Privacy notice
How we collect, use, share and protect your personal data, and the rights you have over it.
About this notice
This notice explains what personal data Lazuren collects, why we use it, who receives it and what rights you have.
Who we are
Lazuren is operated by [Company legal name], [Registered address]. We decide how and why your personal data is used. For any question or complaint about your data, contact our grievance officer: [Grievance officer name and email].
What we collect
Identity: your name, age, sex and nationality. Contact: your phone number, your WhatsApp or Telegram contact, email and country. Health: the health information, reports and scans you choose to send us. Travel: passport details of the patient and attendants, needed for the visa invitation letter. Technical: basic data needed to run and secure the site, such as IP address and browser type.
Why we use it
Only to arrange medical opinions and cost estimates for you and, if you go ahead, the hospital's visa invitation letter, travel help and follow-up, and to answer your questions and complaints. We contact you by WhatsApp, Telegram, phone or email. We do not sell your data or use your health information for advertising.
Your consent
We ask for your consent before we collect health information. On the treatment plan form we ask separately for consent to use it and for consent to share it with hospitals. We need both to handle your request, because we cannot obtain a medical opinion or estimate without sharing your information with hospitals. If you only have a general question, use the form on the contact page: it asks only for consent to use your details to reply, and we ask you not to include medical details there.
Sending details for someone else, and children
If you send information about an adult relative, you must have that person's permission to do so. We accept information about a patient under 18 only from a parent or legal guardian.
Who receives it
The accredited hospitals in India that you choose, and their doctors; other accredited hospitals in India only if you agree. If you choose none, Lazuren suggests hospitals and sends your request only to those you approve. We tell you which hospitals gave opinions, and you choose among them. Service providers that help us run the service: website hosting, file storage, email notifications and the messaging apps WhatsApp and Telegram. Authorities, where the law requires it. We keep your enquiry and the medical documents you send us in encrypted storage run by our service providers, which may be outside India. Hospitals usually receive your documents through a link that stops working after a set time.
How long we keep it
We delete the reports and scans you send us from our file storage about 90 days after they reach it, or sooner if you ask. Copies your coordinator holds elsewhere, for example on their phone, are deleted once your files are stored. We keep the rest of your data for [retention period] after your case closes, or longer where the law requires, and then delete it. Hospitals keep their own medical records under Indian law. We cannot delete records held by a hospital.
Security and data breaches
We limit access to staff who need it and use reasonable technical and organisational safeguards. Files in our file storage are encrypted in storage and in transit, and the links we send to hospitals and to you stop working after a set time. No system is completely secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.
Your rights
You can ask us for a summary of your data and whom we shared it with, ask us to correct or erase it, withdraw your consent at any time, and nominate another person to exercise your rights if you die or cannot act. If you withdraw consent, we can no longer arrange these services for you, and we may keep data the law requires us to keep. To complain, write first to our grievance officer; if you are not satisfied, you may complain to the Data Protection Board of India.