PRIVACY POLICY

OF DOCIN HEALTH TECHX PRIVATE LIMITED
(Owner and Operator of the "MediBook" Platform)

1. INTRODUCTION

This Privacy Policy ("Policy") describes how DOCIN HEALTH TECHX PRIVATE LIMITED ("Company", "we", "our" or "us"), which owns and operates the MediBook Platform, collects, uses, stores, processes, discloses, transfers and protects the Personal Data of individuals accessing or using the Platform.

The Company has developed MediBook to facilitate seamless access to healthcare services by connecting patients with registered healthcare providers, including doctors, clinics, hospitals, laboratories, diagnostic centres and pharmacies through a secure digital platform.

MediBook enables users to search and connect with healthcare providers, book medical appointments, schedule laboratory and diagnostic tests, access healthcare packages, upload and manage digital prescriptions and diagnostic reports, maintain personal health records, and avail other healthcare-related services offered through the Platform.

The Company recognises the importance of protecting the privacy and confidentiality of Personal Data entrusted to it and is committed to processing such information in a lawful, fair, transparent and secure manner.

This Privacy Policy explains how the Company collects, receives, stores, processes, uses, discloses, transfers and safeguards Personal Data collected through the Platform.

This Privacy Policy has been prepared in accordance with the applicable laws of India, including but not limited to:

• The Digital Personal Data Protection Act, 2023 and the rules framed thereunder;
• The Information Technology Act, 2000, to the extent applicable;
• Other applicable laws, regulations, notifications and governmental guidelines relating to data protection, privacy and digital healthcare services.

By accessing, registering on, or using the Platform, You acknowledge that You have read, understood and agreed to the terms of this Privacy Policy.

Wherever Your consent is required under applicable law, the Company shall process Your Personal Data only after obtaining Your valid consent through appropriate electronic or other legally recognised means.

If You do not agree with this Privacy Policy, You should discontinue the use of the Platform and refrain from providing any Personal Data to the Company.

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to all Personal Data collected, received or processed by the Company through:

• The MediBook website;
• The MediBook mobile application (where applicable);
• Appointment booking services;
• Laboratory and diagnostic booking services;
• Digital prescription and report management services;
• Health record management services;
• Customer support interactions;
• Electronic communications including email, SMS and notifications; and
• Any other products or services offered through the Platform.

This Privacy Policy applies to all Users of the Platform, including but not limited to:

• Patients;
• Doctors;
• Clinics;
• Hospitals;
• Laboratories;
• Diagnostic Centres;
• Pharmacies;
• Healthcare Professionals;
• Business Partners; and
• Any other individual accessing or using the Platform.

This Privacy Policy shall be read together with the Terms of Use and any other policies published by the Company on the Platform.

3. DEFINITIONS

For the purposes of this Privacy Policy, unless the context otherwise requires, the following terms shall have the meanings assigned to them below:

3.1 "Company" means DOCIN HEALTH TECHX PRIVATE LIMITED, a company incorporated under the provisions of the Companies Act, 2013, having CIN: U62011TZ2026PTC039075 and its registered office at Sf. No.116A/2A23, Sidha Nagar, Palani, Dindigul, Tamil Nadu – 624601, which owns and operates the MediBook Platform.

3.2 "Platform" means MediBook, including its website, mobile application (where applicable), software applications, digital interfaces, APIs and all related services owned and operated by the Company.

3.3 "User", "You" or "Your" means any individual who accesses, browses, registers on or uses the Platform, including patients, doctors, clinics, hospitals, laboratories, diagnostic centres, pharmacies, healthcare professionals and other authorised users.

3.4 "Healthcare Partner" means any doctor, clinic, hospital, laboratory, diagnostic centre, pharmacy or any other healthcare service provider that has been registered or onboarded on the Platform to provide healthcare-related services.

3.5 "Personal Data" shall have the meaning assigned to it under the Digital Personal Data Protection Act, 2023, and means any data about an individual who is identifiable by or in relation to such data, including information collected by the Company through the Platform.

3.6 "Processing" means any operation or set of operations performed on Personal Data, whether by automated means or otherwise, including collection, recording, organisation, storage, retrieval, consultation, use, sharing, disclosure, transmission, modification, restriction, erasure or destruction of Personal Data.

3.7 "Consent" means a free, specific, informed, unconditional and unambiguous indication of the User's agreement to the processing of Personal Data for one or more specified purposes, given through a clear affirmative action in accordance with applicable law.

