This Privacy Policy (“Policy”) describes the policies and procedures on the collection, use, disclosure and protection of your information when you use our mobile application or avail services through our diagnostic centre, including our home sample collection services provided by our technicians and personnel (collectively, “Application”) that are the proprietary materials of Mani Microbiological Laboratory Private Limited, an Indian company having its registered office at 12a Cowley Brown Road, R.S. Puram East, Coimbatore – 641002, Tamil Nadu, India (hereinafter referred to as “MicroLab” or “Company” or “Us” or “We”).

The terms “you” and “your” refer to the user of the Application. The term “Services” refers to any services offered by MicroLab including by allowing access of the Application to you or the services that are enabled through your use of the Application.

Please read this Policy before using the Application or submitting any personal information to MicroLab. This Policy is a part of and incorporated within, and is to be read along with, the Terms of Use of the Application.

1. YOUR CONSENT

By using the Application and/or the Services, you agree and consent to the collection, transfer, use, storage, disclosure and sharing of your information as described and collected by us in accordance with this Policy. If you do not agree with the Policy, please do not access the Application or use any of the Services.

If you use the Application and/or the Services on behalf of someone else (such as your child or a family member), you represent that you are authorised by such individual to (i) accept this Policy on such individual’s behalf, and (ii) consent on behalf of such individual to our collection, use and disclosure of such individual’s information as described in this Policy. Where our Services are used by or on behalf of a child, being an individual below the age of eighteen (18) years, you warrant that you are the legal parent and/or lawful guardian of such child and you agree to have consented to us to process the personal data of such child in the manner prescribed under the Digital Personal Data Protection Act, 2023 and the rules made thereunder.

You may withdraw your consent to the processing of your Personal Information at any time by writing to our Officer at the contact details set out in Section 10 below. The withdrawal of consent shall not affect our obligation to continue retention of data where required under any law, and may result in our inability to provide you certain Services that are dependent on the information for which consent has been withdrawn.

2. STRUCTURE AND BASIS

This Policy is published in compliance with, inter alia:

1. Section 43A of the Information Technology Act, 2000 (“IT Act”);
2. Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “Privacy Rules”);

iii. Rule 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021;

1. The Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025, to the extent notified and in force from time to time.

 

This Privacy Policy states the following:

1. The type of information collected from Users, including Personal Information and Sensitive Personal Data or Information;
2. The purpose, means and modes of collection, usage, processing, retention and destruction of such information;

iii. How and to whom MicroLab will disclose such information.

3. INFORMATION WE COLLECT FROM YOU

We will collect and process the following information about you:

1. a) Information you give us

This includes information submitted when you:

1. Create or update your MicroLab user account, which may include your name, gender, address, date of birth, email address, phone number, and login credentials;
2. Book a lab test or home sample collection, including health information such as medical history, diagnostic reports, and prescriptions;

iii. Make payments through the Application, including billing information processed via Razorpay;

1. Correspond with MicroLab for customer support;
2. Enable features that require access to content or functionality of your device (such as camera, location).

 

By using the Application, you acknowledge and consent to the collection and processing of the following:

 

1. Location: Our Application accesses your device’s location information to dispatch a technician to your address for home sample collection, enable real-time technician tracking, and identify the nearest MicroLab branch. Location access is requested only when the App is in use and can be disabled at any time from your device settings.
2. Camera: With your explicit permission, our Application may access your device’s camera to capture prescriptions or upload documents required for booking.
3. Files and Images: Our Application may access files and images stored on your device to allow you to upload medical reports, prescriptions, or images required for your booking.
4. b) Information we collect automatically

We will automatically collect and analyse the following information each time you use the Application:

1. Communications: Records of your communications with us via email, SMS, phone, or through the Application;
2. Location information: Real-time or approximate location data as determined through GPS, depending on the Services used and your device permissions;

iii. Transaction information: Details related to your use of Services, including the type of tests booked, payment details, and booking history;

1. Device information: Device model, operating system version, app version, crash logs, and Firebase push notification tokens.
2. USES OF YOUR INFORMATION

We use the information we collect for the following purposes:

1. To provide the Services that you choose to receive through the Application and to fulfil obligations arising therefrom;
2. To process lab test bookings and schedule home sample collections;

iii. To dispatch and track technicians for home sample collection;

1. To process payments and generate receipts via Razorpay;
2. To deliver digital lab reports and results to you through the Application;
3. To communicate with you regarding your bookings, send OTPs, and provide status updates via push notifications;

vii. To provide, personalise, maintain and improve the features and functionalities of the Application;

viii. To administer and enhance the security of our Application and for internal operations including troubleshooting, data analysis, testing, research, and survey purposes;

1. To generate and review reports and data about, and to conduct research on, our user base and Service usage patterns;
2. To comply with applicable laws and regulatory requirements.

 

We may combine information received from third parties with the information you provide to us for the purposes set out above. We may also anonymize and/or de-identify information collected through the Services. Our use of aggregated and/or de-identified information is not restricted by this Policy.

By agreeing to this Policy, you consent to receive transactional and service-related communications from MicroLab on your registered mobile number.

