Privacy Policy

I, (i.e., the data principal), the user of the Website (available at: www.thoughtpudding.com/clients), have been provided with the Thought Pudding's Privacy Policy and Notice and Terms of Use, which are also available on its Website, and have understood the contents thereof.

I understand that the Privacy Policy and Notice mentioned in Paragraph 1 above provide information about how my personal and other data may be collected, used and disclosed by the Thought Pudding or its ecosystem partners.

I understand that my personal and other data may be collected only with my valid consent, and that it may be used or processed only in accordance with the Privacy Policy and Notice and Terms of Use issued by Thought Pudding.

I understand that my personal and other data may be shared across various entities within the Thought Pudding's ecosystem only with my consent, and for the following purposes:

• enable Thought Pudding to provide services through Call, Email, WhatsApp, SMS, and any other digital communication platforms related to the functionalities, product or contracted services, including security updates, when required or reasonable for their implementation;
• To manage my account and my registration as user of the service as well as my requests, as may be applicable, including publishing of the information on the Website. The personal data I provide can give access to various functionalities of the service that are available to me as a registered user;
• For internal record keeping purposes;
• Ensure that content from the Website, Apps and Newsletters is presented in the most effective manner for me and for my device to achieve the most user friendly navigation experience;
• Provide me with marketing information about Thought Pudding and their services;
• To provide me with news, special offers, and general information about other product or services and events which Thought Pudding offer that are related or similar to those that I have already purchased or enquired about unless I have opted not to receive such information;
• notify me about changes to the Website, Apps and Newsletters and the services;
• To carry out Thought Pudding's obligations arising out of the Terms of Use;
• To defend Thought Pudding's servers against malicious attacks;
• For commercial purposes and in an aggregated or non-personally identifiable form for research, statistical analysis and business intelligence purposes;
• To process billing and payment, including sharing with third party payment gateways in connection with Website and/or products and services;
• To improve and maintain Thought Pudding's Website and their services (for example, Thought Pudding tracks information entered through the "Search" function; this helps it determine which areas of the Website users like best and areas that it may want to enhance; Thought Pudding also will use for troubleshooting purposes, where applicable); and/or
• To resolve disputes, to protect Thought Pudding and other users of the Website and services, and to enforce their Terms of Use.

By accessing and using the Website and/or verifying your contact number, you have explicitly consented to receive all above stated communications (through call, SMS, email or other digital and electronic means) from Though Pudding and/or its authorized representatives, even if your contact number is registered under the DND / NCPR list under the Telecom Commercial Communications Customer Preference Regulations, 2018. For this purpose, the required information may be shared with third-party service providers or any affiliates, group companies, and their authorized agents.

I understand that I have certain rights that I enjoy as a data principal over my personal data, in relation to its collection, use and processing. These rights relate to confirmation and access, correction and erasure, objection of disclosure, and portability of my personal data, as may be applicable. These rights are available to me in the manner set out in the Thought Pudding's Privacy Policy and Notice and terms of use.

I understand that the terms of the Privacy Policy and Notice and terms of use may change, and I will be notified of the same before or at the time any further collection, use or processing of my personal data takes place.

I understand that I have the right to revoke my consent at any time in the manner specified under the Privacy Policy and Notice.

Having read and understood the points mentioned above, I consent to allowing Thought Pudding to collect, use, share or process such personal and other data (including without limitation business data) as may be necessary to provide services availed by me.

I understand and agree to Thought Pudding's providing these services in a manner that is in accordance with the Terms of Use, Privacy Policy and Notice, any information security policy, data archival and retention guidelines or any other policy that may be notified from time to time for the implementation of these abovementioned policies, and any other law that may be applicable.

M/s Thought Pudding, at 402, 4th floor, Sorrento Building, High Street, Hiranandani Gardens, Powai, Mumbai, (hereinafter also referred to as "Thought Pudding" or "We" or "Our") operates the website at www.thoughtpudding.com/clients ("Website" or "Site" or "Platform"). We respect the privacy of each user of the Site (referred to as "you" or "a user"), whether its your first time, or if you've visited our Site previously. This Privacy Statement gives you specific information about how we protect your privacy, how we treat information we collect on the Site that identifies an individual user ("Personal Information"), and how we use aggregated information.

Thought Pudding does not undertake collection of Personal Data for unless Thought Pudding has obtained the prior consent of the data subject. By registering for or using the site, you signify your acceptance of this privacy statement. If you do not agree to this privacy statement, you cannot use the site. In such an event please refrain from sharing any personal information with us.

We reserve the right to modify this Statement at any time by posting a notice on the Site's home page. (If we consider it appropriate, we may also provide additional notice of significant changes.) Your use of the Site after the date of the last modification listed at the end of this Privacy Statement indicates to us that you agree to the changes.

This WEBSITE is a platform that You may use for the following services, inter alia,

• Registration to receive services, maintenance of my health profile/records, identification, communication, information on new services and offers, taking feedback, help and complaint resolution, other customer care related activities or issues relating to the use of my services;
• Creation and maintenance of electronic health records for use by Though Pudding and it group companies and affiliates, to provide relevant services;
• Receiving personalized announcements/offers;
• Customizing suggestions for appropriate medical products and services offered by Though Pudding and affiliates;
• Research for the development and improvement of our products and services including our treatment protocols;
• Disclosure as required to government authorities in compliance with applicable law;
• Investigating, and resolving any disputes or grievances; and
• Any purpose(s) required by applicable law.

We may collect personal information from the individuals who want to register on our Platform www.thoughtpudding.com/clients. All the information provided to a Website by a user, including personal information or any sensitive personal data or information, is voluntary. Individuals are required to create an account to be able to access certain portions of our Platform. Individuals, if and when they create and use an account with Thought Pudding need to register on the Platform, they will be required to disclose and provide to Thought Pudding certain information.

For better experience, while using our Service, we may require you to provide us with certain personally identifiable information, such as,

• Patient/Patient Attender/Caregiver/Doctor/Health Care Professional Name,
• Birth date/age,
• Gender,
• Address (including country and pin/postal code),
• Phone number/mobile number,
• Email address,
• Physical, physiological and mental health condition, provided by You and/or your Health Care Professional,
• Personal medical records and history,
• Valid financial information at time of purchase of product/service and/or online payment,
• User details as provided at the time of registration or thereafter,
• Records of interaction with ThoughtPudding representatives,
• Your usage details such as time, frequency, duration and pattern of use, features used and the amount of storage used,
• Master and transaction data and other data stored in Your user account,
• Internet Protocol address, cookie data, browser type, browser language, referring URL, files accessed, errors generated, time zone, operating system and other visitor details collected in Our log files,
• Any other information that is willingly shared by You (collectively referred to as "Personal Information").

We may also request your WhatsApp number in the event you want to use our services via WhatsApp. In certain specific cases once you have booked a call with one of our associates, the associates may ask for certain information to offer productive advice. The information that we request will be retained by us and used as described in this privacy policy. Please note that any information collected by us may be shared with the relevant service provider to enable us to provide you with the relevant Service.

When you use the Website, Apps, Newsletters and interact with our services, we may use technology such as that provided by Mailchimp, SendGrid, Google Analytics and other third-party service providers to collect information about your visit to our Website and/or Newsletters. In essence, these tools enable us to analyse how you and others interact with our Website, Apps and Newsletters. The information we collect may include:

• the type and version of browser you use to access our Website/newsletter;
• the number of sessions per day and the time spent for each session and on each page;
• time and date of your visit;
• Internet Protocol Address;
• The service that you visit;
• the type of device (e.g. iPhone) and operating system (e.g. iOS) you are using;
• if you opened our newsletters;
• user preferences;
• which pages you visited; and/or

We may also collect information that your browser sends whenever you visit our service or when you access the service by or through a device.

THIS IS WHAT WE DO WITH THE INFORMATION WE COLLECT ABOUT YOU – THIS MAY INCLUDE USE OF INFORMATION OTHER THAN PERSONALLY IDENTIFIABLE INFORMATION.

We use the information you provide to us to:

• enable us to provide the services through Call, Email, WhatsApp, SMS, and any other digital communication platforms related to the functionalities, product or contracted services, including security updates, when required or reasonable for their implementation;
• To manage your account and your registration as user of the service. The personal data you provide can give access to various functionalities of the service that are available to you as a registered user;
• For internal record keeping purposes;
• ensure that content from our Website, Apps and Newsletters is presented in the most effective manner for you and for your device to achieve the most user-friendly navigation experience;
• provide you with marketing information about us and our services;
• To provide you with news, special offers, and general information about other product services and event which we offer that are related or similar to those that you have already purchased or enquired about unless you have opted not to receive such information;
• To manage your request or to offer different product or services and to attend and manage your request to us;
• notify you about changes to the Website, Apps and Newsletters and the services;
• carry out our obligations arising out of the Terms of Use;
• defend our servers against malicious attacks;
• To process billing and payment, including sharing with third party payment gateways in connection with Website and/or products and services;
• To improve and maintain our Website and our services (for example, we track information entered through the "Search" function; this helps us determine which areas of our Website users like best and areas that we may want to enhance; we also will use for trouble-shooting purposes, where applicable); and/or
• To resolve disputes, to protect ourselves and other users of our Website and services, and to enforce our Terms of Use;

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. Cookies are typically stored on your computer's hard drive. Information collected from cookies is used by us to evaluate the effectiveness of our Site, analyze trends and administer the Platform. The information collected from cookies allows us to determine such things as which parts of our Website are most visited and what difficulties our visitors may experience in accessing our Website. With this knowledge, we can improve the quality of your experience on the Platform by recognizing and delivering more of the most desired features and information, as well as by resolving access difficulties. We may also use cookies and/or a technology known as web bugs or clear gifs, which are typically stored in emails to help us confirm your receipt of, and response to, our emails and to provide you with a more personalized experience when using our Site.

