Scope and status
This notice applies to personal data processed through Nutech's public website, account registration, authenticated platform, general enquiries, screening coordination, and related digital services where Nutech determines why and how the data is processed.
Different hospitals, doctors, laboratories, research organizations, payment providers, or collection partners may process information under their own notices and legal responsibilities. Ask the relevant organization which notice applies to a specific interaction.
Information we may collect
The information required depends on the service, the user's role, and whether the interaction occurs on the public website or through a restricted clinical workflow.
- Identity and contact information such as name, email address, telephone number, date of birth, and account identifiers.
- Role and professional information such as hospital, laboratory, specialization, licence or credential details, organization, and location.
- Screening and health-related information only where necessary for an approved patient or clinical workflow.
- Sample, order, tracking, report, access, audit, and support information generated through the service.
- Website and security information such as device, browser, IP address, timestamps, requested pages, authentication events, and error records.
- Information included voluntarily in an enquiry, feedback message, partnership discussion, or investor-relations request.
Why information may be used
- Provide, coordinate, secure, and support the requested website, account, screening, laboratory, reporting, or communication service.
- Verify identity, role, professional credentials, organization, eligibility information, or partner readiness where appropriate.
- Maintain sample and report traceability, quality oversight, patient communication, and doctor-guided follow-up.
- Respond to enquiries, resolve service issues, prevent misuse, investigate security events, and maintain audit records.
- Meet applicable legal, regulatory, clinical, quality, tax, accounting, or record-keeping obligations.
- Improve service design using appropriately minimized, aggregated, or de-identified information where suitable.
Consent and permitted processing
Where applicable law requires consent, Nutech should provide a clear notice describing the data and purpose and obtain a valid affirmative indication before processing. Consent should be capable of withdrawal with comparable ease, subject to lawful consequences and processing already completed.
Some processing may be permitted or required without consent under applicable law, including specified legitimate uses, security, legal obligations, claims, or emergency situations. Nutech should document the basis relied upon for each material activity.
Health and screening information
Health, sample, and screening information requires heightened confidentiality and should be handled only through authorized clinical and operational workflows with role-appropriate access.
Do not send detailed medical records, government identifiers, passwords, or payment details through the general contact form or ordinary email. Use the secure channel designated for the service when available.
Retention and deletion
Nutech should keep personal data only for as long as necessary for the stated purpose and applicable clinical, regulatory, quality, security, tax, accounting, legal-claim, and record-keeping requirements.
When retention is no longer required, information should be deleted, anonymized, or securely isolated as appropriate. Exact schedules may differ by record type and must be approved before production use.
Security and incident response
Nutech intends to use proportionate organizational and technical safeguards such as access control, role separation, authentication, encryption where appropriate, logging, vendor controls, backup, secure development, and incident response.
No internet service or storage method is completely secure. Suspected unauthorized access, loss, disclosure, or misuse should be reported promptly so it can be assessed and handled under the approved response process.
Your privacy choices and rights
Subject to applicable commencement dates, exceptions, identity verification, and the nature of the processing, an individual may be able to request access to information about processing, correction, completion, updating, erasure, grievance resolution, consent withdrawal, or nomination of another person to exercise specified rights.
Send a clear privacy request to nutechkpk@gmail.com. Nutech may ask for information needed to verify identity and locate the relevant records. A request may be limited or refused where law permits or requires retention.
Children and dependent persons
The public service is not designed for independent use by children. Nutech should not knowingly process a child's personal data without the verifiable consent or other authorization required by applicable law.
Additional safeguards may apply when a lawful guardian acts for a child or a person requiring supported decision-making.
Processing outside India
Technology or service providers may process information from locations outside India only where permitted and subject to applicable government restrictions, contractual controls, security requirements, and a documented assessment of the transfer.
Privacy and grievance contact
Privacy, consent, correction, erasure, or grievance enquiries may be sent to nutechkpk@gmail.com. Nutech should publish the registered-office address, named or designated grievance contact, response process, and escalation route required for production operations before collecting public health data.
You may also have the right to approach the competent authority after using the applicable grievance process, subject to the law and commencement provisions in force at the relevant time.
Official legal framework
This notice is informed by the official Indian data-protection framework. It is a website notice, not a legal opinion or a claim that every requirement automatically applies in the same way to every Nutech activity.
Changes to this notice
Nutech may update this notice when services, laws, vendors, or processing practices change. Material changes should be highlighted and, where required, communicated through an additional notice or fresh consent process.