Privacy Policy

01Our Commitment to Your Privacy

At Cordlyn, protecting your personal and health information is a priority. We recognize the sensitivity of healthcare data and are committed to maintaining transparency, confidentiality, and security when handling your information.

This Privacy Policy explains how Cordlyn collects, uses, stores, processes, and protects your information when you access or use our websites, mobile applications, and related digital services (collectively, the “Services”).

Cordlyn is a digital health platform operated by EthosCare Solutions Private Limited (“EthosCare”, “we”, “us”, or “our”). Our platform is designed to comply with India’s Digital Personal Data Protection Act, 2023 (DPDPA) and the Ayushman Bharat Digital Mission (ABDM) Health Data Management Policy.

By accessing or using the Cordlyn Services, you acknowledge that you have read and understood this Privacy Policy.

02Information We Collect

We collect different categories of information to provide and improve our healthcare services.

Personal Information

Personal information refers to information that identifies you as an individual. This may include:

• Full name, email address, phone number, and residential address
• Date of birth and gender
• Government-issued identification numbers (e.g. Aadhaar, PAN) where required for ABHA ID creation
• Account login credentials
• Profile photographs or images uploaded by users

Health Information

As a healthcare platform, Cordlyn may collect health-related data necessary to deliver services. This may include:

• Medical history and past diagnoses
• Current health conditions and treatment records
• Prescription information and medication details
• Allergy records and immunization history
• Laboratory reports and diagnostic results
• Appointment history with healthcare providers
• ABHA (Ayushman Bharat Health Account) linked health records

ABDM Compliance: Where you link your ABHA ID, health records may be fetched from the National Health Infrastructure (NHA) with your explicit consent. You can revoke this consent at any time from your account settings.

Device and Usage Information

We may automatically collect technical information related to your device and usage patterns, such as:

• Device type and operating system
• Browser type and version
• Internet Protocol (IP) address
• Mobile device identifiers
• Location information (only if you enable Emergency SOS - not tracked otherwise)
• Pages viewed and features accessed within the Services

03How We Collect Information

1. Directly From You

We collect information when you register an account, upload medical records, book healthcare services, or communicate with our support team.

2. Automated Technologies

Some information is collected automatically through cookies, log files, and analytics tools when you use the Services. See our Cookie Policy.

3. Healthcare Providers & ABDM

If you link your ABHA ID, health records may be shared with us by healthcare providers or the NHA’s Health Information Exchange through the ABDM framework — only with your prior consent.

04How We Use Your Information

Healthcare Service Delivery

Your information is used to provide, maintain, and personalize the Services, including managing your health records, sending medication reminders, and enabling emergency SOS features.

Communications

We may send you service-related notifications, health reminders, and marketing communications where you have consented. You can opt out of marketing messages at any time.

Security and Legal Compliance

Your information may be used to verify identity, protect against fraud, maintain system integrity, and comply with applicable Indian laws and regulatory requirements including the DPDPA 2023.

Analytics and Research

We analyze platform usage to improve healthcare delivery and digital tools. Research data is anonymized or de-identified wherever possible.

05How We Share Your Information

Healthcare Providers

With your explicit consent, health information may be shared with authorized healthcare professionals to support diagnosis, treatment, or care coordination.

Service Providers

We may engage trusted third-party service providers (cloud infrastructure, payment processors, analytics, communications) who are contractually obligated to protect your information.

Legal Requirements

Information may be disclosed when required to comply with applicable Indian laws, regulations, legal proceedings, or government requests.

Cordlyn and EthosCare do not sell personal information to third parties.

06Data Security

Cordlyn implements multiple technical and organizational safeguards:

• Encryption: Sensitive health and personal data are encrypted in transit and at rest.
• Access Controls: Strict authentication limits access to sensitive information to authorized personnel only.
• Security Audits: Regular security testing, monitoring, and vulnerability assessments are conducted.
• Employee Training: All employees undergo training on privacy and data protection practices.

While we maintain strong security measures, no digital system can guarantee complete protection. We continuously improve our practices to protect your data.

07Your Rights and Choices

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable laws, you have the following rights:

• Access: Request details about the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion (Right to Erasure): Request deletion of your personal data where legally permissible.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Withdraw Consent: Withdraw previously granted consent for data processing at any time.
• Grievance Redressal: Lodge a complaint with our Data Protection Officer or the Data Protection Board of India.

Submit requests via the contact information below. Certain information may be retained for legal compliance or security purposes.

08Contact Information

For questions, concerns, or data requests related to this Privacy Policy: