Version 3.0 | Last Updated: August 2026 | Effective upon use of the Platform
Data fiduciary
Corelatin Private Limited ("Corelatin", "we", "our", "us") is committed to protecting personal information, including health-related data voluntarily provided during booking. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, applications, and services (the "Platform").
This Policy is governed by the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules). It should be read together with our Terms of Service and Cancellation & Refund Policy.
Hospital Independence Notice
Corelatin is a fully independent service and has no affiliation, partnership, or contractual arrangement with any hospital, clinic, or diagnostic centre โ including those named on our platform. Hospital names (AIIMS, Apollo, Fortis, Max, Medanta, Safdarjung, etc.) are referenced only as locations where our companions operate. Any patient or hospital-related data you provide is collected solely to deliver your requested companion service and is never shared with the hospital or its staff.
We collect the following categories of personal information:
2.1 Personal Information
2.2 Patient & health-related information
Information about physical or mental health condition voluntarily provided during booking may constitute sensitive personal data under IT (SPDI) Rules, 2011 and personal data under DPDPA 2023.
2.3 Payment Information
2.4 Technical and Usage Data
2.5 Communication Data
2.6 Document Logistics & Hospital Authorization Data
When you book our Document Collection & Hospital Submission service, we collect specific details required strictly for counter identification, retrieval, and delivery:
We use your information for the following purposes:
3.1 Service Delivery
3.2 Verification and Compliance
3.3 Payment Processing
3.4 Service Improvement
3.5 Communications
We implement safeguards aligned with DPDPA Section 8 and SPDI Rules Rule 8:
We may share limited information with the following parties:
5.1 Service providers & processors
5.2 Legal Requirements
5.3 Business Transfers
5.4 What We Never Share
5b.1 Collection. We may collect testimonials, feedback, reviews, photographs, or video recordings from users who have received Services. Submission is entirely voluntary (Terms of Service Section 18).
5b.2 Information collected. Name (or pseudonym), testimonial content, photograph or video, location (city/state/country if provided), relationship to Patient, and service context (hospital, date, service type).
5b.3 Consent. By submitting a testimonial, you explicitly consent to collection and processing as described here and in Terms Section 18.
5b.4 Licence. You grant Corelatin a worldwide, royalty-free, non-exclusive licence to use, display, reproduce, adapt, publish, and distribute the testimonial on our website, apps, social media, marketing materials, case studies, and partner presentations, subject to withdrawal under 5b.10 and Terms Section 18.7.
5b.5 Permitted uses. Website and app display, marketing and promotional materials, case studies, investor or partner presentations, email newsletters, and similar promotional contexts โ not unrelated sale of personal data.
5b.6 Editing. We may edit for clarity, grammar, length, or style while preserving meaning; short excerpts may be used.
5b.7 Attribution. We may use first name, initials, or full name; you may request anonymity or a pseudonym where practicable.
5b.8 Photo and video. Submission grants the same licence for image, likeness, voice, and appearance; you warrant consent of all individuals appearing.
5b.9 Patient privacy. We do not disclose identifiable health information without explicit written consent. Testimonials are anonymised where required under DPDPA and SPDI Rules. Minor Patient testimonials require verifiable Representative consent (Terms Section 22.6).
5b.10 Withdrawal. You may withdraw consent by written notice to Shubham, Grievance Officer, at support@corelatin.in or +91-9625700843. We will use reasonable efforts to remove active marketing use within thirty (30) days and honour applicable erasure requests. We are not required to recall material already distributed outside our control.
5b.11 Retention. Testimonials are retained for marketing purposes until consent is withdrawn, then deleted from active databases within thirty (30) days subject to legal retention requirements.
5b.12 Third-party sharing. Testimonials may be shared with marketing agencies or media partners under data-processing agreements requiring protection consistent with this Policy.
5b.13 No compensation. Unless agreed in writing, no payment for testimonial use.
