Privacy & Patient Consent Policy
Updated: June 2026 | Compliant with DPDP Act, 2023
Summary: DNA Labs India collects only the minimum personal data necessary to provide diagnostic services. We never sell patient data. You have the right to access, correct, and request deletion of your personal information at any time.
1. Information We Collect
To provide diagnostic testing services, we collect:
- Personal Identifiers: Name, mobile number, email address, age, gender
- Health Information: Clinical indications, medical history, test results, genetic data
- Sample Information: Specimen type, collection details, barcode tracking
- Consent Records: Digital records of your explicit consent for each service
2. How We Use Your Data
Your data is used exclusively for:
- Processing and delivering your diagnostic test results
- Communicating with you about your test status and results
- Maintaining medical records as required by law
- Internal quality control and laboratory accreditation requirements
- De-identified data may be used for research with additional consent
3. Your Rights Under DPDP Act, 2023
Right to Consent
You provide explicit consent before any data collection or processing
Right to Access
Request a copy of all personal data we hold about you
Right to Erasure
Request deletion of your personal data, subject to legal retention requirements
4. Data Retention
We retain your data only as long as necessary:
- Test Results: 7 years (as per medical records regulations)
- Personal Information: Until you request deletion
- Consent Records: Permanent (for legal compliance)
- Audit Logs: 10 years (regulatory requirement)
5. Data Security
We implement strict security measures including encryption at rest and in transit, access controls, regular security audits, and immutable audit trails for all data access and modifications.
6. Third-Party Sharing
We do not sell or share your personal data with third parties except:
- When you explicitly consent to share results with your referring physician
- As required by law or court order
- With ABDM (Ayushman Bharat Digital Mission) when you link your ABHA ID
7. How to Exercise Your Rights
To request data access, correction, or deletion:
- 📧 Email: privacy@dnalabsindia.com
- 📞 Call: +91 98765 43210 (ask for Data Protection Officer)
- 📝 Write to: Data Protection Officer, DNA Labs India, Vashi, Navi Mumbai - 400703
We respond to all data requests within 72 hours as mandated by DPDP Act.
8. Updates to This Policy
We will notify you of any material changes to this privacy policy via SMS or email. Continued use of our services after changes constitutes acceptance of the updated policy.