1Who we are and what this covers
RAAH MEDI is operated by RAAH Solutions. This Privacy Policy explains how we handle personal data when you visit our website, request a demo, contact us, or use our Hospital, Pharmacy and Diagnostic Lab products (the “Services”).
We follow the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made under them.
2Our role: your data vs. your patients' data
| Type of data | Who decides how it is used | Our role |
|---|---|---|
| Your account, contact and billing details | RAAH Solutions | Data Fiduciary |
| Patient, prescription, test and customer records you enter into the software | Your hospital, pharmacy or lab | Data Processor — we process it only on your instructions |
If you are a patient and have a question about your records, please contact the hospital, pharmacy or lab you visited. We will help them respond to your request.
3Information we collect
Information you give us
- Name, phone number, email address and job role;
- Facility name, address, GST number, drug licence or registration details;
- Billing and payment details (card and UPI payments are handled by our payment partner — we do not store full card numbers);
- Messages you send to our support team.
Information entered by our customers
- Patient details such as name, age, gender, contact number and address;
- Health-related records such as visit notes, prescriptions, test orders and results;
- Inventory, sales, purchase and staff records.
Information collected automatically
- Login times, IP address, browser and device type;
- Actions taken in the application (an audit log) for security and accountability;
- Basic website usage information through essential cookies.
4How we use information
- To provide, operate and maintain the Services and your account;
- To give you support, onboarding and training;
- To send service messages, such as invoices, renewal reminders, security alerts and important updates;
- To keep the Services secure, detect misuse and keep audit records;
- To improve the Services using aggregated or de-identified information;
- To meet legal, tax and regulatory obligations.
We do not sell personal data. We do not use patient data entered by our customers for advertising or marketing.
5Consent and lawful use
We process your personal data with your consent, or for legitimate uses permitted by the DPDP Act, such as providing a service you have asked for or meeting a legal obligation.
Customers who enter patient data are responsible for obtaining any consent needed from their patients and for giving them the required notices.
You can withdraw consent for optional processing (for example, product update emails) at any time by writing to us. This does not affect processing already done.
7How we protect data
- Encryption of data in transit (HTTPS) and at rest;
- Individual logins with role-based access for each staff member;
- Audit logs of important actions;
- Regular backups and restricted internal access on a need-to-know basis;
- Confidentiality obligations for our staff and contractors.
No system is completely secure. If a personal data breach occurs, we will inform affected customers and the Data Protection Board of India as required by law.
8How long we keep data
- Account and Customer Data is kept for as long as your Subscription is active.
- After an account closes, data is available for export for 90 days, and is then deleted or anonymised.
- Invoices and records we must keep under tax or other laws are retained for the period those laws require.
9Your rights
Under the DPDP Act, you have the right to:
- get a summary of the personal data we hold about you and how it is used;
- ask us to correct, complete or update your data;
- ask us to erase data that is no longer needed, subject to legal requirements;
- withdraw consent you previously gave;
- nominate another person to exercise your rights in case of death or incapacity;
- raise a grievance with us, and then with the Data Protection Board of India.
To make a request, email support@raahmedi.com. We may need to verify your identity before acting on it.
11Children
Our Services are meant for healthcare businesses, not for individual use by children. Patient records about children are entered by our customers, who are responsible for obtaining consent from a parent or lawful guardian as required by law.
12Changes to this policy
We may update this Policy from time to time. The “Last updated” date at the top shows the latest version. We will inform customers of significant changes by email or in the application.
13Grievance Officer
If you have a concern about how your personal data is handled, please contact our Grievance Officer. We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days.
[Name of Grievance Officer]
RAAH Solutions
Hyderabad, Telangana, India
Email: grievance@raahmedi.com
Phone: +91 90632 25425
Questions about this policy?
Write to us and we'll respond within 7 working days.