You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

We may employ third-party companies and individuals and share your personal information in the following situations:

• To facilitate our Service;
• To provide the Service on our behalf;
• To perform Service-related services; or
• To assist us in analyzing how our Service is used.

We want to inform users of this Service that these third parties may have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. Our service provider(s) will place cookies on the hard drive of your computer and will receive information that we select that will educate us on such things as how visitors navigate around our Site, what products are browsed and general transaction information. Our service provider(s) will analyze this information and provide us with aggregate reports. The information and analysis provided by our service provider(s) will be used to assist us in better understanding our visitors' interests in our Site and how to better serve those interests. The information collected by our service provider(s) may be linked to and combined with information that we collect about you while you are using the Platform. Our service provider(s) is/are contractually restricted from using the information they receive from our Site for any other purpose than to assist us. If you want to avoid using cookies altogether, you can disable cookies in your browser. However, disabling cookies might make it impossible for you to use certain features of our Website or services, such as logging in to your account or making transactions. Your use of our Website or Service with a browser that is configured to accept cookies constitutes an acceptance of our and third-party cookies.

Our privacy policy does not cover and apply to other third-party service providers. Thus, you may check with your advisor on the respective privacy policies of these third parties for more detailed information. It may include their practices and instruction on how to opt out of certain options. You can choose to disable cookies through your individual browser options. To know more about cookie management with specific web browser, it can be found at the browser's respective websites.

The platform may include hyperlinks to other websites, websites, content or resources. We have no control over any websites or resources which are provided by companies or persons other than us. You acknowledge and agree that we are not responsible for the availability of any such external sites or resources, and do not endorse any advertising, services/products or other materials on or available from such platform or resources. You acknowledge and agree that we are not liable for any loss or damage which may be incurred by you as a result of the availability of those external sites or resources, or as a result of any reliance placed by you on the completeness, accuracy or existence of any advertising, products or other materials on, or available from, such websites or resources. These external websites and resource providers may have their own privacy policies governing the collection, storage, retention and disclosure of your personal information that you may be subject to. We recommend that when you enter such an external website, you review their privacy policy. For the avoidance of doubt, we have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We take reasonable steps that are designed to keep your personal data reviewed, complete and up to date for the purpose for which it is collected and used and to ensure that processing of your personal data complies with applicable laws. Some of the rights which you have in relation your personal data are mentioned as under:

• Right to access: You have right to request copies of your personal information. We may charge you a small amount of fee for this, if required.
• The right to rectifications: You have the right to request that we correct any information that you believe is incorrect. You also have the right to request that we complete the information that you believe is incomplete.
• Right to Edit/Delete: You have the right to request that your information may be edited/deleted under certain specific situations.
• Right to restrict processing: You have the right to request that we restrict the usage of your personal data under certain situations.
• Right to object to processing: You have the right to object to our processing of your personal information under certain conditions.
• Right to data portability: You have right to request that we transfer the data that we have collected to another organization or directly to you under certain situation.

Please make such request from your registered email ID by writing to us on hello@thoughtpudding.com, we will revert back within 60 working days. Please note that these rights shall always remain subject to the regulatory requirements, if any. Under certain regulations, may be required to store certain information for compliance, audits, and other such purposes and therefore, the aforementioned right shall always remain subject to compliance with the relevant laws applicable to us.

• You understand that You have the right to access your personal information, and request updation, correction and deletion of such information, but not information processed in de-identified form, or any information which is retained by Though Pudding to comply with applicable law.
• You understand that You are free to not share any health, financial or other information that You deem confidential. You understand that You may withdraw consent for Thought Pudding to use data that You have already provided to it. You understand that if You exercise these rights, Though Pudding can limit or deny the provision of services for which it considers such information necessary.
• You understand that You may contact the grievance email of Though Pudding for any questions or for the exercise of these rights and for any other grievances related to your personal information.
• You hereby give my consent to Though Pudding to collect, use, store, share, and / or otherwise process my personal information in accordance with the Privacy Policy. Use of your data associated with your treatment can be shared with research scientists without disclosing Your identity. This research will not benefit You financially but may help in better understanding of diseases and better treatment for future patients. You have the option to disallow such research use of data. You also agree to receive SMS / WhatsApp alerts and calls in connection with Your healthcare.
• You agree to the above on Your own free will after understanding fully the contents and the explanations given to You by Though Pudding team including the doctors.

If you are coming from United State of America or European union or any other region with laws governing law collection and use, please note that you are agreeing to the transfer of your information to us and processing globally. By providing your information, you agree to any transfer or processing in accordance with this privacy policy. The onus of compliance with the requisite laws applicable in a specific country will be on the person accessing our services.

We will hold onto your personal data only for as long as is necessary for the purpose set out in this privacy policy. We will retain and use your personal data only to the extent necessary to comply with our legal obligations, resolve dispute, and enforce our legal agreement and policies. If you wish to cancel your account or request that we no longer use your information to provide you services, contact us through hello@thoughtpudding.com. It is being re-iterated that we will retain your information for as long as your account with the services is active and as needed to provide you the services. After a period of time, your data may be anonymized and aggregated, and then may be held by us as long as necessary for us to provide our services effectively, but our use of the anonymized data will be solely for analytic purposes.

Your information, including personal data is processing at the company operating offices and in any other places where the parties involved in the processing of the data are located in. This means the information may be transferred to and maintained on computer located outside of your state, province or country or government jurisdiction where the data protection laws may differ than those from your jurisdiction. Your consent to this privacy policy followed by your submission of such information represents your agreement to that transfer. The company will take all steps that are reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy and no transfer of your personal data will take place to an organization or a country unless there are adequate control in place including security of your data and personal information.

We may disclose your information including Personal Information if: (i) We reasonably believe that disclosure is necessary in order to comply with a legal process (such as a court order, search warrant, etc.) or other legal requirement of any governmental authority, (ii) disclosure would potentially mitigate our liability in an actual or potential lawsuit, (iii) reasonably necessary to enforce this Privacy Policy, our Terms of Use etc. (iv) disclosure is intended to help investigate or prevent unauthorized transactions or other illegal activities, or (v) necessary or appropriate to protect our rights or property, or the rights or property of any person or entity.

Your request for services may be shared with third party websites with whom we have a contractual relationship in order to provide your request with maximum exposure. The post on the third- party website will include the details of your request, including your location, and other contact details. Interested bidders, however, will be able to click on your request on such third-party site, and will be directed to our Website where they will have access to your contact details (Partial or complete), as would any other service provider on our Website interested in bidding on your request.

Any individual who suspects that a personal data breach has occurred as a result of the theft or exposure of personal data must immediately notify the Thought Pudding immediately at hello@thoughtpudding.com by providing a description of what occurred. They will investigate all reported incidents to confirm whether or not a personal data breach has occurred. If a personal data breach is confirmed, Thought Pudding will follow the relevant authorized procedure based on the criticality and quantity of the personal data involved.

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Our service does not address anyone under the age of 18. We don't knowingly collect personally identifiable information from anyone below the age of 18. If you are parent or guardian and you are aware that your child has provided us with the personal data, you may please contact us. If we become aware that we have collected personal data from anyone under the age of 18 without verification of parental permission, we will take reasonable steps to remove that information from our records.

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page. You are advised to review the privacy policy periodically for any changes.

From time to time, we may desire to use personal information for the users not previously disclosed in our privacy policy. If our practice changes regarding previously collected personal information in a way that would be materially less restrictive than stated in the version of this privacy policy in effect at the time we collected the information, we will make reasonable efforts to provide notice and obtain consent to any such uses as may be required by law.

You further acknowledge that the platform may contain information which is designated confidential by us and that you shall not disclose such information without our prior written consent.

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at hello@thoughtpudding.com.

Except as otherwise expressly included in this privacy policy, this document only addresses the use and disclosure of information we collect from you. To the extent that you disclose your information to other parties, whether they are on our platform or on other sites throughout the Internet, different rules may apply to their use or disclosure of the information you disclose to them. To the extent that we use third party advertisers, they adhere to their own privacy policies. Thought Pudding does not control or endorse the content, messages or information found in any services and, therefore, Though Pudding specifically disclaims any liability with regard to the services and any actions resulting from your participation in any services, and you agree that you waive any claims against Thought Pudding relating to same, and to the extent such waiver may be ineffective, you agree to release any claims against Though Pudding relating to the same.

In accordance with Information Technology Act 2000 and rules made there under and the Consumer Protection (E-Commerce) Rules, 2020, the contact details of the Grievance Officer are provided below: