The Company shall process Information provided by You for the purpose of rendering telemedicine and allied services, with the help of its duly qualified doctors, which shall comprise of providing medical advice, counselling, treatment and prescription of medicines, if any, through electronic communications, which includes but is not restricted to video-calling, telephonic communication, transmission of information via emails, text messages etc.

The Company shall also process PHI (defined hereinafter) for the purpose of rendering the service of creating digital record and processing of PHI.

The Company shall also process Information provided by You for the purpose of receiving professional fees towards the Services rendered by the Company.

The Company shall also process de-identified Information provided by You for medical research and development purposes.

Lastly, the Company shall process the information provided by You to educate you or notify you with respect to the relevant products and services offered by the Company.

The services listed in this clause shall collectively be referred to as the Services.

In providing the Services on the Platform, the Company shall collect certain personal information and sensitive personal information [as defined in Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and collectively referred to as Information] from you. This information would, inter alia, include the following:

You acknowledge and agree that any and all information that is provided by you on the Platform is provided by you voluntarily or that you are authorized to provide such information without violating privacy of any person and that the information is provided at your own risk. While the Company would make all efforts to ensure the safety and security of the information provided by you, it shall not be responsible for any loss or theft of data or Cyber Incidents as defined in Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Please note that any information that is provided by you may be retained by the Company for (i) providing the Services; and (ii) for meeting its obligations under applicable law. If you delete your User account on the Platform and request for all your Information to be deleted from the servers of the Company, the Company shall retain the information provided by you for period of time until the same can be erased from its servers, and for compliance with its obligations under applicable law (if any). Please note that the Company shall only collect information that is necessary to render the Services mentioned herein and that the information shall be stored for such time period as may be necessary for rendering the Services and under applicable law.

You shall be responsible for the accuracy of the information provided to the Company for the use of the Platform and the Services. If there is any mistake in or change to Information provided by you for the use of Platform, you shall immediately notify the Company at feedback@narayana.health. You shall be solely liable for the consequences of providing incomplete, inaccurate or incorrect information on the Platform. Where the Company has reasons to believe that the information provided by you on the Platform in incorrect or incomplete, the Company may restrict you from using the Platform by disabling your User Account.

The Platform is not directed at minors, and we do not seek to collect any information directly from children including those under the age of 18. If we learn that we have received any information from an individual under the age of 18, we will use that information only to respond directly to the minor (or a parent or legal guardian) to inform him or her that he or she cannot use the Services and subsequently we will delete that information from our own servers. However, the parent or legal guardian may use the Platform and provide Information on behalf of the minor in order to use the Services offered on the Platform.

If you want to discontinue the use of the Platform, or if you want to withdraw the consent granted to the Platform for collecting and processing your data, please notify the Company at feedback@narayana.health . Once you discontinue the use of the Platform or withdraw your consent, the Company shall retain the personal information provided by you on the Platform for such time period as may be mandated by applicable law (if any) and thereafter use anonymized information for research and academic teaching.

While the Company does not actively collect any information from persons who visit the Platform, but do not register themselves on it or avail of the Services, certain portions of this Privacy Policy would be applicable to such visitors as well.

The Company shall use your information only to the extent mentioned in this Policy and in a manner that is permitted by applicable law.

All data that is shared by you on the Platform shall be processed by the Company. Personally identifiable data shared by you shall be stored and processed only for the purpose of providing the Services, and to contact you. Medical data and reports shared by you on the Platform may be processed for research and analysis in a deidentified form. The Company may also publish such research studies and findings in reputed medical journals and conferences (such as the ASCO) in a deidentified form. The Company follows reasonable security practices and procedures as per Industry standards and follows best practices to ensure the Information is processed in a secure manner. If you would, at any time, revoke your consent for the processing of the data shared by you on the Platform, you could do so by sending an email to feedback@narayana.health . Once such an email is received, the Company will remove your personal data from the data that is being processed in the manner set out in the aforesaid paragraphs.

Please note that neither the Company nor any of its employees would have access to the password that relates to your User account on the Platform. You shall be solely responsible for protecting your login credentials to the Platform, and the Company shall not be liable in any manner for unauthorised use of your login credentials. You shall be liable to the Company for any loss suffered by the Company as a result of unauthorised use of your login credentials. In the event of any misuse or suspected misuse of the same, please notify the Company at feedback@narayana.health

While the Company shall seek to implement the best market practices and security policies for the protection of your personal information, it shall not be liable for improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss of information or any Cyber Incidents. It is expressly stated that the Company shall not be responsible for any breach of security or for any actions of any third parties that receive Users' personal data or events that are beyond the reasonable control of the Company including, acts of government, computer hacking, unauthorized access to computer data and storage devices and storage technology, hardware, computer crashes, breach of security and encryption etc.

Cookies: A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you grant the permission, the file is added and the cookie helps analyze web traffic or lets you know when you visit a particular site. The Company uses traffic log cookies to identify which pages are being used. This helps the Company analyze data about web page traffic and improve the functioning of the Platform. This information is used by the Company only for statistical analysis and then the data is removed from the system. Please note that the Company does not have any control over the cookies that are placed by third party links on the Platform. The Company does not represent to you that such third party websites have their own privacy policies or that the information that is provided by you to them would be secure.

