Legal

Privacy Policy

Last updated: 17 October 2026

Novity Health (“Novity”, “we”, “us”) respects your privacy. This policy explains what personal data we collect, why we collect it, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and its rules.

1. What we collect

When you register your interest

• Full name
• Mobile number
• Email address
• Area pincode
• The page you submitted the form from

If you join the program

With your separate consent, we may collect health information needed to provide care, such as medical history, current medications, blood test reports, body measurements and consultation notes. This is treated as sensitive personal data and is accessed only by your care team.

Automatically

Basic technical information such as browser type, device and approximate location (from IP address), used only to keep the website working and secure.

2. How we use your data

• To contact you about the Novity program and schedule an assessment call.
• To let you know when we begin offering care in your area (using your pincode).
• To provide medical consultations, blood tests and coaching if you enrol.
• To meet our legal, regulatory and medical record-keeping obligations.

We never sell your personal data, and we do not use your health information for advertising.

3. Consent

We process your data on the basis of your consent, which you give by ticking the consent box on our form. You can withdraw consent at any time by emailing care@novity.health. Withdrawal does not affect processing done before it, but we may no longer be able to provide our services.

4. Who we share it with

We share data only when necessary, and only with parties bound by confidentiality:

• Registered medical practitioners who provide your consultations.
• Diagnostic laboratory partners who carry out your blood tests.
• Technology providers that host our data and systems (for example, Google Workspace).
• Authorities, where we are required to by law.

5. Storage & security

We use reasonable security practices, including access controls, encryption in transit, and limiting access to staff who need it. Some of our technology providers may store data on servers outside India, in line with the DPDP Act and any restrictions notified by the Government of India.

6. How long we keep it

Interest registrations are kept for up to 24 months or until you ask us to delete them. Medical records are kept for the period required by applicable medical regulations. After that, data is securely deleted.

7. Your rights

Under the DPDP Act, you have the right to:

• Get a summary of the personal data we hold about you and how it is used.
• Correct, complete or update your data.
• Have your data erased when it is no longer needed.
• Withdraw consent at any time.
• Nominate another person to exercise these rights on your behalf.
• Raise a grievance with us, and then with the Data Protection Board of India.

To use any of these rights, email care@novity.health. We aim to respond within 30 days.

8. Children

Our services are for adults aged 18 and over. We do not knowingly collect data from children without verifiable consent from a parent or lawful guardian.

9. Cookies

Our website uses only essential cookies needed for it to function. If we add analytics or marketing cookies in the future, we will ask for your consent first.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows the latest version. If changes are significant, we will notify registered users by email.

11. Grievance Officer

If you have any concern about how your data is handled, please contact: