Introduction

This Privacy Policy describes how BloodPanda Health Services Pvt. Ltd. and its affiliates ("BloodPanda", "we", "our", or "us") collect, use, share, protect, and otherwise process your information and personal data through:

• Our mobile applications
• Diagnostic testing services
• Home sample collection services

(collectively, the Platform).

You may browse certain sections of the Platform without registration. We do not offer products or services outside India, and your personal data is primarily stored and processed in India.

By accessing the Platform, providing information, or using our services, you agree to this Privacy Policy, our Terms of Use, and any applicable service-specific terms. If you do not agree, please discontinue use of the Platform.

1. Information We Collect

We may collect the following categories of information:

Contact Information

• Full name
• Date of birth
• Address
• PIN code
• Mobile number
• Email address

Account Information

• Username
• Account number
• Password

Identity Verification

• Government-issued identification
• Address proof (where required)

Payment Information

• Bank account details
• Credit/debit card information
• Other payment instrument details

Payment information is processed through secure third-party payment gateways.

Health Information

• Medical history
• Family medical history
• Laboratory reports
• Prescriptions

Demographic Information

• Age
• Gender
• Education
• Interests

Preference Information

• Saved items
• Order history
• Service preferences

Location Information

Location data as described in the Location Information section below.

You may choose not to provide certain information, though doing so may limit access to specific services.

Never share your OTP, card PIN, net banking password, or similar credentials with anyone claiming to represent BloodPanda.

2. How We Use Your Information

We use your information to:

• Process diagnostic test bookings and orders
• Manage user accounts
• Provide customer support
• Send booking confirmations and reports
• Deliver transactional updates through SMS, email, or WhatsApp
• Personalize user experiences
• Recommend relevant health packages and tests
• Resolve disputes and troubleshoot issues
• Inform users about offers and updates (unless opted out)
• Detect and prevent fraud
• Enforce our Terms of Use and policies
• Conduct analytics, surveys, and research
• Comply with legal obligations

Where required, users may opt out of marketing communications.

3. Handling of Health Reports

Laboratory reports, prescriptions, and other health-related records ("Health Reports") may be securely digitized and stored.

Subject to applicable law, we may use Health Reports to:

• Conduct internal research
• Improve service quality
• Support external research after anonymization
• Extract report values digitally
• Enable clinical review by qualified professionals
• Generate health trends, alerts, and predictive insights

4. Location Information

Customer Application

With your permission, our customer-facing applications may collect real-time device location information to assist with service delivery.

Field Collection Application

Our phlebotomist application may collect:

• GPS coordinates
• Latitude and longitude
• Timestamps
• Device identifiers

This information may be collected during active work shifts, including background operation, for purposes such as:

• Route optimization
• Service efficiency
• Verification of sample collection locations
• Verification of sample drop-off locations

You may withdraw location consent by disabling GPS permissions, although this may impact service availability.

5. Cookies

We use cookies and similar technologies to:

• Maintain shopping cart functionality
• Remember user preferences
• Improve platform performance
• Analyze traffic patterns

Most browsers allow users to disable cookies. Certain Platform features may not function properly if cookies are disabled.

6. Sharing Your Information

We may share personal information with:

• Group companies
• Corporate affiliates
• Business partners
• Logistics providers
• Sample collection partners
• Email service providers
• SMS providers
• Payment processors

Information may be shared to:

• Deliver requested services
• Fulfill legal obligations
• Enforce our Terms of Use
• Conduct communication and marketing activities
• Detect and prevent fraud

We may also disclose information:

• To law enforcement agencies
• To government authorities
• Pursuant to court orders or legal requests
• To protect the rights, safety, and property of users and the public

When third parties collect information directly from you, their privacy policies apply.

7. Data Security

We implement reasonable security measures to protect personal information against:

• Unauthorized access
• Disclosure
• Loss
• Misuse

Security measures include:

• Restricted access controls
• Protected network infrastructure
• Confidentiality obligations for authorized personnel

Payment transactions are processed exclusively through secure third-party payment gateways and are not stored on our servers.

While we strive to protect your information, no internet transmission can be guaranteed as completely secure.

For security-related inquiries:

Email: support@bloodpanda.com

8. Call Recording

Calls to our customer support teams may be recorded for:

• Training purposes
• Quality assurance
• Service improvement

If recording is required to provide a service and consent is not granted, we may be unable to complete the requested service.

9. Data Retention and Deletion

Users may request account deletion through:

• Platform account settings
• Email communication

Deletion requests may be delayed or declined if:

• A grievance is pending
• A legal claim exists
• An active booking or service obligation remains

We retain information only as long as necessary to:

• Provide services
• Meet legal requirements
• Prevent fraud
• Support analytics and research

Some anonymized data may be retained after account deletion.

10. Your Rights

You may:

• Access your personal information
• Correct inaccurate information
• Update account information
• Opt out of marketing communications
• Request a copy of your data
• Request deletion of eligible information

Requests may require identity verification before processing.

11. Consent and Withdrawal

By using the Platform, you consent to the collection, use, storage, disclosure, and processing of your information as described in this Privacy Policy.

If you provide information about another person, you confirm that you are authorized to do so.

You may withdraw consent by contacting our Grievance Officer with the subject line:

Withdrawal of consent for processing personal data

Withdrawal of consent may affect our ability to provide certain services.

12. Third-Party Websites

The Platform may contain links to third-party websites or services.

We are not responsible for:

• Third-party content
• Third-party privacy practices
• Third-party security measures

Please review their privacy policies before sharing information.

13. Disclaimers and Limitation of Liability

The Platform is provided on an "as is" basis.

We do not guarantee:

• Error-free operation
• Continuous availability
• Absence of viruses or malicious code

To the fullest extent permitted by law, BloodPanda and its affiliates shall not be liable for any direct, indirect, incidental, consequential, special, or punitive damages arising from use of the Platform.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes in business practices
• Service updates
• Legal requirements

Where required by law, users will be notified of material changes.

15. Governing Law

This Privacy Policy is governed by the laws of India.

Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in:

Bengaluru, Karnataka, India

16. Grievance Officer

Contact Us

For privacy-related questions, requests, or concerns:

Email: support@bloodpanda.com