If a User has any questions or grievances regarding the Platform, the contents thereof, the manner in which personal data is being collated or processed by the Platform or is in need of making data access requests or has any questions regarding the Services, the User may reach out to The Grievance Officer of the Company customer support at feedack@narayana.health (the "Grievance Officer"). The Grievance Officer shall address any question or complaint or grievance that is raised by a User within a period of one (1) month from the date on which it is raised and complete information on the complaint is provided to the Grievance Officer.

Where the Company requires additional information to process and respond to the query raised by a User, the Company shall notify the User of the same.

This Platform originates from India. By using this Platform, you consent to the jurisdiction and venue of the courts located in Karnataka, India in connection with any action, suit, proceeding or claim arising under or by reason of this Privacy Policy.

The Company recognises the importance of maintaining the privacy of the information belonging to you. This Policy sets out details of how we treat user information collected on each of the platforms that are owned and controlled by us, including our website www. https://www.narayanahealth.org/ (the "Website"), the Tool NH Care (Applications), email communications received on noreply@narayanahealth.org and text messages received on +91 8067506890 (collectively, the "Platform"). The Platform is owned and operated by Narayana Hrudayalaya Limited, a public limited company existing under the provisions of the Companies Act, 2013 having its registered office at #258/A, Bommasandra Industrial Area, Anekal Taluk, Bengaluru - 560099 (the "Company" which expression shall mean and include, unless repugnant to the context, its successors in interest, affiliates and permitted assigns). The Platform is also used by hospitals operated and managed by the Company and its Affiliates. This Privacy Policy covers the Company, its Affiliates and the hospitals managed by the Company and its Affiliates and is limited to the information provided by the user and collected by the Company through the Platform

"You" or the "User" in this Policy refers to any person who voluntarily uses the Platform for the purpose of obtaining Services from the Company and its team of duly qualified doctors. You are a resident of Afghanistan, Bangladesh, Bhutan, Burundi, Cambodia, Democratic Republic of the Congo, Ethiopia, Fiji, Ghana, Indonesia, Iraq, Kazakhstan, Jamaica, Kenya, Kuwait, Kyrgyzstan, Madagascar, Maldives, Mauritius, Myanmar (Burma), Nepal, Niger, Nigeria, Oman, Pakistan, Qatar, Rwanda, , Republic of the Congo, Saudi Arabia, Sri Lanka, Sudan, Tajikistan, Tanzania, Turkmenistan, Uganda, Uzbekistan, Yemen, Zambia only. Individuals residing in other countries shall not access the Platform and the Services rendered through the Platform.

By visiting and/or using the Platform, you agree to the terms of this Privacy Policy and it shall be deemed that you have read in full, accepted and agreed to the terms herein. The Company reserves the right to modify the terms contained in this Privacy Policy at any time by posting such modifications on the Website. The modified Privacy Policy would be effective from the date of modification that is posted by the Company on the Website. If you do not agree to any term that is contained in this Privacy Policy, please immediately cease your use of the Platform.

This Privacy Policy is issued pursuant to the provisions that are contained in (a) Section 43A of the Information Technology Act, 2000; (b) Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Information (as defined hereinafter) that is collected by the Company on the Platform shall be used by the Company only for the purpose of providing the Services (as defined hereinafter) and other purposes as mentioned in the consent form, and such information shall not be used, sold, transferred or rented in a manner that is not set out in this Privacy Policy and the consent form.

The Company shall process Information provided by You for the purpose of rendering Services comprising of Online Evaluation (wherein the Platform connects Users to the network of experts working with the Company and facilitates the issuance of a feasibility of the medical treatment of the medical condition or illness suffered by the Patient in the Hospital) and Online Follow-up Consultation (wherein the Platform connects Users to the network of experts working with the Company and facilitates the further treatment of the medical condition or illness that was previously treated during the physical visit of the Patient to the Hospital) through electronic communications, which includes but is not restricted to video-calling, telephonic communication, transmission of information via emails, text messages etc.

The Company shall also process PHI (defined hereinafter) for the purpose of rendering the service of creating digital record and processing of PHI.

The Company shall also process Information provided by You for the purpose of receiving professional fees towards the Services rendered by the Company.

The Company shall also process de-identified Information provided by You for medical research and development purposes.

Lastly, the Company shall process the information provided by You to educate you or notify you with respect to the relevant products and services offered by the Company

The services listed in this clause shall collectively be referred to as the Services.

You acknowledge and agree that any and all information that is provided by you on the Platform is provided by you voluntarily or that you are authorized to provide such information without violating privacy of any person and that the information is provided at your own risk.

You shall be responsible for the accuracy of the information provided to the Company for the use of the Platform and the Services. If there is any mistake in or change to Information provided by you for the use of Platform, you shall immediately notify the Company at feedback@narayana.health. You shall be solely liable for the consequences of providing incomplete, inaccurate or incorrect information on the Platform. Where the Company has reasons to believe that the information provided by you on the Platform in incorrect or incomplete, the Company may restrict you from using the Platform by disabling your User Account.

