Privacy policy

Who we are and what this covers

This policy explains how Yanthra Labs Private Limited ("Yanthra Labs", "we", "us") collects and uses personal data through yanthralabs.com, our enquiry forms, and our sales and support conversations.

When we provide our products to a hospital, college or business, that organisation decides what data is held in the product. In that case the organisation is the data fiduciary (or controller) and we process the data only on its instructions, under a separate written agreement. This website policy does not replace that agreement.

Personal data we collect

When you contact us or request a demo, we collect:

• Your name, work email address, phone number and organisation
• The product or service you are interested in, your organisation size, and anything you write in your message
• The page you submitted the form from
• Technical information needed to deliver the website securely, such as IP address, browser type and request times in server logs

We do not ask for, and ask you not to send, sensitive information such as health records, financial account details or government identity numbers through our website forms.

How we use it

• To reply to your enquiry, arrange a demo or trial, and send you the information you asked for
• To prepare proposals and to manage our relationship with you if you become a customer
• To keep the website secure, prevent spam and abuse, and fix technical problems
• To meet our legal, tax and regulatory obligations

We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

Why we are allowed to use it

In India, we process your data under the Digital Personal Data Protection Act, 2023 on the basis of the consent you give when you submit a form, and for legitimate uses permitted by the Act.

For people in the United Kingdom or the European Union, we rely on your consent, on steps taken at your request before entering into a contract, on our legitimate interest in responding to business enquiries and running our company, and on legal obligations, as applicable under the UK GDPR and EU GDPR.

Who we share it with

We share personal data only with:

• Service providers that host our website, store our enquiries and run our customer-relationship systems, such as cloud hosting providers, under contracts that require them to protect it
• Our professional advisers, such as auditors and lawyers, where necessary
• Authorities, where the law requires us to

Some of these providers may store data outside your country, including in India, the United Kingdom or the United States. Where we transfer data across borders, we do so as permitted by applicable law and with appropriate safeguards.

How long we keep it

We keep enquiry data for as long as needed to respond and to follow up on a potential engagement, and normally no longer than 24 months after our last contact with you, unless you become a customer or the law requires us to keep it longer. Server logs are kept for a shorter period for security purposes.

How we protect it

We use encryption in transit, access controls, signed and authenticated connections between our systems, logging and monitoring to protect personal data. No system is completely secure, but we work to protect your information and will notify you and the authorities of a personal data breach where the law requires.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and get a summary of how it is used
• Correct, complete or update it
• Ask us to erase it
• Withdraw your consent at any time, without affecting processing already carried out
• Object to or restrict certain processing, and ask for a copy in a portable format (UK and EU)
• Nominate another person to exercise your rights in the event of death or incapacity (India)
• Complain to a supervisory authority, such as the Data Protection Board of India or the UK Information Commissioner's Office

To use any of these rights, email corporate@yanthralabs.com. We will respond within the time the law requires.

Cookies and similar technology

Our website does not use advertising or tracking cookies. If you switch to dark mode, your browser remembers that choice locally on your device. Fonts are loaded from Google Fonts, which receives your IP address to deliver them. If we introduce analytics in future, we will update this policy and ask for consent where the law requires.

Grievance officer

If you have a concern about how we handle personal data, contact our Grievance Officer at corporate@yanthralabs.com with the subject line "Data protection". We will acknowledge your complaint promptly and aim to resolve it within 30 days.

Children

Our website and enquiry forms are intended for professionals and organisations. We do not knowingly collect personal data from children through this website.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. Significant changes will be highlighted on this page.