Privacy Policy

Vaccine Panda Private Limited ("Vaccine Panda", "we", "us", "our") operates the websites www.vaccinepanda.com, www.vaccinepanda.in and www.thevaccinepanda.com and the Vaccine Panda app (collectively the "Platform"), through which we provide at-home vaccination and related healthcare services in Delhi NCR (the "Services"). This Privacy Policy explains what personal data we collect, why we collect it, how we use, share, store and protect it, and the rights you have over it.

This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"). By using the Platform or the Services, you consent to the practices described in this Policy. If you do not agree, please do not use the Platform.

1. Information We Collect

1.1 Information you provide

• Identity and contact details: name, mobile number, email address, residential address, city, PIN code and landmark.
• Family member details: names, dates of birth, gender and relationship of children or family members you add for vaccination scheduling.
• Health information (sensitive personal data): vaccination history and records, prescriptions, medical documents you upload, doctor's notes from consultations, and fitness-for-vaccination information shared during confirmation calls.
• Account credentials: password (stored only in encrypted/hashed form) or your Google account identity if you sign in with Google.
• Property and visit details you share for service delivery: floor number, lift availability, pets at home, and delivery instructions.
• Feedback, ratings, testimonials, support tickets and chat messages.

1.2 Information collected automatically

• Location data: GPS coordinates you share to help our team reach your home accurately. Location capture always requires your explicit permission through your browser or device.
• Device and usage data: IP address, browser type, device type, pages visited and session information, collected through cookies and similar technologies (see Section 6).

1.3 Payment information

Online payments are processed by third-party payment gateways (such as PayU). Your card, UPI or banking details are entered directly with the gateway and are never stored on our servers. We retain only transaction references, amounts and payment status needed for billing, invoicing and refunds.

1.4 Communications

Calls, chats, SMS, WhatsApp messages and video consultations with our customer care team or healthcare providers may be recorded and archived for quality, training, service coordination and dispute-resolution purposes.

1.5 Photographs and video

With your prior consent (as described in our Terms and Conditions), our field team may take photographs or short videos before or during the vaccination visit for service verification and record-keeping.

2. How We Use Your Information

• To provide the Services: scheduling and confirming appointments, dispatching the vaccination team to your address, administering the correct vaccines, and maintaining your family's vaccination records and due-date schedules.
• To communicate with you: booking confirmations, reminders for upcoming doses, service updates, invoices and responses to your queries or tickets.
• To process payments, issue GST invoices and handle refunds.
• To coordinate with our partner paediatricians (Panda Partner Clinics) and medical staff involved in your care.
• To comply with law: adverse event (ADR/AEFI) reporting to regulatory authorities, tax and accounting obligations, and responses to lawful requests from government agencies.
• To improve the Platform: analytics on anonymised, aggregated usage data that cannot identify you.
• To display testimonials on our website — only where you have marked your feedback as a testimonial, and only after our team approves and publishes it.

We do not sell or rent your personal data to anyone, and we do not use your health information for advertising.

3. Legal Basis for Processing

We process your personal data on the basis of: (a) your consent, given when you register, book a service, share your location or upload health records; (b) performance of the Services you have requested; and (c) our legal obligations under applicable Indian law. You may withdraw consent at any time by contacting us (Section 10), though this may prevent us from providing some or all of the Services.

4. Who We Share Data With

• Healthcare providers: the paediatricians, doctors, nurses and paramedics involved in delivering your vaccination or consultation, strictly to the extent needed for your care.
• Payment gateways: to process the payments you initiate.
• Service providers: SMS/email/WhatsApp delivery providers and IT infrastructure providers who process data on our behalf under confidentiality obligations.
• Regulatory authorities: CDSCO, PvPI and other authorities where ADR/AEFI reporting or other legal compliance requires it.
• Legal requirements: courts, law enforcement or government agencies where disclosure is required by law.

If Vaccine Panda is involved in a merger, acquisition or asset sale, your data may be transferred to the successor entity subject to this Policy.

5. Data Storage, Security and Retention

Your data is stored on servers located in India and protected by reasonable security practices as required by the SPDI Rules and the DPDP Act, including encrypted connections (HTTPS), hashed passwords, role-based access controls for our staff, and audit logging of staff access to customer records.

We retain personal data for as long as your account is active and thereafter as needed to maintain vaccination records (which families typically need long-term), comply with legal, tax and medical record-keeping obligations, and resolve disputes. When data is no longer required, it is deleted or anonymised. No method of transmission or storage is completely secure; while we follow industry-standard safeguards, we cannot guarantee absolute security.

6. Cookies and Similar Technologies

We use cookies and browser storage to keep you signed in, remember your session and preferences, and secure the Platform. These are essential for the Platform to function. We do not use third-party advertising cookies. You can clear or block cookies through your browser settings, but parts of the Platform (such as login) may stop working.

7. Your Rights

• Access: request a copy of the personal data we hold about you and your family members.
• Correction: update inaccurate or incomplete data — most details can be edited directly in your profile and customer portal.
• Erasure: request deletion of your account and personal data, subject to records we must retain by law (e.g., invoices, ADR reports).
• Withdrawal of consent: withdraw previously given consent for processing.
• Grievance redressal: raise a complaint with our Grievance Officer (Section 10) and, if unresolved, with the Data Protection Board of India under the DPDP Act.
• Nomination: nominate a person to exercise these rights on your behalf in case of death or incapacity, as provided by the DPDP Act.

We will respond to verified requests within the timelines prescribed by applicable law.

8. Children's Data

Our Services are booked and managed by adults (18 years or older). Health information about children is provided by their parents or legal guardians, who consent to its processing for vaccination scheduling, administration and record-keeping on the child's behalf. We process children's data only for these healthcare purposes and never for advertising, behavioural monitoring or profiling.

9. Third-Party Links

The Platform may contain links to third-party websites or services (for example, payment gateway pages or educational videos). Their privacy practices are governed by their own policies, and we are not responsible for them. Please review those policies before providing any information.

10. Grievance Officer and Contact

For any questions, requests or complaints regarding this Privacy Policy or your personal data, contact:

Grievance Officer: Dr. Gagan M.S. Malhotra
Address: Gurman Child Care Clinic, 19/1B, Tilak Nagar, New Delhi 110018
Email: vaccinepanda@gmail.com
Phone: 9999109040 / 9999771577

We aim to acknowledge grievances promptly and resolve them within the timelines required under applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be notified on the Platform. Continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

This Privacy Policy should be read together with our Terms and Conditions and Refund Policy.