1.Definitions
Cookies: Small data files stored on your device by our website or application to improve your user experience.

Data: Includes personal information and non-personal information that can directly or indirectly identify you.

Data Protection Laws: Applicable laws governing the processing, storage, and sharing of personal data.

Partners: Third-party organizations with whom we collaborate to offer products or services.

Service Providers: External entities we engage to assist with processing or storing your data, under written contracts.

User or You: The individual who accesses or uses our Services.

2. Information We Collect
GetTested may collect the following types of information:

• Contact Information: Name, email address, postal address, phone number, and other details you provide when creating an account or contacting us.
• Health and Medical Information: Health history, medical records, diagnostic results, prescriptions, and information provided while using our health-related services.
• Transaction Information: Payment details, transaction history, and preferences.
• Technical Information: IP address, browser type, operating system, device details, and usage patterns.
• Other Information: Feedback, survey responses, and any other personal data you voluntarily provide.

3. How We Collect Data
We collect information through:

Direct Interaction: When you register, purchase a product, or use our services.

Automated Technologies: Cookies, pixels, and similar tools that collect technical and usage data.

Third Parties: Authorized partners, service providers, or external platforms you interact with via our Services.

Customer Support and Sensitive Data
When you contact our customer support, you may choose to share sensitive personal data, such as health information or test results. We process this information only to assist you with your inquiry.

The lawful basis for this processing is the performance of our contract with you (GDPR Art. 6(1)(b)) and your explicit consent (GDPR Art. 9(2)(a)) when you voluntarily provide such data.

Customer support is managed through our provider Intercom, which acts as our data processor and stores data on servers within the EU. Access to support conversations is restricted to authorized staff only, and we apply appropriate technical and organizational measures (such as two-factor authentication) to protect your information.

We retain support conversations to: - ensure traceability in customer support (so we can follow up on previous cases), - enable quality control and staff training, and - continuously improve our service and processes.

Support conversations are therefore retained for a longer period, but only to the extent necessary for these purposes. You always have the right to request deletion of your support data, and we will comply without undue delay (in accordance with GDPR Art. 17).

4. Use of Data
We may use your data for the following purposes:

• To provide, improve, and personalize our products and services.
• To process transactions and communicate with you about your orders or inquiries.
• To analyze user behavior and improve user experience.
• To send promotional offers, recommendations, or updates (where permitted).
• To comply with legal obligations and safeguard against fraud or misuse.
• For research and analytics to enhance our offerings.

5. Sharing of Data
We may share your data with the following entities:

Service Providers: To assist with data analysis, payment processing, and other operational needs.

Partners: To provide co-branded services or additional products you may request.

Compliance and Legal Obligations: To comply with applicable laws or respond to legal requests.

Business Transfers: In case of mergers, acquisitions, or sale of assets, your data may be transferred.

We ensure these entities adhere to strict confidentiality and data security standards.

6. Data Retention
We retain your data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. If you request deletion of your data, we will securely remove it unless retention is necessary for legal or regulatory purposes.

7. Data Security
We employ technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure. Please notify us immediately if you suspect any misuse or unauthorized access to your information.

8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting on our website or application. We encourage you to review this policy regularly to stay informed about how we protect your information.

9. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

GetTested India Pvt Ltd Email: hello@gettested.co.in