Privacy Policy

Northoak Technologies Private Limited (Phyber), is committed to protecting your privacy and handling personal data responsibly. This Privacy Policy explains how we collect, use, process, store, and protect information when you access or use the Phyber platform, including our website, mobile applications, wellness services, consultations, OPD benefit programs, and related healthcare services.

Certain services and features described in this Policy may be introduced over time and may not be available to all users.

We may collect the following categories of information:

• Account and profile information.
• Contact information such as email address and phone number.
• Health and wellbeing information voluntarily provided by users.
• Appointment, consultation, and service usage information.
• Benefit eligibility information provided by institutions or employers.
• Device, browser, IP address, and analytics information.
• Future health records, reports, prescriptions, and dependent profiles where supported.

• Provide and maintain services.
• Manage accounts and user authentication.
• Facilitate consultations, bookings, and healthcare access.
• Verify eligibility for sponsored benefits.
• Improve platform performance and user experience.
• Comply with legal, regulatory, and contractual obligations.
• Communicate important service updates and notifications.

Certain services may involve collection and processing of health and wellbeing information. Such information is handled only for legitimate healthcare, wellness, service delivery, safety, compliance, and user support purposes.

We do not sell health information. Access is restricted to authorized personnel, healthcare providers, and service partners who require such access to deliver services.

• Healthcare professionals and service providers.
• Diagnostic, pharmacy, and wellness partners.
• Employers, institutions, or sponsors administering benefits.
• Technology, hosting, analytics, and payment providers.
• Authorities where disclosure is legally required.
• Potential acquirers during mergers, investments, or restructurings.

We implement reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction.

No internet-based service can guarantee absolute security, and users acknowledge the inherent risks associated with electronic transmission and storage of data.

Personal information is retained only for as long as necessary to provide services, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business purposes.

Subject to applicable law, users may request:

• Access to their personal information.
• Correction of inaccurate information.
• Deletion of information where legally permissible.
• Withdrawal of consent where processing is consent-based.
• Information regarding how data is processed.

Phyber seeks to process personal data in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, and any rules, amendments, or guidance issued thereunder.

Our services are not intended for children below the age permitted by applicable law without the involvement, authorization, or supervision of a parent, guardian, institution, or authorized representative.

The platform may contain links to third-party websites and services. Phyber is not responsible for the privacy practices of such third parties.

We may update this Privacy Policy from time to time. Material changes may be communicated through the platform, email, or other appropriate channels.