Cookie Policy

We use cookies to operate and secure our website, remember choices, understand website use and, only where permitted, support communications and marketing. You can accept, reject or change non-essential cookies at any time.

1. About this Cookie Policy

This Cookie Policy explains how InCHES Healthcare Private Limited (“InCHES”, “we”, “our” or “us”) uses cookies and similar technologies when you visit incheshealth.com and related webpages controlled by us (the “Website”).

It should be read together with our Privacy Notice. The Privacy Notice explains how we process personal data, the purposes of processing, how long we retain it and how you may exercise your privacy rights.

2. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help a website function, keep it secure, remember preferences and provide information about how visitors use it. Similar technologies may include pixels, tags, local storage and software development kits. In this Policy, we refer to all of these as “cookies”.

A cookie may not directly identify you by name. However, information such as a cookie identifier, device information, IP address or browsing activity may identify you or become linked to you. Where cookie information relates to an identifiable individual, we treat it as personal data in accordance with applicable law.

3. How We Use Cookies

We may use cookies for the following purposes:

• To Keep the Website available, stable and secure.
• To Remember your language, display and consent preferences.
• To Understand which pages are visited and how the Website performs.
• To Improve navigation, content and user experience.
• To Measure the effectiveness of campaigns or communications, where applicable.
• To Prevent fraud, misuse, automated attacks and unauthorised access.

The public Website is intended to provide information about InCHES and its services. It is not intended for submitting medical records, insurance claim records or other sensitive case information through ordinary website forms.

4. Types of Cookies We May Use

Category	Purpose	Consent Position	Typical Duration
Strictly Necessary	Operate core features, maintain security, manage sessions and record cookie choices.	Not optional. If personal data is processed, an applicable lawful basis must support it.	Session or limited period
Functional	Remember settings and provide enhanced website features.	Required	Session to 12 months
Analytics	Measure traffic, performance and user interaction in aggregated or identifiable form.	Required	Up to 24 months
Advertising or Social Media	Measure campaigns, enable embedded media or support interest-based advertising, if used.	Required	As stated by the provider, subject to our controls

We will not place functional, analytics, advertising or social media cookies before you make a choice, unless their use is otherwise permitted by applicable law. Strictly necessary cookies are not treated as automatically exempt under the DPDP Act. Where they process identifiable personal data, InCHES will use them only on an applicable lawful basis, including a legitimate use under Section 7 where its conditions are met, or consent where required. The exact cookies in use may change as the Website is updated. The live cookie preference centre should display the current cookie names, providers, purposes and durations.

5. First-Party and Third-Party Cookies

First-party cookies are placed by InCHES. Third-party cookies are placed by another organisation whose service is used on the Website, such as a website analytics, embedded video, map, security or social media provider.

A third party may process information collected through its cookies according to its own privacy terms.

We assess third-party tools before enabling them and seek to limit them to what is necessary for the stated purpose. You should review the relevant provider’s privacy information through the cookie preference centre.

6. Your Cookie Choices

When you first visit the Website, a cookie banner should allow you to:

• Accept All optional cookies.
• Reject All optional cookies.
• Choose particular cookie categories.
• Continue with strictly necessary cookies only.

Your choice must be voluntary, specific and clear. Refusing optional cookies should be as easy as accepting them. Strictly necessary cookies cannot normally be disabled through our banner because the Website may not function or remain secure without them.

You may change or withdraw your choice at any time through the “Cookie Settings” link displayed on the Website. Withdrawal will not affect processing that occurred before withdrawal. You may also delete or block cookies through your browser settings, but doing so may affect Website features.

7. Personal Data and the DPDP Act

Where information collected through cookies is digital personal data, InCHES will process it in accordance with the provisions of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 that are in force from time to time, together with other applicable Indian law.

Depending on the cookie and purpose, InCHES may act as the Data Fiduciary for Website visitor information. A service provider may act as our Data Processor and process information only for authorised purposes and under appropriate contractual and security requirements.

Where consent is relied upon, we seek consent through a clear affirmative action and limit processing to the specified purpose and information necessary for it. We maintain appropriate records of cookie choices and provide a practical way to withdraw consent.

8. Children’s Privacy

For the purposes of the DPDP Act, a child is an individual who has not completed eighteen years of age. The Website is not directed at children. InCHES does not knowingly undertake tracking or behavioural monitoring of children, or targeted advertising directed at children, through cookies or similar technologies.

Before processing a child’s personal data, InCHES will obtain verifiable consent from the child’s parent or lawful guardian where required and apply appropriate age and identity verification measures. If we become aware that a child’s personal data has been collected without the authorisation or verifiable consent required by applicable law, we will take reasonable steps to stop the processing and delete the data, unless retention is legally required.

9. Retention of Cookie Information

Session cookies normally expire when you close your browser. Persistent cookies remain for a defined period or until you delete them. We retain cookie information only for as long as reasonably necessary for the stated purpose, security, legal compliance or the establishment, exercise or defence of legal claims.

The duration shown in the cookie preference centre is the authoritative operational duration for each cookie.

We periodically review cookies and remove or shorten retention where the information is no longer required.

10. Security and Sharing

We use reasonable technical and organisational measures to protect cookie information against unauthorised access, alteration, disclosure, loss or misuse. Measures may include access controls, secure configuration, encryption in transit, logging, monitoring and vendor oversight, as appropriate.

We may share cookie information with authorised service providers that support hosting, security, analytics, communications or Website functionality. We may also disclose information where required by law, to protect legal rights, or in connection with a business reorganisation. We do not permit service providers to use cookie information for unrelated purposes when they act on our behalf.

11. Cross-Border Processing

A third-party service provider may process cookie information outside India. Where this occurs, InCHES will follow applicable law, contractual safeguards and any transfer restriction notified by the Government of India.

12. Your Privacy Rights

Subject to applicable law and verification of your identity, you may request access to information about your personal data, correction or updating, erasure, withdrawal of consent, grievance redressal and nomination. Some rights may not apply where information is retained or processed under a legal obligation or another lawful ground.

For cookie choices, the quickest method is the Website’s “Cookie Settings” link. For broader privacy requests or grievances, contact us using the details below. If InCHES processes information only on behalf of another Data Fiduciary, we may direct your request to that organisation and support it in responding.

If you first raise a grievance with InCHES and it is not resolved to your satisfaction, you may submit a complaint to the Data Protection Board of India in the manner provided under the DPDP Act and Rules. Details of the applicable Board process should be made available through our Privacy Notice or privacy-request channel as the relevant provisions take effect.

13. Changes to This Policy

We may update this Cookie Policy when our Website, cookies, service providers or legal requirements change. The revised version will be posted on the Website with an updated effective date. Where a material change affects your existing consent, we will request a fresh choice where required.

14. Contact Us

For questions, privacy requests or grievances relating to cookies or personal data, please contact:

Organisation: InCHES Healthcare Private Limited

Privacy Notice: https://incheshealth.com/privacy-notice/

Grievance Officer – Mr Soban Silotri, Manager IT Infrastructure