Privacy Policy
Last updated
Draft document. This page is a structural template for review. Its wording has not been settled with legal counsel and must be replaced with the finalised policy, together with the operating company’s registered details, before launch. Nothing here should be relied on as a statement of MedInsight’s current practices.
This policy explains how MedInsight Research handles personal information collected through this website. It applies to the website only and not to any research engagement governed by a separate agreement.
Who we are
MedInsight Research ("MedInsight", "we", "us") operates this website and decides why and how the personal data collected through it is processed. Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), that makes us the Data Fiduciary, and you — the person the data relates to — the Data Principal.
Information we collect
We collect personal data only at the points listed below. You do not need to provide any personal data to browse the website.
- Contact form: your name, email address and message, and optionally your company, phone number, enquiry type, subject and the report you are asking about
- Newsletter sign-up: your email address
- With each form submission: the IP address and browser user-agent string your device sends, stored alongside the submission
- With every page request: standard technical information such as your IP address, browser type and the page requested, which our servers may record in routine logs
- Buy Now page: the billing details you enter are not currently transmitted to us or stored anywhere. Online payment is not yet live, so a purchase is completed by contacting our research team, and anything you send us then is handled as a contact-form enquiry
How information is used
We use personal data only for the specific purposes below, and not for any other purpose without telling you first. We do not sell personal data or use it for advertising.
- To respond to your enquiry, prepare a quote, send a sample or complete a report purchase you have asked about — relying on the consent you give by ticking the consent box on the form, and on the information you voluntarily provided for that purpose (section 7(a) of the DPDP Act)
- To send the newsletter you subscribed to — relying on the consent you give by ticking the consent box on the sign-up form, which you can withdraw at any time on our Unsubscribe page
- To protect the website and its forms from spam and abuse, including by limiting how often submissions can be made from one address
- To comply with our legal obligations and respond to lawful requests from government authorities
Sharing and processors
We share personal data only with Data Processors that help us run the website, such as the providers that host the website and its database and, where we send newsletters, providers that deliver email. They may process it only on our instructions, under contracts that require them to keep it secure.
We may also disclose personal data where required by law, a court order or a lawful request from a government authority, or where necessary to protect our rights or the safety of others.
Our providers may process data on servers outside India. Any such transfer is made in line with section 16 of the DPDP Act, and never to a country or territory to which the Central Government has restricted transfers.
Security
We take reasonable security safeguards to protect personal data against breach, including encrypted (HTTPS) connections to the website and restricted access to the systems that store form submissions. If a personal data breach occurs, we will notify the affected Data Principals and the Data Protection Board of India as the DPDP Act requires.
Retention
We keep enquiry records for as long as needed to deal with your enquiry and any purchase that follows, and to keep a record of our dealings with you. We keep newsletter subscriptions until you unsubscribe.
Once the purpose is served, or you withdraw your consent, we erase the personal data and have our processors do the same, unless a law requires us to keep it for longer.
Your rights
Under the DPDP Act you have the following rights over your personal data. The Contacting us section below explains how to exercise them.
- Access: to obtain a summary of the personal data we hold about you, the processing we carry out, and the identities of those we have shared it with
- Correction and erasure: to have your personal data corrected, completed, updated or erased
- Withdrawal of consent: to withdraw consent at any time, as easily as you gave it — for the newsletter, by entering your address on our Unsubscribe page
- Grievance redressal: to have a complaint about our handling of your personal data answered by us
- Nomination: to nominate another person to exercise these rights on your behalf in the event of your death or incapacity
Children's personal data
This website is intended for business and professional users and is not directed at children. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has submitted personal data to us, please contact us and we will erase it.
Cookies
This website sets one essential cookie, which remembers your choice in the cookie banner. It does not use analytics or advertising trackers. Our Cookie Policy explains this in more detail.
Changes to this policy
We will update this policy when our practices or the law change — for example, when online payment is introduced. The date at the top of the page shows when it was last updated.
Contacting us
To stop receiving the newsletter, use the Unsubscribe page linked in the footer; it takes effect straight away. To ask a question about this policy, exercise any of your other rights, withdraw consent or raise a grievance, contact MedInsight Research through the contact page on this website and select "General Enquiry". We will respond within the period the DPDP Act and the rules made under it prescribe.
If you are not satisfied with our response to a grievance, you may then file a complaint with the Data Protection Board of India.
Questions about this document can be sent through our contact page.