PRIVACY POLICY

Last Updated: 1st April 2022

Asian Institute of Gastroenterology (AIG), Hyderabad* (“us”, “we”, or “AIG”) is the publisher of “AIG MD App” and “AIG Web App” provided by IQVIA, referred to as the “Services” or the "Site".

This privacy policy ("Privacy Policy") explains how we collect, use, share, disclose, and protect Personal information about the Users of the Services, including the End-Users (as defined in the Terms of Use) and the Practitioners (as defined in the Terms of Use). We created this Privacy Policy to demonstrate our commitment to the protection of your privacy and your personal information. Your use of and access to the services is subject to this Privacy Policy and our Terms of Use. Any capitalized term used but not defined in this Privacy Policy shall have the meaning attributed to it in our Terms of Use.

By using the services or by otherwise giving us your information, you will be deemed to have read, understood, and agreed to the practices and policies outlined in this privacy policy and agree to be bound by the privacy policy. You hereby consent to our collection, use and sharing, and disclosure of your information as described in this privacy policy. We reserve the right to change, modify, add, or delete portions of the terms of this privacy policy, at our sole discretion, at any time. If you do not agree with this privacy policy at any time, do not use any of the services or give us any of your information.

If you use the services on behalf of someone else (such as your child) or an entity (such as your employer), you represent that you are authorised by such individual or entity to:

• accept this privacy policy on such individual’s or entity’s behalf, and
• consent on behalf of such individual or entity to our collection, use, and disclosure of such individual’s or entity’s information as described in this privacy policy.

WHY THIS PRIVACY POLICY?

This Privacy Policy is published in compliance with, inter alia:

• Section 43A of the Information Technology Act, 2000
• Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (the “SPI Rules”)
• Regulation 3(1) of the Information Technology (Intermediaries Guidelines) Rules, 2011

This Privacy Policy states the following:

• The type of information collected from the Users, including Personal Information (as defined in paragraph 2 below) and Sensitive Personal Data or Information relating to an individual.
• The purpose, means, and modes of collection, usage, processing, retention, and destruction of such information.
• How and to whom AIG will disclose such information.

COLLECTION OF PERSONAL INFORMATION

When you access the Services, or through any direct or indirect interaction with us via emails, telephone calls or other correspondence, we may ask you to voluntarily provide us with certain information that personally identifies you or could be used to personally identify you. You hereby consent to the collection of such information by AIG that has made the services available to you. Without prejudice to the generality of the above, information collected by us from you may include (but is not limited to) the following:

• contact data (such as your email address and phone number)
• demographic data (such as your gender, your date of birth and your pin code)
• data regarding your usage of the services and history of the appointments made by or with you by using the Services
• insurance data (such as your insurance carrier and insurance plan)
• other information that you voluntarily choose to provide to us (such as information shared by you with us through emails or letters

The information collected from you by AIG may constitute ‘personal information’ or ‘sensitive personal data or information’ under the SPI Rules.

“Personal Information” is defined under the SPI Rules to mean any information that relates to a natural person, which, either directly or indirectly, in combination with other information available or likely to be available to a body corporate, is capable of identifying such person.

The SPI Rules further define “Sensitive Personal Data or Information” of a person to mean personal information about that person relating to:

• passwords
• financial information such as bank accounts, credit and debit card details, or other payment instrument details
• physical, physiological, and mental health condition
• sexual orientation
• medical records and history
• information received by body corporate under lawful contract or otherwise

AIG will be free to use, collect, link, and disclose information that is freely available in the public domain (such as images or tweets or public profiles on social media sites) without your consent.

PRIVACY STATEMENTS

ALL USERS NOTE:
This section applies to all users and covers information collected in conjunction with the use of AIG MD App or Web App and all services rendered through its subdomains provided directly or on behalf of our licensing customers or channel partners.

IP Addresses, Device, Location and Other Information
When you use our portal or our mobile application, the site automatically collects and stores: the name of the domain and host from which you access the Internet; the unique Internet protocol (IP) address of the computer or device you are using; the identity of the device that you are using and your operating system; the date and time you access our sites; and other network information such as the Wi-Fi networks that you are connected to and your geo-location.

The site may collect this information to enforce organizational security policies, provide context specific services to enhance your user experience, or to conduct system administration and site analysis. Also, we may use IP addresses to identify any visitors who refuse to comply with the site’s rules or terms of use.

Access to your device

When you use our mobile application on smart devices, we may request access to the following to provide an enhanced user experience:

• Device identity: To enforce organization security policies to ensure authorized use through device user binding.
• Background modes: To enforce organizational security policies to auto-protect access on idle or on change of physical location.
• Geo-location: To enable location specific services such as check in at the hospital.
• Camera and image galleries: To enable you to upload your display images and/or to enable you to capture and convert paper media into electronic documentation.
• Voice calls: To enable you to communicate with another individual from your organizational contact directories.
• SMS/Text messages: To auto read One Time Passwords (OTPs) sent to the device for multi-factor authentication.

