Privacy Statement

1. Scope

Lupin Diagnostics endeavours to ensure and maintain the privacy and security of all personal information. The Privacy Statement is a commitment from Lupin Diagnostics to the Users, that Personal Data, as described below provided voluntarily by the User will be collected, accessed, stored and will be used for the purpose of providing Users, its services, that the User has sought to avail or book while browsing through the platform or to provide information to the User about Lupin Diagnostics, or its Services, or to seek the User‘s feedback or to provide educational/marketing information. Additionally, Personal Data may also be used in an anonymized form for analytics and research purposes.

2. Applicability

The Privacy Statement will be applicable to all the Users who use Lupin Diagnostics’ platform either by browsing/ accessing/ booking any of the Service.

This Privacy Statement is published in compliance with applicable data protection laws. . The Privacy Statement shall be subject to changes based on any new applicable laws or amendments to existing laws, as well as in case of changes in the internal policies of Lupin Diagnostics.

3. Nature of Personal Data and the Stages when the same will be collected

"Personal Data" referenced in this Privacy Statement means any information that may be used to identify the User such as (i) the User’s first and last name with salutation, a home or other physical address, whether at work or at home, and an email address or other contact information such as mobile number (ii) age and gender (iii) correspondence address (iv) physical, physiological and mental health condition (v) Medical Records.

When a User accesses the platform or avails any of the Services, the User may provide, or Lupin Diagnostics may receive certain information in respect of the User. Indicative instances and stages which results in receipt of Personal Data are mentioned below:

i. While booking a Service- The User may be asked to populate certain Personal Data while attempting to book a particular Service available on the Platform.

ii. While making payment- Upon proceeding ahead, the User will be redirected to a third party site (“Payment Gateway”) for making payment. The User will have the option to make payment in cash upon receiving the Service or by way of online payment through (authorized/ authentic) third party sites. Lupin Diagnostics is not responsible for the data protection safeguards or performance of such third-party sites.

iii. While browsing the Services- Even when a prospective User is browsing the Services on the platform, certain information such as IP address of User’s server from where the Platform is being accessed, the type of browser, the operating system of User’s system may be stored in server logs. Kindly refer to the cookie policy of Lupin Diagnostics.

iv. Once the Service is availed by the User- Once the User has received the Service, a test report will be generated which can be downloaded by the User or collected from any of the Lupin Diagnostics centers. Nonetheless, the reports are stored as per Lupin Diagnostics retention policies in compliance with applicable laws.

4. Protection of Personal Data of Users

The online platforms of Lupin Diagnostics is appropriately encrypted and there are adequate security measures to guard against unauthorized use.

Lupin Diagnostics takes User’s right to privacy very seriously and other than as specifically stated in this Privacy Statement. Lupin Diagnostics may disclose User’s information in the event it is required to be done by law, including an enforcement agency, governmental official, legal authority or similar requirements or when Lupin Diagnostics, in its sole discretion, deems it necessary in order to protect its rights or the rights of others, to prevent harm to persons or property, to fight fraud and credit risk, or to enforce or apply the terms of use of such platform.

Lupin Diagnostics uses reasonable security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of Personal Data and restricts access of the same to Lupin Diagnostics’ employees only on need-to-know basis.

Users shall not host, display, upload, modify, publish, transmit, store, update or share any information that: (i) belongs to another person or is defamatory or invasive of another's privacy ii) infringes any patent, trademark, copyright or other proprietary rights; iii) violates any law for the time being in force; iv) contains software virus (v) is patently false and untrue, and is written or published in any form, with the intent to mislead or harass a person, entity or agency for financial gain or to cause any injury to any person.

In case Lupin Diagnostics comes across any User or third party, who has manipulated with the Personal Data stored in the platform, then Lupin Diagnostics shall be entitled to take appropriate action against such User or third party.

5. Collection of Location Data

We collect and process your location data (both approximate and/or precise location) to provide core app features. Specifically, this location data is used to:

5.1 Help you find the nearest Lupin Diagnostics centers or labs.

5.2 Enable real-time tracking of phlebotomists during home sample collection visits.

5.3 Ensure accurate address routing for healthcare services at your doorstep.

We do not share this location data with third parties for advertising purposes, and it is only accessed when necessary to perform these services.

6. Rights of Users

6.1 Right to Access – Users have the right to access their Personal Data. s.

6.2. Right to a Record

Individuals have the right to request a record of certain disclosures of their Personal Data made by Lupin Diagnostics. This record will include disclosures that Lupin Diagnostics is required to maintain as per applicable laws, prior to the date of the request, excluding disclosures made for providing the diagnostic or pathological services, disclosures made directly to the individual, or other disclosures exempt under applicable law. Requests for a record of disclosures must be submitted in writing. Lupin Diagnostics will respond to the request within timelines prescribed under law, or shall notify the individual if an extension is required.

