This is Version 2.0 of the CareDesk360 Privacy Policy. It replaces the version dated 26 May 2026.
It explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and what rights you have. It applies to caredesk360.com, the CareDesk360 web and mobile apps, our WhatsApp and phone communications, and our marketing.
1.Who We Are
CareDesk360 is a clinic management and growth platform owned and operated by Ridgeveda Solutions Private Limited (CIN U62090TS2025PTC206862), plot no.40, Green Hills Rd, KPHB Phase 15, Kukatpally, Hyderabad, Telangana 500085 (“Ridgeveda”, “we”, “us”).
If you have any question about this policy or about how your data is handled, you can reach our Grievance Officer using the contact details at the end of this page.
2.Our Two Roles
The law treats us differently depending on whose data we are handling, so it helps to be clear about our two roles:
- For our own website, marketing and customer accounts, we are the Data Fiduciary. We decide why and how this data is used, and we are responsible for it.
- For patient records that clinics store in CareDesk360, the clinic is the Data Fiduciary and we are its Data Processor. We process that data only on the clinic’s instructions and under a written Data Processing Agreement.
If you are a patient, the clinic that treats you is responsible for your records, and you should contact it first. We will help the clinic answer you.
3.What We Collect and Why
What we collect depends on how you use CareDesk360. For each group of people below, we list the personal data involved, why we use it, and the legal basis we rely on.
Website visitor
- Personal data: IP address, device and browser type, pages viewed, referring site, cookie identifiers.
- Why we use it: to run and secure the site, and — with your permission — to measure visits (Google Analytics) and show relevant ads (Meta).
- Legal basis: essential site operation is a legitimate use; analytics and advertising rely on your consent through the cookie banner.
Doctor or clinic owner who asks for a demo, consultation or Growth Score
- Personal data: name, phone, email, clinic name, area and city, preferred call time, and your answers to the Growth Score questions.
- Why we use it: to contact you about the demo or consultation you asked for, by phone, email or WhatsApp.
- Legal basis: your consent, given through the checkbox on the form.
Clinic user (doctor, receptionist, admin, staff)
- Personal data: name, email, phone, role, branch, login and activity logs, and the attendance and leave records entered by your clinic.
- Why we use it: to provide the service, secure your account, support you, and bill your clinic.
- Legal basis: our contract with your clinic, and legitimate use for employment purposes where your clinic is your employer.
Patient with a CareDesk360 account
- Personal data: name, email, phone, address, gender, date of birth, blood group, appointments, documents you upload, and bills.
- Why we use it: to create your account and manage appointments, records and bills with your clinic.
- Legal basis: your consent at registration, given on behalf of or for your clinic.
Patient whose clinic uses CareDesk360
- Personal data: whatever your clinic records — identity, contact details, consultation notes, prescriptions, reports and bills.
- Why we use it: to let your clinic provide and record your care.
- Legal basis: your clinic’s legal basis. We act only as its processor.
Anyone who contacts us
- Personal data: name, contact details, and the content of your message.
- Why we use it: to answer you.
- Legal basis: your consent, or the purpose for which you contacted us.
We do not collect more than we need for these purposes. We never ask for Aadhaar numbers, bank details or card numbers in our forms.
4.What We Never Do With Patient Data
- We never sell, rent or trade patient data.
- We never use patient data for our own marketing, advertising or profiling.
- We never use patient data to train artificial intelligence models without the clinic’s written permission.
- Our staff access patient records only when a clinic asks for support, only as much as needed, and every access is logged.
6.Transfers Outside India
Patient records are stored in Noida. Some of the providers listed above (Google, Meta, WhatsApp) may process website and messaging data outside India.
We use providers that offer protection at least as strong as this policy, and we follow any country restrictions the Government of India notifies under section 16 of the DPDP Act.
7.How Long We Keep Data
- Demo, consultation and Growth Score leads: 12 months after our last contact, then deleted, unless you become a customer.
- Website analytics: 14 months, following the Google Analytics setting.
- Clinic and patient data in the platform: for the length of the clinic’s contract, then returned or exported and deleted within 30 days. Backups are overwritten within [90] days.
- Security and access logs: at least 1 year, as the DPDP Rules require, with 180 days stored in India, as CERT-In requires.
- Invoices and tax records: 8 years, as tax law requires.
When you withdraw consent, or the purpose is complete, we delete the data unless a law requires us to keep it.
8.How We Protect Data
We encrypt data in transit with HTTPS (TLS), and at rest in our database and file storage. Access is role-based, admin accounts use two-factor login, every access is logged, backups are encrypted and tested, and staff sign confidentiality agreements.
No system is perfectly secure, so we also keep an incident response plan. Our Trust & Security page gives more detail.
9.If Something Goes Wrong
If a breach affects your personal data, we will:
- report it to CERT-In within 6 hours, as required;
- tell affected clinics within 24 hours;
- tell you and the Data Protection Board of India without delay, with a detailed report to the Board within 72 hours.
We will explain what happened, what it means for you, what we are doing, and what you can do.
10.Your Rights
Under the DPDP Act you can:
- Access a summary of the personal data we hold about you and who we shared it with.
- Correct, complete or update it.
- Erase it, unless a law requires us to keep it.
- Withdraw consent at any time, as easily as you gave it: click “Cookie settings” in the footer, reply STOP to a WhatsApp message, or email caredesk360@gmail.com. Withdrawal does not affect what we did before.
- Nominate someone to use these rights for you if you die or cannot act.
- Raise a grievance with us, and if you are not satisfied, complain to the Data Protection Board of India.
To use a right, email caredesk360@gmail.com from the email address or phone number we have for you, or write to the address below. We may ask you to confirm your identity.
We acknowledge requests within 72 hours and resolve them within 30 days, and never later than 90 days. If your request is about records held by your clinic, we will pass it to the clinic the same working day and help it respond.
11.Children
CareDesk360’s website and marketing are for doctors and clinic owners, not children. A patient account for anyone under 18 must be created by a parent or lawful guardian, who gives consent for the child.
Clinics may record children’s health data to treat them, as the DPDP Rules allow. We never track children or show them targeted advertising.
12.Cookies
We use essential cookies to run the site and, only with your consent, analytics and advertising cookies. See our Cookie Policy at caredesk360.com/cookies.
You can change your choice at any time from “Cookie settings” in the footer.
13.People in the European Union
If you use CareDesk360 while you are in the EU, the GDPR also gives you the rights to object, to restrict processing and to data portability, and to complain to your local data protection authority. Contact privacy@caredesk360.com.
14.Changes to This Policy
We will post any change here with a new version number and date.
For material changes, we will tell you by email or in the app at least 15 days before they apply, and ask for your consent again where consent is the basis.
15.Grievance Officer and Contact
Mohammad Mustaqeem
Ridgeveda Solutions Private Limited
Plot no.40, Green Hills Rd, KPHB Phase 15, Kukatpally, Hyderabad, Telangana 500085
Phone: +91 70931 11075 (Monday to Saturday, 10 am to 6 pm IST)
Email: caredesk360@gmail.com
Website: caredesk360.com
This policy is in English. Email us to ask for a copy in Telugu, Hindi or any other language in the Eighth Schedule of the Constitution.