Privacy Policy

Last updated: June 2026

CareBox is operated by Vowels Ventures Private Limited ("CareBox", "we", "us"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

Who we are

CareBox is a platform that connects people looking for diagnostic and healthcare services ("Patients") with verified diagnostic centres and labs ("Centres"). We act as a Data Fiduciary under the DPDP Act.

Information we collect

From Patients: the service or test you are looking for, your pincode/location, and your contact details (name and phone number) so a verified Centre can reach you. From Centres: business name, contact person, phone, email, service areas, and payment-related records for token purchases.

Why we collect it (purpose)

We collect this information only to connect Patients with relevant verified Centres, to let Centres respond with pricing, to operate the token and payment system for Centres, to prevent misuse and fraud, and to improve our service. We do not sell your personal data.

Sharing your information

To fulfil a Patient enquiry, we share the relevant details of that enquiry with the verified Centres matched to it, so they can respond. Centres may use these details only to respond to the enquiry. We may share data with service providers (such as our payment processor) strictly to operate the service, and where required by law.

How long we keep it (retention)

We keep personal data only for as long as it is needed for the purpose it was collected, or as required by law. When a lead or account is no longer active for an extended period, we take steps to delete or anonymise the associated personal data.

Your rights

Under the DPDP Act you have the right to access a summary of your data, to correct or update it, to request erasure, to nominate someone to act on your behalf, and to withdraw consent. To exercise any of these, contact our Grievance Officer (details below). We will respond within the timelines required by law.

Consent

By submitting an enquiry or using CareBox, you consent to the collection and use of your data as described here. You can withdraw consent at any time by contacting us; withdrawal does not affect processing already carried out.

Data security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse. No system is perfectly secure, but we work continuously to safeguard your information.

Grievance Officer

If you have any concern about your personal data, contact our Grievance Officer. Name and email are published on our Contact page.

Contact

Vowels Ventures Private Limited, office: 14 Ground Floor, Samman Bazar, Jangpura, New Delhi - 110014