Privacy Policy

This Privacy Policy describes how Flash collects, uses, stores, and protects information when clinics, hospitals, and healthcare professionals in India use our platform. We are committed to handling healthcare and personal data responsibly and in line with applicable Indian laws, including the Digital Personal Data Protection Act, 2023.

1. Introduction

Flash helps healthcare providers streamline patient interactions, appointment management, and clinical documentation. Protecting the data entrusted to us is central to our service. This policy explains what information we process, why we process it, and the choices available to you.

2. What data we collect

We collect and process the following categories of data:

• Patient records: demographic details, contact information, appointment history, symptoms, notes, prescriptions, and other clinical information entered or uploaded by authorised clinic staff.
• Usage logs: information about how the platform is accessed and used, including login activity, feature interactions, device and browser information, IP addresses, and error reports.
• Contact information: names, email addresses, phone numbers, and professional details of clinic administrators, doctors, and support staff who register for or manage a Flash account.

3. How data is used, stored, and secured

We use the data we collect to provide, maintain, and improve the Flash platform, authenticate users, respond to support requests, send service notifications, and ensure the security and reliability of our systems.

Data is stored on cloud infrastructure hosted within India. We apply administrative, technical, and physical safeguards designed to protect against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit, access controls, role-based permissions, regular monitoring, and staff training on data handling practices.

Flash operates as a data processor for patient information entered by clinics, while the registered clinic or hospital remains the data fiduciary for that information.

4. Who data is shared with

We do not sell personal or patient data. We share information only in limited circumstances:

• Clinic staff: authorised users within your clinic or hospital can access the patient and operational data you choose to make available to them based on their assigned roles.
• Service providers: trusted third-party vendors who help us host, secure, analyse, or support the platform, bound by confidentiality and data protection obligations.
• Legal requirements: when required by law, court order, or government authority, or to protect the rights, safety, or property of Flash, our users, or patients.

5. Your rights and data retention

Depending on your role and applicable law, you may have the right to access, correct, update, restrict processing, or request deletion of your personal data. Clinic administrators can manage user access and patient records directly within the platform.

We retain patient and account data for as long as the clinic's account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer required, it is securely deleted or anonymised in accordance with our retention schedule.

6. Cookies and tracking

Flash uses cookies and similar technologies to keep you signed in, remember preferences, understand how the platform is used, and improve performance. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the availability or behaviour of some features.

7. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify customers of material changes through the platform or by email. Continued use of Flash after changes take effect constitutes acceptance of the updated policy.

8. Contact us

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your data, please contact us at info@getflash.today.