Security

Our sites have stringent security measures in place to protect the loss, misuse, and alteration of the information on the site. The site and its networked web servers are secured with 256-bit Secure Socket Layer ("SSL") encryption technology. SSL encryption is an industry standard technology and is used to protect your data. Any employee or contractor requiring access to technology relating to your information may be given password access by the hospital or by the service provider to carry out service and maintenance related functions. This access is reviewed on a regular basis, and parties granted such access are instructed on the privacy and security policies. To prevent loss of information, all data is backed up regularly.

While stringent security measures are in place to protect your data, we cannot guarantee that it is completely secure from people who might attempt to evade our security measures or intercept and illegally attempt to decode encrypted transmissions over the Internet.

Registration Information, phone number, and e-mail

The site's registration form requires users to provide us contact information, such as name, mobile number, and e-mail address. By subscribing to our services, you have agreed to receive e-mail notifications, text messages, and mobile push notifications that are necessary to communicate important information to you. However, you will be provided with necessary controls to setup your preferences should you not wish to receive these messages. These messages will not include the substance of those communications to protect the privacy of third parties involved in those communications and these messages will be for notification purposes only. You will have to login to your account through the portal or the mobile app to review the substance of these messages.

Contact information may also be used to contact you, when necessary. We will not sell or rent your personally identifiable information at any time.

Passwords and Account Information

You are solely responsible to maintain the secrecy of your passwords and/or account information. Please be aware that the site is providing you the ability to store any relevant information, including sensitive information, on the portal or the mobile app, and has adopted many levels of security to protect this information. However, any individual with your account information and password can access this information. Please be careful and responsible whenever you are online and change your password frequently.

Personal Information

Personal information entered on the site or retrieved from the site, such as information about patient medical history, doctors, and prescriptions is used to provide you with tailored services in conjunction with your engagement with us and may be accessible to authorized individuals (practitioners) who are involved in the delivery of services to you and with you during the course of your engagement. Your information will not be disclosed to any external party without your permission or as otherwise specified in the "Disclosure" section below.

Other Information

The site may collect non-personally identifiable information from site visitors to track the total of number of visitors to the site in aggregate form and identify the type of mobile device and browser (e.g., Android® or Google Chrome®) used by the visitor. This information allows the hospital and the service provider to continuously improve services that are offered through our site.

Removal/Change of Personal Information

You can remove or change any information you store or provide to us by deleting the file or files you stored or changing the personal information you have provided. When you remove or change information, the site may retain that information in the form of back-up or archival data, but it will not be available readily on the site.

Disclosure

Except as specified below, we will not disclose your personally identifiable information without your permission.

First, in the course of providing services via the site, the technical and maintenance contractors associated with us may have limited access to the information you provide. These contractors include technicians, vendors, and suppliers that provide the client with technology, services, and/or content related to enhancing operation and maintenance of the site. Access to your personal Information by these contractors is limited to the information reasonably necessary for the contractor to perform its limited functions for the site. We also contractually require these contractors to protect the privacy of your information consistent with this Privacy Policy.

Second, we may disclose your personal information in connection with legal action against someone who may be violating policy or applicable law.

Third, we will release your personal information if required to do so by law or court order. In such cases, we will notify you of this disclosure.

Use By Minors

The site is NOT intended for use by individuals under the age of 18 years. It is your responsibility to protect your passwords and account information to prevent such use. Protecting passwords and other account information is particularly important to prevent minors from unintentionally entering incorrect information.

Transfer of control

Circumstances may arise where we may decide to reorganize or divest part or all of our business or of a line of our business, including our information databases and Websites, through a sale, divestiture, merger, acquisition, or other means of transfer. In any such circumstance, personally identifiable information may be shared with, sold, transferred, rented, licensed or otherwise provided or made available by us or on our behalf to actual or potential parties to, and in connection with, the contemplated transaction (without your consent or any further notice to you). In such circumstances, we will seek written assurances that personally identifiable information submitted through this site will be protected appropriately.

Notification of Changes

If we decide to change this privacy policy, we will post these changes on this page so that you are always aware of what information we collect, how we use it, and under what circumstances we disclose it. Regardless of later updates, we will never use the information you submit under this current policy in a new way without first providing you an opportunity to opt-out or otherwise prevent that use.

If you have any questions about the App’s Privacy Statement or other aspects of privacy on our Sites or Services, you can send an E-mail to info@aig.com