Privacy Policy
Last updated: 03 October 2026
Varahii India ("Company", "we", "us", "our") operates Doczone.in at https://doczone.in/ ("Website"). This Privacy Policy explains how we collect, use, disclose, store, and protect personal data in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable law. By using the Website, you consent to the practices described here. As used in this Policy, "you" refers to any Data Principal (the individual to whom personal data relates) interacting with the Website, including general visitors, persons submitting inquiries or claims, and doctors/medical practitioners/facility representatives submitting Listing data.
1. Personal Data We Collect
We collect personal data only when you knowingly and voluntarily provide it, including:
- Inquiry form: name, phone number, email address, city/location, and the nature of your query;
- Claim/complete-listing form: practitioner or facility name, registration/qualification details, phone number, email, WhatsApp number, clinic/hospital address, specialisation, timings, and supporting documents/images voluntarily uploaded;
- WhatsApp-based verification: your WhatsApp-registered mobile number and the content of messages exchanged with us for the purpose of verifying a claimed Listing or an inquiry (see our separate WhatsApp Usage Consent policy);
- Technical/usage data: IP address, browser type, device identifiers, pages visited, referring URL, and similar data collected automatically via cookies and similar technologies (see our Cookie Policy); and
- Voluntary correspondence: any information you include in emails or communications sent to info@varahii.com.
We do not knowingly collect financial information (card/bank details), government identity numbers, biometric data, or health/medical records of patients. Users must not submit such sensitive data through any form on the Website.
2. Purpose and Legal Basis of Processing
In accordance with Section 4 of the DPDP Act, we process personal data only for the following specified purposes, based on your consent:
- responding to inquiries submitted through the Website;
- verifying, publishing, updating, or removing a claimed/submitted Listing;
- confirming identity and authenticity of a practitioner/facility via WhatsApp or email before publishing or amending a Listing;
- maintaining, securing, and improving the Website and directory database;
- complying with applicable law, regulatory requests, or lawful process; and
- internal record-keeping, fraud prevention, and dispute resolution.
We do not use your personal data for automated decision-making producing legal effects, and we do not use it for any purpose beyond what is stated above without seeking fresh consent, except where permitted under Section 7 of the DPDP Act (e.g., voluntarily provided data for a specified purpose, compliance with law, or public interest grounds such as medical emergency).
3. Consent
By submitting any form, initiating WhatsApp communication with us, or otherwise voluntarily providing personal data, you provide free, specific, informed, unconditional, and unambiguous consent, as required under Section 6 of the DPDP Act, to the collection and processing described in this Policy. You may withdraw consent at any time by writing to info@varahii.com; withdrawal shall not affect the lawfulness of processing carried out prior to withdrawal, and may result in removal of your Listing or inability to respond to your inquiry.
4. Publicly Displayed Listing Information
Where you submit or claim a Listing as a doctor, practitioner, or facility representative, you acknowledge that certain fields (such as name, qualification, specialisation, clinic address, and public contact number) are, by the very nature of a public directory, displayed openly on the Website and are not confidential. Personal mobile numbers used solely for WhatsApp verification, and any email addresses used solely for correspondence, are not published unless you expressly authorise their public display.
5. Data Sourced from Publicly Available Information
A significant portion of Listings on the Website is compiled from information already publicly and lawfully available online (such as government medical council registers, hospital websites, and public business listings), in a manner consistent with Section 3(c)(ii) of the DPDP Act concerning personal data made publicly available by the Data Principal or under legal obligation. Any doctor, practitioner, or facility that wishes such publicly-sourced information to be corrected or removed from our directory may contact us as set out in Clause 9 below.
6. Do Not Sell My Data
Varahii India does not, and will not, sell, rent, or trade your personal data to any third party for monetary or other consideration. Please refer to our dedicated Do Not Sell My Data policy for full details, including how limited data sharing (e.g., with hosting/email service providers strictly for operating the Website) is handled.
7. Data Sharing and Disclosure
We may share personal data only in the following limited circumstances:
- with third-party service providers (such as hosting, email delivery, or analytics providers) strictly to the extent necessary to operate the Website, under confidentiality obligations;
- where required by law, court order, or a lawful request from a government or regulatory authority in India;
- to protect the rights, property, or safety of Varahii India, Users, or the public; or
- in connection with a merger, acquisition, or sale of assets, subject to equivalent confidentiality protection.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Inquiry and verification data may be retained for a reasonable period to handle follow-up queries and prevent fraudulent resubmission, after which it is deleted or anonymised, save where we are legally required or permitted to retain it longer, including for the establishment, exercise, or defence of legal claims.
9. Your Rights as a Data Principal
Subject to the DPDP Act and its rules, you have the right to:
- obtain a summary of personal data we hold about you and the processing activities undertaken;
- request correction, completion, or updating of your personal data;
- request erasure of your personal data that is no longer necessary for the purpose for which it was collected, unless retention is required by law;
- withdraw consent at any time (see Clause 3); and
- nominate another individual to exercise your rights in the event of death or incapacity, in accordance with Section 14 of the DPDP Act.
To exercise any of these rights, write to info@varahii.com with sufficient details to verify your identity. We will respond within a reasonable time as required under applicable law. We reserve the right to refuse requests that are manifestly unfounded, excessive, or not permitted to be honoured under the DPDP Act.
10. Security Practices
We implement reasonable security practices and procedures, as contemplated under Section 43A of the Information Technology Act, 2000 and the DPDP Act, including access controls and secure hosting, to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is completely secure, and Varahii India cannot guarantee absolute security. In the event of a personal data breach, we will comply with applicable notification obligations under the DPDP Act.
11. Children's Data
The Website is not directed at, and does not knowingly collect personal data from, individuals under 18 years of age. If we become aware that we have inadvertently collected data of a child without verifiable parental/guardian consent as required under Section 9 of the DPDP Act, we will delete such data promptly.
12. Cross-Border Transfer
Personal data collected through the Website is primarily stored and processed within India. Where any service provider processes data outside India, we will ensure such transfer is consistent with the DPDP Act and any restrictions notified by the Central Government from time to time.
13. Cookies
The Website uses cookies and similar technologies as described in our Cookie Policy, which forms part of this Privacy Policy.
14. Consent Manager and Grievance Redressal
As we currently interact with Data Principals directly, all consent-related and grievance
queries are handled by our designated contact point below, who also functions as our Data
Protection contact / Grievance Officer for the purposes of the DPDP Act and the IT Act:
Varahii India — Email: info@varahii.com
Location: Mumbai, Maharashtra, India. All communication must be through this email address only.
15. Changes to this Policy
We may update this Privacy Policy periodically. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Website after such update constitutes acceptance of the revised Policy.
16. Governing Law and Jurisdiction
This Policy is governed by the laws of India, and any dispute arising out of or in connection with it shall be subject to the exclusive jurisdiction of the courts at Mira Road, Thane District, Maharashtra, India.
17. Contact
For any privacy-related question, complaint, or rights request, write to info@varahii.com. All privacy concerns are handled exclusively through this email address.