6.3 Right to Request Restrictions - Individuals have the right to request restrictions on the uses and disclosures of their Personal Data. Lupin Diagnostics will consider the requests and inform the individual accordingly.

6.4 Request for Confidential Communications - Individuals can request that their information to be communicated to them through alternative means or at alternative locations. For instance, they may ask to receive communications at a different address or via email to ensure privacy.

6.5 Right to Amend - If individuals believe their Personal Data is incorrect or incomplete, they have the right to request amendments to their records.

7. Disclaimer

While booking the service through Lupin Diagnostics online platforms, User is directed to approved Payment Gateways which are digitally encrypted, thereby providing the highest possible degree of care as per current technology. These Payment Gateways are not controlled and/or managed and/or monitored by Lupin Diagnostics and hence Lupin Diagnostics shall not be responsible or liable for any loss or damage caused to the User in this regard.

While User visits the platform to view the Services provided, certain pop-up advertisements may appear on User’s Screen based on User’s activity on Internet. Lupin Diagnostics does not play any role in the same and shall not be responsible for the content of such pop-ups.

8. Spamming

Lupin Diagnostics does not condone "spamming". Spamming is defined as sending unsolicited e-mails, usually of a commercial nature, in large numbers and repeatedly to individuals with whom the sender has had no previous contact or who have not declined to receive such communications. Lupin Diagnostics may inform Users of its products, health, or other related information by alternate modes, whilst giving the User the choice of opting out of such service.

9. Links To Other Sites

This Privacy Statement applies only to Lupin Diagnostics’ Platform. Lupin Diagnostics may provide links to other websites, which Lupin Diagnostics believe may be of interest to its visitors. Lupin Diagnostics tries to ensure that such websites are of the highest standard. However, Lupin Diagnostics does not guarantee the standards of every website link it provides or be responsible for the contents of non- Lupin Diagnostics sites. The risk of accessing such websites is solely that of the User.

10. Grievances.

If the User would like to delete or amend his/her personal information, please mention "Deletion Request" or "Amendment Request", as applicable, in the subject line of your e-mail marked to customerconnect@lupindiagnostics.com . Also in case of any concerns/ questions/ disputes, Users may send out an email to customerconnect@lupindiagnostics.com. Lupin Diagnostics will do its best to respond to all reasonable requests in a timely manner.

The email mentioned above, may be changed by Lupin Diagnostics, from time to time by updating this Privacy Statement

11. Updates

Lupin Diagnostics aims to constantly improve the tools available to the User to manage the Personal Data that is provide to Lupin Diagnostics. Please refer to this page from time to time to review these and other new features or updates.

Lupin Diagnostics may modify this Privacy Statement from time to time, and will post the most current version on its platform and indicate at the bottom of the Statement when it was most recently updated

12. Consents

Consents will be obtained from the Users and parents/lawful guardians of minors/handicapped/ aged parent etc., or as caregiver (such as an employer) or using the Services of Lupin Diagnostics in accordance with applicable data protection laws.

Consents voluntarily provided by the User allows Lupin Diagnostics to collect, use, share and disclose User information and Personal Data for providing its services; to disclose the information to a third party engaged to secure and protect the information received, to market their service offerings, research and analytics, improve the platforms, and if required as part of reorganization or a sale of the assets of Lupin Diagnostics for the sole purpose of ensuring continuity of services.

If the User use the Services on behalf of someone else in (such a child, sibling) or as caregiver or (such as an employer), the User represents that the User has been authorized by such individual to (i) accept this Privacy Statement on his/her behalf, and (ii) to the collection, use and disclosure of such individual’s information as described in this Privacy Statement.

13. Miscellaneous

The Privacy Statement shall always be governed by Indian Laws and any dispute shall be subject to the exclusive jurisdiction of the Courts in Mumbai, India

Lupin Diagnostics endeavours to provide Services offered on the platform. Nonetheless, Lupin Diagnostics shall not be responsible for failure to provide any of its Service, due to any force majeure vents, such as (a) acts of God; (b) flood, fire, earthquake or explosion; (c) war, invasion, hostilities (whether war is declared or not), terrorist threats or acts, riot or other civil unrest; (d) government order or law; (e) actions, embargoes; (f) action by any governmental authority; (g) national or regional emergency; (h) strikes, labor stoppages or slowdowns or other industrial disturbances; (i) epidemic, pandemic; (j) emergency state; (k) shortage of adequate medical supplies and equipment; (l) shortage of power or transportation facilities; (m) major cyberattacks, network failures, and (n) other similar events beyond the reasonable control, or other cause(s) beyond the reasonable control of Lupin Diagnostics, not reasonably foreseeable, not caused by acts or omissions of Lupin Diagnostics.