Privacy Policy
Last updated: 18 July 2026 · Effective from: 18 July 2026
This Privacy Policy explains how MediNeura Technologies Private Limited ("MediNeura", "we", "us" or "our") collects, uses, discloses and safeguards personal information when you visit medineura.com (the "Website"), contact us, request a demonstration, apply for a role, or otherwise interact with our marketing activities.
1. Who we are
MediNeura Technologies Private Limited is the data controller responsible for the personal information described in this policy. We build healthcare technology — electronic medical records, clinical documentation, laboratory, pharmacy, billing and analytics tools — for hospitals, clinics, homecare providers, rehabilitation centres, long-term care facilities, medical universities and healthcare enterprises.
For any privacy question, or to exercise a right described in section 10, write to info@medineura.com with "Privacy" in the subject line.
2. Information we collect
2.1 Information you give us
- Contact and enquiry details — your name, work email address, telephone number, organisation, role, care setting, region and the content of your message when you complete a form on the Website or email us.
- Demonstration and sales information — details about your facilities, current systems, scale of operations and requirements, shared during the evaluation process.
- Recruitment information — your CV, work history, education, portfolio, references and any information you volunteer when you apply for a role.
- Partnership and investor enquiries — your name, organisation, contact details and correspondence.
2.2 Information collected automatically
- Technical data — IP address, browser type and version, operating system, device type, screen size, language and time zone.
- Usage data — pages visited, time spent, links clicked, referring website and search terms that brought you to us.
- Cookie data — identifiers set by us or by analytics providers, as described in section 5.
2.3 What we ask you not to send
We do not knowingly collect special category or sensitive personal data through this Website. Please never submit patient-identifiable information, clinical records or health data through our contact forms. If you need to share such information during an evaluation or procurement process, we will agree a secure channel with you first.
3. How we use information
| Purpose | What this involves |
|---|---|
| Responding to enquiries | Replying to your message, arranging and delivering a demonstration, answering technical and clinical questions. |
| Sales and account management | Preparing proposals, managing procurement, maintaining our customer relationship records. |
| Service communications | Sending information you have requested, and material updates relevant to an existing relationship. |
| Marketing | Sending occasional product news where you have consented or where permitted under applicable law. You can unsubscribe at any time. |
| Recruitment | Assessing applications, arranging interviews, and — with your permission — keeping your details for future openings. |
| Website improvement | Understanding which pages are useful, diagnosing faults, improving performance and accessibility. |
| Security and fraud prevention | Detecting and preventing abuse of our forms and infrastructure, including automated spam. |
| Legal compliance | Meeting statutory, regulatory, tax and accounting obligations, and establishing or defending legal claims. |
We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not sell personal information.
4. Legal bases for processing
Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:
- Legitimate interests — responding to business enquiries, operating and securing our Website, and marketing to business contacts, balanced against your rights and freedoms.
- Consent — non-essential cookies and analytics, and marketing emails where consent is required. You may withdraw consent at any time without affecting prior processing.
- Performance of a contract — steps taken at your request before entering into an agreement, and administration of an agreement once signed.
- Legal obligation — where we must retain or disclose information to comply with applicable law.
Where Indian law applies, we process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under it, on the basis of your consent or a legitimate use recognised by that legislation.
5. Cookies and similar technologies
| Type | Purpose | Consent needed |
|---|---|---|
| Strictly necessary | Page delivery, security, load balancing and core functionality. | No |
| Analytics | Aggregated statistics on how the Website is used, so we can improve it. | Yes, where required |
| Preference | Remembering choices such as language or region. | Where required |
You can control or delete cookies through your browser settings. Blocking strictly necessary cookies may affect how parts of the Website function. We honour Global Privacy Control and similar browser-level opt-out signals where technically feasible.
6. How we share information
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We disclose information only in the following circumstances:
- Service providers — hosting, email delivery, customer relationship management, analytics, applicant tracking and IT support providers who process data on our instructions under written contracts containing confidentiality and data-protection obligations.
- Professional advisers — lawyers, auditors, insurers and accountants, where necessary and subject to professional duties of confidence.
- Corporate transactions — in connection with a merger, acquisition, financing or sale of assets, subject to appropriate confidentiality protections.
- Legal requirements — where disclosure is required by law, court order or a valid request from a competent authority, or where necessary to protect our rights, safety or property or those of others.
