Skip to main content

Privacy Policy

Effective 18 September 2026

1. What this policy covers

This policy explains how Spot Healthcare Solutions Pvt Ltd collects, uses, and protects your personal and health information when you use SpotSense, in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian data protection law.

2. Information we collect

Booking details: name, date of birth, gender, phone number, and home address for the person being tested.

Health information: the tests you book and the results generated during your visit.

Technical information: device/browser session identifiers used to let you track a booking without an account.

3. How we use your information

To schedule and carry out your booking, assign a phlebotomist, generate and deliver your report, and provide customer support.

To resolve your delivery address to a serviceable location (via a geocoding service) and assign the nearest available phlebotomist.

To understand usage of the site and booking flow (via Firebase/Google Analytics) so we can improve it — see our Cookie Policy for details. This analytics data is never combined with your name or health information.

We do not sell your personal or health information, and we do not use it for advertising.

4. Who we share it with

The phlebotomist assigned to your visit (name, address, phone, and the tests booked).

Cashfree Payments India Private Limited, to process online payments — they receive only what is needed to complete your payment; we never see or store your full card/bank details.

Our cloud infrastructure provider (Google Firebase/Google Cloud), which stores and processes data on our behalf under contractual confidentiality obligations, and Firebase/Google Analytics for aggregate usage analytics (see our Cookie Policy).

We do not share your health information with any other third party without your consent, except where required by law.

5. Data retention

We retain booking and result records for as long as needed to provide the service, meet legal/medical record-keeping obligations, and resolve disputes, after which they are securely deleted or anonymised.

6. Your rights

Under the DPDP Act, you may request access to, correction of, or erasure of your personal data, or withdraw consent previously given, by writing to info@spotsense.in. We will respond within a reasonable time.

If you have a SpotSense account (signed in with your phone number), you can also self-serve this from Account → Danger zone → Delete my data. This removes your name, phone, and address from your past bookings and deletes your downloadable reports; test records are kept in de-identified form as required for lab record-keeping.

7. Security

We use industry-standard safeguards (encryption in transit, access controls, and role-based permissions) to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information appropriately to its sensitivity.

8. Children & dependants

If you book a test on behalf of a minor or dependant, you confirm you have the authority to consent to the collection and processing of their health information on their behalf.

9. Grievance officer & contact

For privacy questions, data requests, or grievances, contact us at info@spotsense.in or +91 86003 79146. Registered office: 209, Iris Apartment, Whitefield Main Road, Pattandur Agrahara, Bengaluru, Karnataka 560066, India.