Legal

Privacy Policy

This Privacy Policy explains what information OneCity Technologies Pvt Ltd ("OneCity," "we," "us") collects from visitors to onecity.biz, why we collect it, and what rights you have over it under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). This policy covers this marketing and information website only. If you become a customer of the OneCity Advanced Hospital ERP + CRM product, a separate data processing agreement governs how patient and hospital data is handled within that product — this policy does not cover that separately.

Information we collect

We collect information in three ways. First, when you fill out a contact or demo-request form, we collect what you provide directly — typically your name, hospital or organisation name, email address, phone number, and any message you include. Second, when you browse the site, we collect standard analytics information automatically through Google Analytics (GA4), including your approximate location (derived from IP address), device and browser type, pages visited, and time spent on the site. Third, if you click through to WhatsApp using the chat button on our site, you leave onecity.biz and interact directly with WhatsApp under WhatsApp's own privacy terms — we do not receive or store the content of that conversation on our own systems beyond what WhatsApp itself may share with our business account.

Why we collect it

We use contact and demo-request information to respond to your enquiry, schedule a demonstration, and follow up about our product — we do not use it for any purpose you haven't reasonably expected when submitting the form. We use analytics information in aggregate to understand which pages and content are useful to visitors, so we can improve the site over time; we do not use analytics data to individually identify or profile a specific visitor. We do not sell, rent, or trade any information collected through this site to third parties for their own marketing purposes.

Legal basis and consent

Under the DPDP Act, we process your personal data based on your consent, given either explicitly when you submit a form on this site, or through deemed consent where you voluntarily provide information for a purpose you would reasonably expect (such as providing your phone number when requesting a callback). You may withdraw consent at any time by contacting us using the details at the end of this policy; withdrawing consent does not affect the lawfulness of any processing already carried out before withdrawal.

Cookies and analytics

This site uses cookies set by Google Analytics (GA4) to measure site usage. These cookies do not, by themselves, identify you by name, and you can block or delete them at any time through your browser's privacy settings — doing so will not affect your ability to browse the site, though some analytics-dependent features may not function as intended. We do not currently use advertising or retargeting cookies on this site.

Where your data is processed

Google Analytics is operated by Google LLC, and analytics data collected through this site may be processed on servers located outside India, in accordance with Google's own data processing terms. Where we transfer personal data outside India, we do so only through service providers who maintain data protection standards consistent with the DPDP Act's requirements. Contact and demo-request information you submit directly to us is stored on infrastructure we control, hosted in accordance with our standard hosting and security practices.

How long we keep your information

We retain contact and demo-request information for as long as necessary to respond to your enquiry and for a reasonable period afterward in case you follow up, or as required to maintain our own business records — typically no longer than a few years from your last contact with us, unless you ask us to delete it sooner or applicable law requires longer retention. Analytics data is retained according to Google Analytics' own default retention settings, which we may adjust from time to time.

Your rights under the DPDP Act

As a data principal under the DPDP Act, you have the right to access the personal data we hold about you, request correction of inaccurate or incomplete data, request erasure of your data where it is no longer necessary for the purpose it was collected, and withdraw consent at any time. You also have the right to nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, and the right to file a complaint with us or, if unresolved, with the Data Protection Board of India. To exercise any of these rights, contact us using the details below.

Children's privacy

This website is intended for hospital administrators, healthcare professionals, and business decision-makers, and is not directed at or intended for use by children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data through this site, contact us and we will take steps to delete it.

Security

We take reasonable technical and organisational measures to protect the information we hold from unauthorised access, alteration, disclosure, or destruction. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security, but we work to maintain appropriate safeguards consistent with the sensitivity of the data we handle.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will update the "Updated on" date at the top of this page whenever we make a material change, and encourage you to review this page periodically.

Contact and grievance redressal

For any questions about this policy, to exercise your rights under the DPDP Act, or to raise a grievance about how your personal data has been handled, contact us at hello@onecitytechnologies.com or +91-89515-00340. We aim to acknowledge and address grievances within a reasonable timeframe consistent with DPDP Act requirements.