5b.14 Accuracy. You represent the testimonial reflects your actual experience, is accurate and not misleading, contains no confidential information, does not infringe third-party rights, and that you may grant the licence in 5b.4.
5b.15 DPDPA rights. Access, correction, and erasure rights apply to testimonial personal data. Contact the Grievance Officer (below).
Under the Digital Personal Data Protection Act, 2023, you have the following rights (subject to applicable exceptions):
6.1 Right to access
Request information about personal data we hold and how it is processed.
6.2 Right to correction
Request correction of inaccurate or incomplete personal data. We aim to respond within 30 days.
6.3 Right to erasure
Request deletion when data is no longer necessary for the stated purpose, subject to legal retention (tax, consumer disputes, regulatory obligations).
6.4 Right to withdraw consent
Withdraw consent for processing that relies on consent; this does not affect prior lawful processing.
6.5 Right to grievance redressal
Register a grievance with Shubham, our Grievance Officer (contact below). If unsatisfied, you may approach the Data Protection Board of India as prescribed under DPDPA rules.
6.6 Right to nominate
Nominate another individual to exercise your rights in the event of your death or incapacity, as permitted under DPDPA Section 13.
6.7 Marketing opt-out
Opt out of promotional communications via unsubscribe links or by contacting support.
Note: Unlike some foreign laws, DPDPA 2023 does not provide a standalone statutory "data portability" right. We will provide copies of your data in a readable format where required for access requests.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable Indian law:
After the retention period expires, personal data is securely deleted or anonymized. We may retain certain data longer if required by law or for legitimate business purposes such as fraud prevention or dispute resolution.
We use cookies and similar tracking technologies to enhance your experience on our Platform:
8.1 Types of Cookies
8.2 Cookie Management
You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect the functionality of the Platform.
8.3 Third-Party Tracking
We may use third-party analytics services such as Google Analytics to understand how our Platform is used. These services may collect information such as your IP address, browser type, and device information.
Our Platform may contain links to third-party websites, resources, or services that are not owned or controlled by Corelatin. These links are provided for convenience only and do not constitute endorsement or recommendation by Corelatin.
Corelatin has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party websites or services. You acknowledge and agree that Corelatin shall not be liable for any damages or losses caused by your use of or reliance on any third-party content, goods, or services. We encourage you to review the privacy policies of any third-party websites you visit.
We implement industry-standard security measures to protect your personal information:
Despite these measures, no method of transmission over the internet is 100% secure. You acknowledge that you provide your information at your own risk.
11.1 Account holders. The Platform is not intended for persons under eighteen (18) years of age. We do not knowingly collect personal information from children under 18 for Account registration. If you believe a child under 18 registered without lawful authority, contact the Grievance Officer and we will take steps to remove the information.
11.2 Minor Patients. A Client aged 18+ may book Services for a minor Patient. We process a minor Patient's personal data โ including health-related information necessary for the Service โ only on the basis of verifiable consent from the minor's parent or lawful guardian (Representative) at booking, in accordance with DPDPA Section 9 and Terms Section 22.6. We do not use a minor Patient's data for behavioural monitoring, tracking, or targeted advertising.
Your personal information is primarily processed and stored within India in compliance with DPDPA 2023 data localization requirements. We may transfer your information to countries outside India only if:
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or for other operational reasons. We will notify you of any material changes by:
Your continued use of our Platform after such changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.
For questions, grievances, or to exercise data principal rights under DPDPA 2023, contact our Grievance Officer (acknowledgement within 48 hours; resolution target within 30 days, per Consumer Protection (E-Commerce) Rules, 2020):
For complaints, data rights requests, refund disputes, and policy grievances under the Consumer Protection (E-Commerce) Rules, 2020 and DPDPA 2023.
Response timeline: acknowledgement within 48 hours; resolution target within 30 days. General support (non-grievance): support@corelatin.in / +91-7398405299
You also have the right to lodge a complaint with the Data Protection Board of India if you are not satisfied with our response.