Privacy Policy

1. Who we are

Swasthya Plus is operated by ODICAST Digital LLP (M51, Samanta Vihar, Bhubaneswar, Odisha, India - 751017). In this policy, “we”, “us”, and “our” refer to ODICAST Digital LLP as the Data Fiduciary for personal data processed through this website. Where another applicable privacy law uses different terminology, we may also act as the controller of that data.

For all privacy questions, write to us at privacy@swasthyaplus.com.

2. What we collect

Swasthya Plus does not have user accounts. We do not ask for your name, phone number, or any health information. The categories of data we do process are:

(a) Data you voluntarily send us

• Email correspondence. If you write to us (for example, via Contact or a corrections request), we receive your email address and the contents of your message. We use this only to reply and, where relevant, to follow up on the issue you raised.
• Contact forms. When contact forms are enabled on the site and you choose to use them, we receive the information you submit through those forms in order to respond to you.

(b) Data collected automatically

• Server and request logs. Our web host automatically logs technical details about each request, including IP address, timestamp, user-agent string, and referring URL. These logs are used for security, debugging, and usage analysis.
• Basic analytics. We may use website analytics to understand which content is useful and how the site is used.

(c) Data collected by embedded third parties

• YouTube. Swasthya Plusembeds videos hosted on YouTube. When you play an embedded video, YouTube (a Google service) may set cookies and process data according to Google’s own privacy policy. We have no control over this data.

3. Why we process data

We process personal data only as needed to:

• Operate the website — deliver pages, serve static assets, prevent abuse, and keep the service secure.
• Respond to you — handle emails, form submissions, corrections, privacy requests, and grievances.
• Improve the site — understand which content helps people and where the site can be improved.
• Comply with law — respond to lawful requests and protect our rights, users, and systems.

We do not claim blanket compliance with every foreign privacy regime simply because this site can be accessed globally. If a specific law applies to a specific interaction with us, we will handle that interaction under the law that applies.

4. Who we share data with

We do not sell personal data. We share limited data only with service providers who help us run the site, and only as necessary:

• Our web host (Netlify) processes request logs on our behalf and, when enabled, receives contact-form submissions for us.
• YouTube (for embedded videos, as described above).
• Email provider (Microsoft) handles emails sent to and from us.
• Analytics provider (Google Analytics) receives aggregated, pseudonymous usage data.

We may also disclose personal data if required by applicable law or to protect the rights, property, or safety of Swasthya Plus, our users, or others.

5. International transfers

Some of our service providers may process data outside India. Where that happens, we rely on the transfer mechanisms, contracts, and safeguards available under the law that applies to that processing.

6. How long we keep data

• Server logs: typically up to 90 days, then deleted or anonymised.
• Emails and correspondence: as long as needed to resolve the matter and keep a reasonable record of it — typically no more than 2 years.
• Analytics: aggregated and retained for trend analysis; no personal identifiers.

7. Your rights

Depending on the law that applies to your interaction with us, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Erase your data where there is no ongoing lawful reason to keep it;
• Withdraw consent where we process data on the basis of your consent;
• Nominate another person to exercise your rights on your behalf (DPDP Act);
• Object, restrict, or request portability where those rights are available under applicable law;
• Lodge a complaint with the Data Protection Board of India or another competent regulator that has jurisdiction.

To exercise any of these rights, write to privacy@swasthyaplus.com. We will respond within the timeframes required by applicable law.

8. Children

The DPDP Act defines a child as anyone under 18. Swasthya Plus is general-audience health information and is not directed at children. We do not knowingly collect personal data from children without verifiable parental consent as required by law. If you believe we have done so, please email us at privacy@swasthyaplus.com so we can take prompt action.

9. Security

We use reasonable technical and organisational measures to protect personal data, including HTTPS across the entire site, minimising the data we hold, and restricting internal access. No internet transmission is perfectly secure; we cannot guarantee absolute security.

10. Data breach notification

In the unlikely event of a personal data breach affecting you, we will take the steps required by applicable law, including notifying affected people and relevant authorities where required.

11. Grievances

For grievances related to this policy or our handling of your personal data, you may contact our Grievance Officer, whose details are listed on our Contact page. We acknowledge grievances within 24 hours and aim to resolve them within 15 days, as required by the IT Rules, 2021.

12. Changes to this policy

We may update this policy from time to time. Material changes will be indicated by updating the Last updated date at the top of this page. For significant changes, we will take additional steps to notify you as required by law.

See also: Terms of Use · Medical Disclaimer · Contact & Grievance Officer