7. International transfers
MediNeura serves customers across the United States, Europe, the Middle East, Asia and Africa, and operates from India. Your personal information may therefore be transferred to, stored in, or accessed from countries other than your own, including countries whose data-protection laws differ from those in your jurisdiction.
Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum where relevant, together with supplementary technical and organisational measures. A copy of the relevant safeguards is available on request from info@medineura.com.
8. Data retention
| Category | Typical retention period |
|---|---|
| Website enquiries that do not lead to a relationship | 24 months from last contact |
| Sales and customer correspondence | Duration of the relationship plus 7 years |
| Unsuccessful job applications | 12 months, or longer with your consent |
| Marketing contact records | Until you unsubscribe, then a suppression record is kept |
| Website analytics | Up to 26 months, in aggregated or pseudonymised form |
| Server and security logs | Up to 12 months |
We may retain information for longer where required to comply with a legal obligation or to establish, exercise or defend legal claims. When information is no longer needed, it is securely deleted or irreversibly anonymised.
9. Security
We maintain administrative, technical and physical safeguards designed to protect personal information against unauthorised access, alteration, disclosure or destruction. These include encryption of data in transit using TLS, encryption of data at rest, role-based access controls, the principle of least privilege, multi-factor authentication for administrative access, network segmentation, logging and monitoring, vendor due diligence, and regular review of our security practices. Our staff receive privacy and security training, and access to personal information is limited to those who need it to perform their role.
No method of transmission over the internet or method of electronic storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. If we become aware of a personal data breach affecting your information, we will notify you and the relevant supervisory authorities where required by law and within the timeframes the law prescribes.
10. Your rights and choices
Depending on where you live, you may have some or all of the following rights:
- Access — to be told whether we hold personal information about you and to receive a copy.
- Rectification — to have inaccurate or incomplete information corrected.
- Erasure — to ask us to delete personal information where there is no continuing lawful reason to keep it.
- Restriction — to ask us to limit how we use your information in certain circumstances.
- Objection — to object to processing carried out on the basis of legitimate interests, and to object to direct marketing at any time.
- Portability — to receive certain information in a structured, commonly used, machine-readable format.
- Withdraw consent — where processing is based on consent, without affecting the lawfulness of earlier processing.
- Nomination and grievance redressal — under Indian law, to nominate another person to exercise your rights and to have a grievance addressed.
- Non-discrimination — we will not treat you differently for exercising any of these rights.
To exercise a right, email info@medineura.com. We will respond within the period required by applicable law and may need to verify your identity first. You also have the right to complain to your local supervisory authority; we would appreciate the chance to address your concern first.
11. Platform data
When a healthcare organisation uses the MediNeura platform, that organisation determines what data is entered and for what purpose. In those circumstances:
- Our customer is the controller of the data and MediNeura acts as a processor or service provider.
- We process platform data only on documented instructions from our customer, as set out in the service agreement and associated data processing terms.
- We do not use platform data for our own marketing purposes, and we do not sell it.
- If you are a patient, resident, student or family member and wish to exercise rights over your health record, please contact the healthcare provider or facility that holds it. They are best placed to help, and we support them in responding.
12. Recruitment data
Applications sent to careers@medineura.com are used solely to assess your suitability for the role you applied for and to administer the hiring process. We share application details internally only with those involved in the decision. If you are unsuccessful, we keep your details for 12 months in case a suitable role arises, unless you ask us to delete them sooner. Any background or reference checks are carried out only where lawful, relevant to the role, and with prior notice to you.
13. Children
The Website is intended for healthcare organisations and business audiences and is not directed at children. We do not knowingly collect personal information from children through the Website. Student health information processed within MediCampus is handled on behalf of the institution under our customer agreements and applicable law, not under this policy. If you believe a child has provided us with personal information through the Website, contact us and we will delete it.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The "Last updated" date at the top shows when it was last revised. Where changes are material, we will provide additional notice — for example, a prominent notice on the Website or an email to contacts on record.
15. How to contact us
MediNeura Technologies Private Limited
General and privacy enquiries: info@medineura.com
Careers and recruitment privacy: careers@medineura.com
Website: medineura.com
Please mark privacy correspondence "Privacy Request" so it reaches the right team quickly.