3.8 "Applicable Laws" means the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, the rules, regulations, notifications and guidelines issued thereunder, and any other applicable laws governing privacy, data protection, digital healthcare services and electronic transactions in India.

4. ACCEPTANCE OF THIS PRIVACY POLICY

By accessing, registering on, or using the Platform, You acknowledge and agree that:

• You have carefully read, understood and accepted the terms of this Privacy Policy.
• You voluntarily provide Your Personal Data for the purposes described herein.
• The Personal Data provided by You is true, complete and accurate to the best of Your knowledge.
• You consent to the collection, storage, processing, use and disclosure of Your Personal Data in accordance with this Privacy Policy and applicable laws.
• Where required by law, the Company shall obtain Your explicit consent before processing specific categories of Personal Data.
• If You do not agree with the terms of this Privacy Policy, You should immediately discontinue the use of the Platform and refrain from providing any Personal Data.

The Company reserves the right to suspend or restrict access to the Platform if the information required for providing services or complying with applicable legal obligations is not provided by the User.

5. COLLECTION OF PERSONAL DATA

The Company collects and processes only such Personal Data as is necessary for providing, maintaining, improving and securing the services offered through the MediBook Platform. Personal Data may be collected directly from Users, automatically through the Platform, or from authorised third parties in accordance with applicable laws.

The categories of Personal Data that may be collected include, but are not limited to, the following:

5.1 Identity Information

The Company may collect the following identity-related information:

• Full Name;
• Date of Birth;
• Gender;
• Profile Photograph (where voluntarily uploaded);
• Government-issued identification details, where required for verification or compliance with applicable laws.

5.2 Contact Information

To facilitate communication and service delivery, the Company may collect:

• Mobile Number;
• Email Address;
• Residential or Correspondence Address;
• Emergency Contact Details, where voluntarily provided.

This information is primarily used for user registration, appointment confirmations, customer support, service notifications and account-related communications.

5.3 Healthcare Information

In order to facilitate healthcare services through the Platform, the Company may collect and process healthcare-related information, including:

• Medical History;
• Existing Medical Conditions;
• Doctor Prescriptions;
• Laboratory Test Reports;
• Diagnostic Reports;
• Appointment History;
• Health Package Details;
• Digital Health Records uploaded or generated through the Platform; and
• Any other healthcare information voluntarily provided by the User.

The Company recognises that healthcare information is confidential in nature and shall process such information only for lawful purposes and in accordance with applicable laws.

5.4 Government Identification Information

Where necessary for healthcare service delivery, regulatory compliance or integration with government healthcare initiatives, the Company may collect:

• ABHA (Ayushman Bharat Health Account) ID for ABDM integration and digital health services;
• Aadhaar Number, where collection is permitted under applicable law and necessary for the intended purpose; and
• Permanent Account Number (PAN), where required for billing, taxation or other statutory purposes.

Such information shall be collected only to the extent necessary and processed in accordance with applicable legal requirements.

5.5 Payment and Transaction Information

Where Users make payments through the Platform, or where payments are processed in connection with services offered by Healthcare Partners, the Company may collect or receive the following information:

• Payment Transaction Reference Number;
• Payment Status;
• Transaction Amount;
• Billing Information;
• Refund Information (where applicable); and
• Other transaction details necessary for processing payments.

The Company does not intentionally store complete debit card, credit card or other payment instrument details. Payments are processed through authorised third-party payment service providers in accordance with their applicable security standards and privacy practices.

5.6 Device, Technical and Usage Information

When You access or use the Platform, the Company may automatically collect certain technical and usage-related information to ensure the efficient operation, security and continuous improvement of the Platform.

Such information may include:

• Internet Protocol (IP) Address;
• Device Type and Device Identifier;
• Operating System and Browser Information;
• Date and Time of Access;
• Login Activity;
• Pages Visited and Navigation History within the Platform;
• Session Information;
• Cookies and Similar Tracking Technologies;
• Diagnostic Logs and Error Reports; and
• Analytics relating to the use of the Platform.

The Company uses such information to analyse Platform performance, improve user experience, strengthen security measures, prevent fraudulent activities and enhance the quality of services offered through the Platform.

5.7 Information You Choose Not to Provide

You may choose not to provide certain categories of Personal Data requested by the Company. However, failure to provide such information may prevent the Company from providing certain services or functionalities available on the Platform.

6. HOW WE COLLECT PERSONAL DATA

The Company collects Personal Data through lawful means and only to the extent necessary for providing the services available on the Platform.

Personal Data may be collected through the following sources:

6.1 Information Provided Directly by You

The Company collects Personal Data directly from You when You:

• Register or create an account on the Platform;
• Book appointments with doctors, clinics or hospitals;
• Book laboratory or diagnostic services;
• Purchase healthcare packages;
• Upload prescriptions, laboratory reports or other medical records;
• Contact customer support;
• Submit enquiries, feedback or complaints;
• Participate in surveys, promotional campaigns or other interactive features available on the Platform.

6.2 Information Collected Automatically

Certain information is collected automatically when You access or use the Platform through cookies and similar technologies.

Such information enables the Company to:

• Authenticate Users;
• Maintain account security;
• Analyse Platform performance;
• Improve functionality and user experience;
• Detect and prevent fraud, abuse and unauthorised access; and
• Generate statistical and analytical reports.

6.3 Information Received from Healthcare Partners

The Company may receive Personal Data from Healthcare Partners registered on the Platform where necessary to facilitate healthcare services requested by You.

Such information may include:

• Appointment details;
• Consultation records;
• Prescriptions;
• Laboratory reports;
• Diagnostic reports;
• Healthcare package information; and
• Other healthcare-related information required for providing the requested services.

Healthcare Partners are responsible for ensuring that any Personal Data shared with the Company is disclosed in accordance with applicable laws and contractual obligations.

6.4 Information Received from Third-Party Service Providers

The Company may receive limited Personal Data from authorised third-party service providers engaged for operational purposes, including:

• Payment Gateway Service Providers (including Razorpay);
• Cloud Hosting Service Providers (including Amazon Web Services (AWS));
• Analytics Service Providers (including Google Analytics);
• Communication Service Providers;
• Government-authorised digital health integrations, where applicable.

Such information shall be processed only for the purposes specified in this Privacy Policy and in accordance with applicable laws.

7. PURPOSE OF PROCESSING PERSONAL DATA

The Company processes Personal Data only for lawful, fair and legitimate purposes connected with the operation of the Platform and the provision of healthcare-related services.

Personal Data may be processed for the following purposes:

• Creating and managing User accounts;
• Facilitating appointment bookings with Healthcare Partners;
• Facilitating laboratory and diagnostic test bookings;
• Managing digital prescriptions, laboratory reports and health records;
• Processing payments and related transactions;
• Providing customer support and resolving grievances;
• Sending appointment confirmations, reminders and service-related communications;
• Improving Platform functionality, performance and user experience;
• Conducting analytics and research for service enhancement;
• Preventing fraud, misuse and unauthorised activities;
• Complying with applicable legal, regulatory and statutory obligations;
• Improving the Platform through analytics, research, artificial intelligence, machine learning and service enhancements, where permitted by applicable law;
• Any other purpose for which the User has provided consent or which is otherwise permitted under applicable law.

The Company shall process Personal Data only to the extent necessary for the purposes for which it has been collected and shall not use such data for purposes that are incompatible with this Privacy Policy or applicable law without obtaining the necessary consent.

8. LEGAL BASIS FOR PROCESSING PERSONAL DATA

The Company processes Personal Data only for lawful purposes and in accordance with the provisions of the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 (to the extent applicable), and other applicable laws.

Personal Data may be processed on one or more of the following legal grounds:

8.1 Consent

The Company processes Personal Data where the User has voluntarily provided free, specific, informed, unconditional and unambiguous consent for one or more specified purposes.

Such consent may be obtained through:

• Registration on the Platform;
• Acceptance of this Privacy Policy and the Terms of Use;
• OTP verification;
• Consent check-boxes;
• Electronic acknowledgements; or
• Any other legally recognised mode of obtaining consent.

Users may withdraw their consent at any time in accordance with the provisions of this Privacy Policy and applicable law. Withdrawal of consent shall not affect the lawfulness of any processing carried out prior to such withdrawal.

8.2 Provision of Services

The Company processes Personal Data where such processing is necessary for providing services requested by the User, including but not limited to:

• Creating and maintaining User accounts;
• Appointment booking with Healthcare Partners;
• Laboratory and diagnostic test bookings;
• Health package bookings;
• Management of digital health records;
• Processing payments and refunds;
• Customer support and grievance handling; and
• Sending appointment confirmations, reminders and service notifications.

8.3 Compliance with Legal Obligations

The Company may process or disclose Personal Data where such processing is necessary to:

• Comply with applicable laws, regulations and governmental directions;
• Respond to lawful requests from courts, regulatory authorities or law enforcement agencies;
• Protect the legal rights and legitimate interests of the Company, Users and Healthcare Partners;
• Prevent fraud, misuse, cyber incidents and other unlawful activities; or
• Exercise or defend legal claims.

9. DISCLOSURE AND SHARING OF PERSONAL DATA

The Company treats Personal Data as confidential and shall not sell or rent Personal Data to third parties. Personal Data shall be shared only where necessary for providing services, complying with legal obligations or where the User has provided consent.

Personal Data may be shared with the following categories of recipients:

9.1 Healthcare Partners

The Company may share relevant Personal Data with Healthcare Partners registered on the Platform, including:

• Doctors;
• Clinics;
• Hospitals;
• Laboratories;
• Diagnostic Centres;
• Pharmacies; and
• Other authorised healthcare service providers.

Such sharing is limited to the information necessary for facilitating appointments, healthcare services, laboratory testing, preparation of diagnostic reports, digital prescriptions and other services requested by the User.

Healthcare Partners shall be responsible for maintaining the confidentiality of Personal Data received through the Platform and shall process such data only in accordance with applicable laws and their contractual obligations with the Company.

9.2 Payment Service Providers

The Company utilises authorised third-party payment gateway service providers, including Razorpay, for processing online payments, refunds and other payment-related transactions.

Payment-related information shall be shared only to the extent necessary for processing such transactions securely and efficiently.

The Company does not intentionally store complete debit card, credit card or other payment instrument credentials.

9.3 Cloud Hosting and Technology Service Providers

The Company utilises cloud infrastructure and technology services provided by Amazon Web Services (AWS) and other authorised technology partners for hosting, storage, maintenance, backup and operation of the Platform.

Such service providers process Personal Data solely on behalf of the Company and are contractually required to maintain appropriate security and confidentiality measures.

9.4 Analytics Service Providers

The Company uses analytics services, including Google Analytics, to understand Platform usage, analyse trends, improve system performance and enhance user experience.

Information shared for analytics purposes is processed in accordance with applicable laws and the respective privacy practices of such service providers.

9.5 Government Authorities and Regulatory Bodies

The Company may disclose Personal Data to courts, statutory authorities, law enforcement agencies, regulatory bodies or other governmental authorities where such disclosure is required under applicable law, judicial order, regulatory direction or to protect the legal rights and interests of the Company or its Users.

9.6 Business Reorganisation

In the event of a merger, acquisition, restructuring, business transfer or sale of assets, Personal Data may be transferred to the successor entity, subject to appropriate safeguards and compliance with applicable laws.

9.7 Professional Advisors

The Company may disclose Personal Data to its professional advisors, including advocates, auditors, accountants, consultants and other advisors, where such disclosure is necessary for obtaining professional services or complying with legal obligations.

10. CROSS-BORDER TRANSFER OF PERSONAL DATA

The Company may store or process Personal Data on cloud infrastructure or technology platforms located within or outside India, including cloud services utilised for the operation of the Platform.

Where Personal Data is transferred outside India, the Company shall ensure that such transfer is carried out in accordance with the provisions of the Digital Personal Data Protection Act, 2023 and other applicable laws.

The Company shall implement reasonable contractual, technical and organisational safeguards to protect Personal Data during such transfer and processing.

The Company shall not knowingly transfer Personal Data to any country or territory that is restricted by the Government of India under applicable laws.

11. DATA RETENTION

The Company shall retain Personal Data only for as long as it is necessary to fulfil the purposes for which such data was collected, to comply with applicable legal obligations or to protect its legitimate interests. The Company shall periodically review the necessity of retaining Personal Data and securely delete or anonymise information that is no longer required.

Without prejudice to the generality of the above:

• Personal Data shall be retained for the duration of the User's relationship with the Platform and for such additional period as may be required under applicable law.
• Medical records, prescriptions, diagnostic reports and laboratory reports shall be retained in accordance with applicable legal, regulatory and operational requirements.
• Payment and financial transaction records shall be retained for the period prescribed under applicable tax, accounting and statutory laws.
• Where a User requests deletion of Personal Data, the Company shall take reasonable steps to delete or anonymise such information, unless retention is required for compliance with legal obligations, dispute resolution or the establishment, exercise or defence of legal claims.