The Platform is not directed at minors, and we do not seek to collect any information directly from children including those under the age of 18. If we learn that we have received any information from an individual under the age of 18, we will use that information only to respond directly to the minor (or a parent or legal guardian) to inform him or her that he or she cannot use the Services and subsequently we will delete that information from our own servers. However, the parent or legal guardian may use the Platform and provide Information on behalf of the minor in order to use the Services offered on the Platform.

If you want to discontinue the use of the Platform, or if you want to withdraw the consent granted to the Platform for collecting and processing your data, please notify the Company at feedback@narayana.health . Once you discontinue the use of the Platform or withdraw your consent, the Company shall retain the personal information provided by you on the Platform for such time period as may be mandated by applicable law (if any) and thereafter use anonymized information for research and academic teaching.

While the Company does not actively collect any information from persons who visit the Platform, but do not register themselves on it or avail of the Services, certain portions of this Privacy Policy would be applicable to such visitors as well.

The Company shall use your information only to the extent mentioned in this Policy and in a manner that is permitted by applicable law.

All data that is shared by you on the Platform shall be processed by the Company. Personally identifiable data shared by you shall be stored and processed only for the purpose of providing the Services, and to contact you. Medical data and reports shared by you on the Platform may be processed for research and analysis in a deidentified form. The Company may also publish such research studies and findings in reputed medical journals and conferences (such as the ASCO) in a deidentified form. The Company follows reasonable security practices and procedures as per Industry standards and follows best practices to ensure the Information is processed in a secure manner. If you would, at any time, revoke your consent for the processing of the data shared by you on the Platform, you could do so by sending an email to feedback@narayana.health. Once such an email is received, the Company will remove your personal data from the data that is being processed in the manner set out in the aforesaid paragraphs.

SECURITY OF YOUR INFORMATION

Please note that neither the Company nor any of its employees would have access to the password that relates to your User account on the Platform. You shall be solely responsible for protecting your login credentials to the Platform, and the Company shall not be liable in any manner for unauthorised use of your login credentials. You shall be liable to the Company for any loss suffered by the Company as a result of unauthorised use of your login credentials. In the event of any misuse or suspected misuse of the same, please notify the Company at feedback@narayana.health

While the Company shall seek to implement the best market practices and security policies for the protection of your personal information, it shall not be liable for improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss of information or any Cyber Incidents. It is expressly stated that the Company shall not be responsible for any breach of security or for any actions of any third parties that receive Users' personal data or events that are beyond the reasonable control of the Company including, acts of government, computer hacking, unauthorized access to computer data and storage devices and storage technology, hardware, computer crashes, breach of security and encryption etc.

The Company shall transfer and store the Information in India, a country that may not have the same level of data protection as in your country of residence for the purpose of rendering Services.

Cookies: A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you grant the permission, the file is added, and the cookie helps analyse web traffic or lets you know when you visit a particular site. The Company uses traffic log cookies to identify which pages are being used. This helps the Company analyse data about web page traffic and improve the functioning of the Platform. This information is used by the Company only for statistical analysis and then the data is removed from the system. Please note that the Company does not have any control over the cookies that are placed by third party links on the Platform. The Company does not represent to you that such third-party websites have their own privacy policies or that the information that is provided by you to them would be secure.

REDRESSAL OF GRIEVANCES

If a User has any questions or grievances regarding the Platform, the contents thereof, the manner in which personal data is being collated or processed by the Platform or is in need of making data access requests or has any questions regarding the Services, the User may reach out to The Grievance Officer of the Company customer support at canceropinion@narayanahealth.org (the "Grievance Officer"). The Grievance Officer shall address any question or complaint or grievance that is raised by a User within a period of one (1) month from the date on which it is raised and complete information on the complaint is provided to the Grievance Officer.

Where the Company requires additional information to process and respond to the query raised by a User, the Company shall notify the User of the same.

MISCELLANEOUS PROVISIONS

Force Majeure: The Company shall not be responsible for any cessation, interruption or delay in the performance of its obligations hereunder due to earthquake, flood, fire, storm, natural disaster, act of God, war, terrorism, armed conflict, labour strike, lockout, or boycott or change in law governing the Services rendered herein. The Company may at any time, in its sole discretion and without advance notice to you, cease operation of the Platform and the provision of the Services.

No Waiver: A delay or failure by the Company to exercise or enforce any right or provision of this Privacy Policy will not constitute a waiver of such right or provision.

Notices: All notices given to a User by the Company or by a User to the Company or another User shall be in writing and in the English language. Such notice shall be sent by e-mail or mailed by a prepaid recognized courier service to the intended recipient at the address set out below, or any changed address that is notified by either Party:

Governing Law; Jurisdiction: This Privacy Policy is governed by the provisions of Indian law, including but not limited to the following:

the (Indian) Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and

This Platform originates from India. By using this Platform, you consent to the exclusive jurisdiction and venue of the courts located in Karnataka, India in connection with any action, suit, proceeding or claim arising under or by reason of this Privacy Policy barring the conflict of laws principles.