Personal Data” as defined under the General Data Protection legal framework for Colombia, enclosed in Law 1581 of 2012 and Decree 1074 of 2015 for users located in Colombia, and the Indian Information Technology Act, 2008, and Sensitive Personal Data Information Technology Rules 2011 for users located in India.

Critical Personal Data

Means such personal data, which may, reveal, be related to, or constitute financial data, health data, official identifier, sex Personal data which may be notified by the Central Government as critical personal data.

Information Collection

We are committed to protecting your privacy and have taken reasonable steps to protect the confidentiality of the information you have provided us and its transmission through the World Wide Web. In the process of you using this website or availing of the existing or future services or facility provided by the website, you may be required to furnish information, including but not limited to Personal Information and/or Sensitive Personal Information. You are urged to keep the information updated to ensure that the services and facilities remain relevant and reach you. We may collect Personal Information such as Name, Phone Number, Address, Email ID, Age, etc. for provision of services. We may also collect Sensitive Personal Information or Health Information for provision of appropriate services.

The information collected by us in one or more ways are mentioned below:

Information you provide us – while using the Website and/or while availing the products and some of the services made available on the website.
Information we get from your usage of website
Information we get through cookies – We deploy cookies when you visit our website. Cookies are small electronic text files that contain information that a website uses to store User preferences and settings. You have the option to reset your browser to control cookies; however, some of the Services offered by the website may not function properly if cookies are refused/reset/deleted.
Information we may get from our affiliates or third parties – These could be from your employers, hospitals, medical practitioners, diagnostic service providers, Insurance Service Provider and/or commercially available sources such as public databases, data aggregators, social media, etc.

Usage of information

By using this website or our services, you acknowledge that you have authorized us to use your information for a variety of purposes including but not limited to the following:

To provide You with insurance related services
To provide services to all Users of the Website
To personalize Your experience,
To improve our Website,
To improve our products and customer service,
To process transactions, where requested, under Your User Id and Password,
Send you information about us and / or our products and services, that is to contact you when required and/or
To send periodic emails or otherwise for information related to our products and services,
To administer a contest, promotion, survey or other site or business feature,
To conduct statistical analysis
For sales and marketing activities

Sharing of information

We undertake not to disclose, except as otherwise provided, the Personal Information and/or Sensitive Personal Information provided by you to any person, unless such action is necessary in the following cases:

To meet requirements of any applicable law, regulation, legal process, governmental request, or customary practice directly or through our affiliates / banks / financial institutions / credit bureaus / agencies. Protect and defend SVAAS Wellness or its Affiliates’ rights, interests or property. The Company has defined responsibilities and processes to evaluate and respond to law enforcement or Government data requests. The submission is done in accordance with applicable rules and regulations
Enforce the terms and conditions of the products or services or Terms and Conditions
Act to protect the interests of SVAAS Wellness, its Affiliates, or its members, constituents or of other persons
For statistical analysis and verification or risk management
To enforce applicable terms and conditions, including investigation of potential violations
To detect, prevent, or otherwise address fraud, security or technical issues, analyse and manage other commercial risks
To protect against harm to the rights, property or safety of SVAAS Wellness, its customer or the public as required or permitted by law
To partners for the purpose of any financial product transaction/related transaction
To Third party service providers such as data cloud storage providers, call centres, payment gateways, banks to perform functions on our behalf. Examples include hosting data, delivering e-mail, and analysing data, providing marketing assistance, providing search results and providing customer service. The third party service providers are required to use appropriate security measures to protect the confidentiality and security of the Personal Information.

Communication

SVAAS Wellness retains the right to communicate with you (via e-mail, postal service, courier, mobile messaging services, and telephone or social media extensions) when you have agreed to receive such communication or where operational or regulatory requirements require us to do so.
SVAAS Wellness further retains its right to communicate through third party vendors. You shall have the option to unsubscribe to receive such email communication.

Third Party Offers

SVAAS Wellness may allow third parties to offer subscription and/or registration-based Services through the Website, App or other platforms (viz. WhatsApp, Twitter etc.). SVAAS Wellness shall not be responsible for any actions or policies of such third parties and Users are requested to check the applicable privacy policy and acquaint themselves with the terms and conditions of usage of such service providers, when providing personally identifiable information.
SVAAS Wellness shall be not liable for any variance in the features/benefits offered by such third parties and shall not in any case assume warranty on the efficiency or efficacy of such offers.