Upon expiry of the applicable retention period, the Company shall securely delete, anonymise or archive Personal Data in accordance with its internal policies and applicable laws.

12. DATA SECURITY

The Company is committed to maintaining appropriate administrative, technical and organisational measures to protect Personal Data against unauthorised access, disclosure, alteration, misuse, loss or destruction.

The security measures implemented by the Company include, but are not limited to:

• Secure cloud infrastructure and storage;
• Encryption of Personal Data during transmission, where appropriate;
• Role-based access controls;
• User authentication and authorisation mechanisms;
• Firewalls, anti-malware protection and network security controls;
• Regular monitoring of systems for vulnerabilities and security incidents;
• Data backup and disaster recovery procedures; and
• Periodic review and enhancement of security practices.

While the Company endeavours to implement industry-standard security measures, no method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, the Company cannot guarantee absolute security of Personal Data, and Users acknowledge the inherent risks associated with internet-based communications.

Users are responsible for maintaining the confidentiality of their account credentials and shall promptly notify the Company of any actual or suspected unauthorised access to their account.

13. CONFIDENTIALITY OF HEALTH INFORMATION

The Company recognises that health-related information is highly confidential and shall process such information with an appropriate level of care and protection.

Medical records, prescriptions, laboratory reports, diagnostic reports and other health-related information shall be accessed only by authorised personnel and Healthcare Partners to the extent necessary for providing healthcare services or fulfilling the purposes described in this Privacy Policy.

The Company requires Healthcare Partners, employees, consultants and authorised service providers who have access to such information to maintain its confidentiality and to use it solely for legitimate and authorised purposes.

The Company shall take reasonable measures to prevent unauthorised disclosure, misuse or alteration of healthcare information. However, Healthcare Partners remain independently responsible for maintaining the confidentiality and security of Personal Data processed by them in accordance with applicable laws and their contractual obligations.

14. RIGHTS OF USERS

The Company respects the privacy rights of its Users and is committed to enabling Users to exercise their rights in relation to their Personal Data in accordance with the Digital Personal Data Protection Act, 2023 and other applicable laws.

Subject to applicable legal requirements and reasonable verification of identity, Users may exercise the following rights:

14.1 Right to Access Information

Users may request information regarding the Personal Data processed by the Company, including:

• The categories of Personal Data being processed;
• The purposes for which such Personal Data is being processed;
• The categories of persons or entities with whom such Personal Data has been shared; and
• Any other information required to be provided under applicable law.

14.2 Right to Correction and Updating

Users may review, correct or update inaccurate, incomplete or outdated Personal Data by accessing their account or by submitting a request to the Company.

The Company may require reasonable verification before processing such requests.

14.3 Right to Erasure

Users may request the deletion of their Personal Data where:

• The Personal Data is no longer required for the purpose for which it was collected;
• The User withdraws consent, where processing is based on consent; or
• Deletion is otherwise required under applicable law.

The Company may retain certain Personal Data where retention is necessary for:

• Compliance with legal or regulatory obligations;
• Prevention of fraud or misuse;
• Resolution of disputes;
• Enforcement of legal rights; or
• Maintenance of records required under applicable healthcare, taxation or other statutory laws.

14.4 Right to Withdraw Consent

Where the processing of Personal Data is based on the User's consent, the User may withdraw such consent at any time by contacting the Company through the designated communication channels or by following the procedures made available on the Platform.

Withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal.

The User acknowledges that withdrawal of consent may result in the Company being unable to provide certain services available through the Platform.

14.5 Right to Grievance Redressal

Users may raise complaints or grievances relating to the processing of their Personal Data or any alleged violation of this Privacy Policy by contacting the Company's designated Grievance Officer.

The Company shall endeavour to acknowledge and address such grievances within a reasonable period in accordance with applicable laws and its internal grievance handling procedures.

15. COOKIES AND TRACKING TECHNOLOGIES

The Platform uses cookies and similar technologies to improve functionality, enhance user experience, analyse Platform performance and maintain the security of the Platform.

Cookies are small text files stored on a User's device that enable the Platform to recognise returning Users and remember certain preferences.

The Company may use the following categories of cookies:

• Essential Cookies – Required for the operation and security of the Platform.
• Functional Cookies – Used to remember User preferences and improve functionality.
• Analytics Cookies – Used to understand user behaviour and improve the performance of the Platform through services such as Google Analytics.
• Performance Cookies – Used to monitor the performance and reliability of the Platform.

Users may configure their browser settings to refuse or delete cookies. However, disabling certain cookies may affect the availability or functionality of specific features of the Platform.

16. CHILDREN'S PRIVACY

The Platform is not intended for use by children except where permitted under applicable law and where verifiable consent has been obtained from the parent or lawful guardian.

Where the Company processes the Personal Data of a child or a person with a disability requiring lawful guardianship, such processing shall be carried out only in accordance with the Digital Personal Data Protection Act, 2023 and other applicable laws, including obtaining verifiable consent from the parent or lawful guardian where required.

If the Company becomes aware that Personal Data has been collected in contravention of applicable law, it shall take reasonable steps to delete such information or otherwise comply with its legal obligations.

Parents or lawful guardians may contact the Company to request access to, correction of or deletion of Personal Data relating to a child, subject to applicable legal requirements.

17. THIRD-PARTY WEBSITES

The Platform may contain links to third-party websites, applications or services operated by independent entities. The Company does not control and is not responsible for the privacy practices, content or security of such third-party websites. Users are encouraged to review the privacy policies of such third-party websites before providing any Personal Data.

18. GRIEVANCE REDRESSAL

The Company is committed to addressing any concerns, complaints or grievances relating to the collection, processing, use or protection of Personal Data in a fair, transparent and timely manner.

Users who have any questions, concerns or grievances regarding this Privacy Policy or the processing of their Personal Data may contact the Company's designated Grievance Officer using the contact details provided below.

The Company shall endeavour to acknowledge and resolve grievances within the timelines prescribed under applicable laws and its internal grievance redressal mechanism.

19. CHANGES TO THIS PRIVACY POLICY

The Company reserves the right to amend, modify, revise or update this Privacy Policy at any time to reflect changes in:

• Applicable laws and regulatory requirements;
• Business operations or services offered through the Platform;
• Technology, security measures or data processing practices;
• Internal policies or operational procedures; or
• Any other legitimate business or legal requirement.

The updated Privacy Policy shall be published on the Platform with the revised "Effective Date" and "Last Updated" date.

Users are encouraged to review this Privacy Policy periodically to remain informed about how their Personal Data is collected, processed and protected.

Continued access to or use of the Platform after the publication of any revised Privacy Policy shall constitute acceptance of the updated Privacy Policy, to the extent permitted under applicable law.

20. LIMITATION OF LIABILITY

The Company adopts reasonable administrative, technical and organisational measures to safeguard Personal Data against unauthorised access, disclosure, alteration, misuse, loss or destruction.

However, no method of electronic transmission over the internet or method of electronic storage is completely secure. Accordingly, while the Company endeavours to protect Personal Data using commercially reasonable security measures, it cannot guarantee absolute security.

To the fullest extent permitted under applicable law, the Company shall not be liable for any indirect, incidental, consequential, special or punitive damages arising from:

• Unauthorised access to Personal Data resulting from circumstances beyond the Company's reasonable control;
• Failure of internet services, telecommunications networks or third-party systems;
• Cyber-attacks, malware, hacking or other malicious activities not attributable to the Company's wilful misconduct or gross negligence;
• Any act or omission of Healthcare Partners, payment service providers or other third parties; or
• Force majeure events.

Nothing contained in this Privacy Policy shall exclude or limit any liability that cannot be excluded or limited under applicable law.

21. GOVERNING LAW AND JURISDICTION

This Privacy Policy shall be governed by and construed in accordance with the laws of India.

Any dispute, controversy or claim arising out of or relating to this Privacy Policy or the processing of Personal Data shall, as far as possible, be resolved amicably between the Parties.

If the dispute cannot be resolved amicably, it shall be subject to the exclusive jurisdiction of the competent courts at Dindigul, Tamil Nadu, without prejudice to any rights available under applicable law.

22. CONTACT US

If You have any questions, requests or concerns regarding this Privacy Policy or the processing of Your Personal Data, You may contact:

23. ACCEPTANCE OF THIS PRIVACY POLICY

By accessing, registering on or using the MediBook Platform, You acknowledge that You have read, understood and agreed to this Privacy Policy.

Where Your consent is required under applicable law, such consent shall be obtained through an affirmative action, including selecting an acceptance checkbox, clicking "I Agree", completing the registration process or any other legally recognised electronic method.

If You do not agree to this Privacy Policy, You must discontinue the use of the Platform immediately.