Privacy policy

Who we are

TechFrien Healthcare Solutions (“TechFrien”, “we”) builds and supports Medara HMIS and related operational software. For the enquiry data you submit through this website, we are the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).

For patient data held inside a hospital’s Medara installation, the hospital is the Data Fiduciary and we act as a Data Processor on its written instructions. We do not use that data for our own purposes, and we never use it to train models or to market to patients.

What we collect on this website

• Enquiry form: the name, phone number, email address, organisation, area of interest, and message you choose to enter. Only one contact route — a phone number or an email — is required.
• Consent record: the fact that you ticked the consent box, and when.
• Anti-abuse signals: your IP address is held in server memory for up to 15 minutes to rate limit the form. It is not written to disk, not logged alongside your enquiry, and not used to identify you.
• Aggregate analytics: page views and referrers, collected without cookies and without any cross-site identifier. See “Cookies and analytics” below.

We do not ask for, and you should not send us, patient health information through this website’s form.

Why we use it, and on what basis

We use your enquiry details for one purpose: to reply to your enquiry, arrange a demonstration, and prepare a quotation. The legal basis is the consent you give when submitting the form. If we go on to work together, we process your business contact details to perform the resulting contract.

We do not use your details for unrelated marketing, and we do not add you to any list you did not ask for.

Who we share it with

We do not sell or rent personal data. We share it only with service providers who help us operate, each bound by contract and processing only what they need:

• our email delivery provider, to deliver your enquiry to our inbox;
• our hosting provider, to serve this website;
• our analytics provider, which receives no personal data (see below).

We disclose data to a public authority only where the law requires it of us.

Cookies and analytics

This website sets no advertising or tracking cookies and runs no cross-site trackers. Where analytics is enabled, we use a cookieless product that records aggregate page views and referrers with no personal identifier, no device fingerprint, and no data leaving India’s ordinary internet routing for profiling purposes. Because nothing personal is collected, there is no consent banner to click through.

How long we keep it

Enquiries that do not become customers are deleted within 24 months. Rate-limit records expire within 15 minutes. Where you become a customer, we keep contact and contract records for as long as the relationship lasts and then for the period tax and company law requires.

How we protect it

Data is encrypted in transit. Access is limited to the people who need it, under individual named accounts, and every access to a production system is logged. Our engineering and hosting practices are described on our security page.

Your rights

Under the DPDP Act you may ask us to:

• tell you what personal data of yours we hold and who we shared it with;
• correct or complete anything inaccurate;
• erase data we no longer need for the purpose you gave it for;
• withdraw your consent, at any time and as easily as you gave it;
• nominate another person to exercise these rights if you are unable to.

Write to contact@techfrien.com and we will respond within 30 days. If you are a patient asking about records held by a hospital that uses Medara, contact that hospital — they control the record, and we will support them in answering you.

Grievance officer

Grievance Officer
contact@techfrien.com
+91 82189 89943

If we do not resolve your complaint, you may escalate it to the Data Protection Board of India.

Children

This website is aimed at healthcare and business professionals. We do not knowingly collect personal data of children through it. Where a hospital records a child patient in Medara, the hospital handles that data under its own obligations and its own consent process.

Changes

If we change this policy we will update the date at the top of this page, and — where the change is significant and affects you — tell you directly.