SVAAS Wellness shares certain personal data with third parties for activities including, but not limited to:

Marketing purposes
Document management/retention
Cloud storage
Cross-selling and up-selling of products of the SVASS Wellness or its subsidiaries.
Fraud and cyber security related investigation purposes.

Storage and Retention of Information

The Company uses third party data centres and cloud services to securely store your data and to minimise data loss. The relevant security safeguards and contractual clauses as required by relevant Laws are adhered to while storing your data.

We may retain your Personal Information and/or Sensitive Personal Information for long as it is necessary to fulfil the purpose for which such information was collected or for such a time as required to comply with regulations and applicable law.

Communication and Changes to the Privacy Policy

SVAAS Wellness may amend or modify, this Privacy Policy including replacing this Privacy Policy with a new policy, at any time at the sole discretion of the Company. Revised Privacy Policy/amendments thereto shall be effective from the date indicated therein. Users are requested to periodically check the terms and conditions under this Privacy Policy from time to time. SVAAS Wellness shall not in any circumstance be held liable for such lapses on the part of the User.

Information Security

We take reasonable precautions to protect the website, information on the Website and our customers’ information from unauthorized access to or unauthorized alteration, disclosure or destruction of information we hold. In particular

We encrypt many of our Services using SSL certificates
We provide role-based access to Users who need to login to our systems/ applications
We provide password based authentication to users who login to our website
We review our information collection, storage and processing practices, to guard against unauthorized access to systems.
We permit access to personally identifiable information to our employees, contractors and agents who are subject to strict contractual confidentiality obligations for data processing purposes.
Conduct vulnerability assessments of our website and data processing systems periodically

Warranty Disclaimer

Information, content and materials provided on this Website are on an “As Is” basis and SVAAS Wellness does not make any express or implied representation or warranty regarding the accuracy, adequacy or completeness of the same.

Contact Information

In case you require any further clarifications on the content of this policy or terms of use,
please contact dataprivacy@svaaswellness.com

Data Subjects’ Rights

Data subjects have the right to access, update and rectify their data, the right to revoke their consent or request the deletion of their data (when the purposes for processing their data have been exhausted and there is no legal or contractual obligation to remain in the database), request evidence of consent given, and the right to bring claims before the data protection authority.

Procedure to Access your Personal Data

You may file requests regarding what personal data is stored in our databases, the processing to which it is subject to, and the purposes sought in addition to that. The following rules will guide this procedure:

Requests must be submitted in writing and via email.
The request will be reviewed to verify your identity. If the request is submitted by somebody other than you (the data subject), and the person cannot provide evidence that is legitimately acting on your behalf, the request will be rejected.
We will provide answers to you within ten (10) business days following the date on which we received your complete request.
In the event that a response to the request cannot be provided within ten (10) business days, we will inform you of the reasons why the request is still in process and provide the date on which the request will be addressed, which in any case will not exceed five (5) business days following the expiration of the first term.
A final response to all requests will not take longer than fifteen (15) business days following the date on which we received the initial complete request.

Procedure for Submitting Claims

You may submit a claim when you consider that the information included on our databases must be rectified, updated or eliminated, or when you forewarn the alleged breach of your rights.

This procedure will be guided by the following rules:

The claim must be submitted in writing and via email.
The claim will be reviewed to verify your identification. If the request is submitted by somebody other than you (the data subject), and the person is not able to provide evidence that it is legitimately acting on your behalf, the request will be rejected.
The claim must include the following information: (i) your name an identification; (ii) your contact information (physical address and/or electronic address and phone number); (iii) the documents that prove your identity or the corresponding representation documents in case you are successor, representative and/or proxy; (iv) a clear and accurate description of personal data of which you seek to update, modify, eliminate, or withdraw consent; (v) a description of the events giving rise to the claim; (vi) all the documentation that you want to make use of; and (vii) your signature and identification.
If the claim or the documentation is incomplete, we will require you, within the five (5) business days following the receipt of the claim, to remedy the faults. If you do not submit the documentation and information required within two (2) months following the date of the initial claim, we will understand that you have waived the claim.

We will provide an answer for the claim in no more than fifteen (15) business days from the day following the date of its receipt. When the claim cannot be addressed within said term, you will be informed on the reasons for the delay and the date on which your claim will be addressed, which in any case shall not exceed eight (8) business days following the data in which the initial claim was received.