Privacy Policy

This Privacy Policy explains how DoubleSure collects, uses and protects personal data when you use www.doublesure.health or contact us. DoubleSure is the healthcare growth division of PeopleApps Technologies (a proprietorship firm), C-11, 202, C Block, Sector 10, Noida, Uttar Pradesh 201301, India. We follow the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it.

1 Who this policy covers

This policy applies to visitors to our website and to doctors, clinics, hospitals and other organisations that contact us or engage our services. Our services are meant for healthcare professionals and businesses. The website is not directed at children, and we do not knowingly collect personal data from anyone under 18.

2 Personal data we collect

Data you give us:

• When you fill in a contact, consultation or free-audit form: your name, phone number, email address, clinic or hospital name, city, speciality, website or Google Business Profile link, and any message you write.
• When you message or call us on WhatsApp or phone: your number, name as shown on your account, and what you tell us.
• When you become a client: billing details, GST number, and the business information needed to deliver the service.

Data collected automatically:

• Usage data through Google Analytics (via Google Tag Manager): pages visited, time on page, approximate location (city level), device, browser, and how you reached the site.
• Security data through Google reCAPTCHA on our forms, which checks whether a form is filled in by a person or a bot.

3 How we use your data

• To respond to your enquiry and prepare any audit or proposal you request.
• To deliver, bill and support services you engage us for.
• To send you information related to your enquiry or engagement. You can ask us to stop at any time.
• To understand how visitors use the site and improve it.
• To protect the site from spam and misuse.
• To meet legal, tax and accounting obligations.

We process your data on the basis of your consent, which you give when you submit a form or contact us, or where the DPDP Act otherwise permits, such as for legal compliance. You can withdraw consent at any time by writing to us (section 9). Withdrawal does not affect processing already done.

4 Cookies and similar technologies

Our site uses cookies set by Google Analytics and Google reCAPTCHA. Pages that show YouTube videos or Google Maps load content from Google, which may set its own cookies.

You can block or delete cookies in your browser settings. The site will still work, although forms may ask for an extra check.

5 Who we share data with

We do not sell or rent your personal data. We share it only with:

• Service providers who help us run the business: Hostinger (website hosting and doublesure.health email), Google (peopleappstech.com email, Analytics, Tag Manager, reCAPTCHA), and WhatsApp if you contact us there. They process data on our instructions or under their own privacy terms.
• Professional advisers such as accountants and lawyers, where needed.
• Government or law enforcement authorities when the law requires it.

6 Data we handle for our clients

When we build websites, manage profiles or provide DPDP compliance services for a clinic or hospital, that client decides why and how its patients' or visitors' data is used. In those cases the client is the Data Fiduciary and DoubleSure acts as a Data Processor, working only under the client's written instructions and contract. Questions about that data should go to the clinic or hospital first.

7 Where your data is stored

Your data is stored with our hosting and software providers (Hostinger). Any transfer outside India follows the DPDP Act and any restrictions notified by the Government of India.

8 How long we keep your data

• Enquiries that do not become clients: up to 24 months from our last contact, then deleted.
• Client records: for the length of the engagement and as long as tax and accounting law requires after it.
• Analytics data: under the retention setting in our Google Analytics account.

We delete data earlier if you ask us to and the law does not require us to keep it.

9 Your rights

Under the DPDP Act you can:

• Ask for a summary of the personal data we hold about you and how we use it.
• Ask us to correct, complete or update it.
• Ask us to erase it, where we no longer need it or you withdraw consent.
• Withdraw your consent.
• Nominate another person to exercise these rights if you die or become unable to.
• Raise a grievance with us, and if you are not satisfied with our answer, complain to the Data Protection Board of India.

To use any of these rights, contact our Grievance Officer (section 11). We may need to confirm your identity before acting on a request, and we will respond within the time the DPDP Act and its rules set.

10 How we protect your data

PeopleApps Technologies holds ISO/IEC 27001:2022 certification for information security management. We use HTTPS across the site, limit access to personal data to staff who need it, and require our service providers to protect it.

No online system is fully secure, so we cannot guarantee absolute security. If a breach affects your data, we will inform you and the Data Protection Board as the law requires.

11 Grievance Officer and contact

For any privacy-related request or complaint, contact our Grievance Officer:

12 Changes to this policy

We may update this policy when our practices or the law change. The "Last updated" date at the top shows the latest version. For significant changes, we will put a notice on the website.