Privacy Policy | Care Onco Biotech

This policy explains what personal data we collect when you visit careonco.ai or contact us, why we use it, who we share it with and the choices you have.

The website is run by CareOnco Biotech Private Limited (“Care Onco Biotech”, “we”, “us”), with its registered office at S-70, Ground Floor, Panchsheel Park, New Delhi 110017, India, and its office at A301, 3rd Floor, The Platina, Gachibowli–Miyapur Road, Gachibowli, Hyderabad, Telangana 500032, India. For personal data processed through this website, we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

This policy is available in Hindi on request: email info@careonco.ai.

What this policy covers

This policy covers the careonco.ai website, its contact form and emails you send to us. It does not cover samples, test data or reports processed through TEPScan™ by partner laboratories. That data is handled under separate agreements with the laboratory or healthcare provider involved, and they will give you their own privacy notice.

The website has no account sign-up and no shop; the only form is the contact form. We do not ask for health information through the website. Please do not send us medical records or health details through the form or by email.

What we collect

When you use the contact form

The form asks for your name, work email, organisation, country and the capacity you are contacting us in (for example investor or laboratory partner), plus an optional message. It is sent to our inbox as an email, together with the date and time you sent it and your agreement to this policy. The form sets no cookies.

When you email us

If you write to info@careonco.ai, we receive your name, email address and anything you include in your message, such as your organisation, role or phone number.

When you browse the site

Technical data. Like any website, our hosting provider receives your IP address, browser type, the page requested and the time of the request. This is needed to deliver the site and protect it from abuse.
Analytics, only if you agree. If you click “Accept” on the cookie banner, Google Analytics records the pages you view, how you arrived, your device and browser type and your approximate location (city or country). If you click “Reject” or ignore the banner, Google Analytics does not load.
Privacy-friendly visit counts. We use Cloudflare Web Analytics to count page views. It sets no cookies and does not track you across sites.
Your cookie choice. We store your Accept or Reject choice in your browser so we do not ask again on every page.

The Cookie Policy lists each cookie and browser storage item in detail.

Why we use it

To reply to your enquiry and follow up on partnership, laboratory, investor or media conversations you have started with us. For the contact form, we rely on the consent you give by ticking its consent box. For emails you send us on your own initiative, we rely on the fact that you chose to give us the data for that purpose.
To understand which pages are useful and improve the site. For Google Analytics we rely on your consent, which you can withdraw at any time.
To keep the site secure and working, and to meet legal obligations.

We do not sell personal data, use it for advertising or make automated decisions about you.

Who we share it with

We share personal data only with the service providers below. Cloudflare, Resend and Google Workspace process it on our behalf. Google also uses the data it receives under its own privacy policy.

Cloudflare, Inc.: website hosting, security and cookieless visit counts.
Google LLC: Google Analytics, only if you accept analytics cookies.
Resend, Inc.: delivers contact form enquiries to our inbox.
Google Workspace (Google LLC): our email service, which stores the emails and enquiries you send us.

We may also disclose data where required by law, a court or a government authority, or to protect our rights or the safety of others.

Transfers outside India

Some of these providers store or process data outside India, including in the United States and the European Union. We transfer data only to countries not restricted by the Government of India under the DPDP Act, and we choose providers with recognised security standards.

How long we keep it

Emails and contact form enquiries: for as long as needed to deal with your enquiry and any relationship that follows, then deleted, unless the law requires us to keep them longer.
Google Analytics data: for the retention period set in our Google Analytics account (no more than 14 months), then deleted automatically by Google.
Your cookie choice: 12 months in your browser, after which we ask again.
Hosting logs: for the short periods Cloudflare keeps them for security and operations.

How we protect it

The site is served only over encrypted HTTPS connections. Access to our email and analytics accounts is limited to the people who need it. No system is completely secure, but if a breach affects your personal data we will tell you and the Data Protection Board of India as the DPDP Act requires.

Your rights

Under the DPDP Act you can ask us to:

give you a summary of the personal data we hold about you and how we use it, and tell you who we have shared it with;
correct, complete or update it;
erase it, where we no longer need it or you withdraw consent;
stop processing that relies on your consent (withdrawing consent does not affect processing already done);
let a person you nominate exercise these rights if you die or become unable to; and
respond to a complaint about how we handle your data.

To change your analytics choice, use . For anything else, email info@careonco.ai. We may ask you to confirm your identity, and we will respond within 30 days.

If you have a complaint, please contact us first so we can try to resolve it. If you are not satisfied with our answer, you can complain to the Data Protection Board of India. If you live in another country, you may also have rights under your local data protection laws; where those laws apply to us, we will handle your request under them.

Children

This site is meant for healthcare professionals, laboratories, partners and investors. It is not directed at anyone under 18, and we do not knowingly collect personal data from children.

Changes to this policy

We will update this page if our practices change and revise the “Last updated” date above. Significant changes will be highlighted on the site.

Contact and grievances

Questions, requests and complaints about personal data can be sent to:

Grievance Officer
CareOnco Biotech Private Limited, A301, 3rd Floor, The Platina, Gachibowli–Miyapur Road, Gachibowli, Hyderabad, Telangana 500032, India
Email: info@careonco.ai