5. DISCLOSURE AND DISTRIBUTION OF YOUR INFORMATION

We may share your information that we collect for the following purposes:

1. a) With Service Providers

We may share your information with our vendors, consultants, and service providers to the extent necessary to render Services to you or enable the features and functionalities of the Application. These include:

• Razorpay — for secure payment processing
• Google Firebase — for push notifications and crash analytics
• Google Maps Platform — for location services and technician tracking
• SMS gateway providers — for OTP delivery
• Cloud infrastructure providers — for data storage and hosting

 

Such service providers are permitted to use your information only to the extent necessary to perform the services for which they are engaged and are bound by confidentiality and data protection obligations.

1. b) For Compliance with Laws

We may share your information with governmental or statutory authorities when we are:

1. Obligated under applicable laws or in good faith to respond to directions from legal or statutory authorities including courts or police;
2. Required to enforce our Terms of Use and other agreements or to protect the rights, property, or safety of MicroLab, its users, or the public.
3. DATA SECURITY PRECAUTIONS
4. a) Your Personal Information and Sensitive Personal Data and Information is maintained by MicroLab in electronic form on secure servers. MicroLab takes all reasonable precautions to protect your information both online and offline, and implements appropriate managerial, technical, operational and physical security measures commensurate with the sensitivity of the information collected.
5. b) All data transmitted between the Application and our servers is encrypted using HTTPS/TLS protocols. Health records and diagnostic reports are accessible only to authorised personnel on a need-to-know basis.
6. c) Payment data is handled exclusively by Razorpay in compliance with PCI-DSS standards. MicroLab does not store your full card number, CVV, UPI PIN, or other sensitive payment credentials.
7. d) MicroLab makes all user information accessible to its employees, agents, vendors and third parties only on a need-to-know basis and binds them with confidentiality obligations.
8. e) Notwithstanding the above, MicroLab is not responsible for any breach of security or any actions of third parties or events beyond our reasonable control, including acts of government, computer hacking, unauthorised access, or poor quality of internet service.
9. YOUR RIGHTS AS A DATA PRINCIPAL

Subject to applicable law, including the DPDP Act, you have the right to:

1. a) Obtain a summary of the Personal Information processed by us and of the processing activities undertaken with respect to such information;
2. b) Request correction, completion, updating or erasure of your Personal Information, save where retention is required for a lawful purpose;
3. c) Withdraw your consent at any time in the manner described in Section 1 above;
4. d) Nominate another individual to exercise your rights under this Policy in the event of your death or incapacity, in the manner prescribed under applicable law;
5. e) Grievance redressal in the manner described in Section 10 below.

 

You may exercise these rights by writing to our Officer at the contact details provided in Section 10. We will endeavour to respond to your request within the timelines prescribed under applicable law.

8. DATA RETENTION

We retain your Personal Information and Sensitive Personal Data and Information only for as long as is necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, medical record-keeping or reporting requirements. Illustratively:

1. a) Diagnostic reports, prescriptions and medical records are retained for the period prescribed under applicable clinical establishment and medical council regulations, and in any event for not less than 7 years from the date of the last test or consultation, whichever is later;
2. b) Account and transaction information is retained for the duration of your relationship with us and for 8 years thereafter, or for such longer period as required to comply with applicable tax, audit and regulatory requirements;

 

Upon expiry of the applicable retention period, we will delete or anonymize your information, save where retention is required under applicable law.

9. CHILDREN’S PRIVACY AND TARGETED ADVERTISING

The MicroLab Application is not intended for independent use by children below the age of eighteen (18) years without parental or guardian supervision. Where our Services are used on behalf of a child, the parent or guardian must provide consent in accordance with Section 1 above. MicroLab does not undertake tracking, behavioural monitoring, or targeted advertising directed at children except where clearly in the interest of the child and permitted under the DPDP Act.

10. GRIEVANCE OFFICER AND DATA PROTECTION OFFICER

If you have any queries relating to the processing or usage of information provided by you in connection with this Policy, please contact our Grievance Officer at the details provided below:

 

Name	Mani Microbiological Laboratory Private Limited
Address	12a Cowley Brown Road, R.S. Puram East, Coimbatore – 641002, Tamil Nadu, India
Email	microlabcbe@microlabindia.com
Phone	0422 4354242

 

We will endeavour to respond to all legitimate requests within 30 days.

11. PERSONAL DATA BREACH NOTIFICATION

In the event of a personal data breach, MicroLab shall, in accordance with the DPDP Act and the rules made thereunder: (a) take reasonable steps to contain and remediate such breach; (b) notify the Data Protection Board of India in the manner and within the timelines prescribed under applicable law; and (c) notify affected users of the breach, including the likely consequences and the measures taken to mitigate the risks, where such notification is required under applicable law.

12. DATA PROTECTION PRINCIPLES

In processing your Personal Information and Sensitive Personal Data and Information, MicroLab adheres to the following principles:

1. a) Purpose Limitation — we collect and process your information only for the specified purposes set out in this Policy;
2. b) Data Minimisation — we collect only such information as is necessary and proportionate to the purposes for which it is processed;
3. c) Accuracy — we take reasonable steps to ensure that the information we hold about you is accurate and kept up to date;
4. d) Storage Limitation — we retain your information only for as long as necessary, in accordance with Section 8 above;
5. e) Integrity and Confidentiality — we implement appropriate technical and organisational measures to protect your information against unauthorised or unlawful processing;
6. f) Accountability — we are responsible for, and able to demonstrate compliance with, the principles set out in this Section 12.
7. CHANGES TO THIS POLICY

We may occasionally update this Policy and such changes will be posted on this page and at https://www.microlabindia.com/privacy-policy. If we make any significant changes to this Policy, we will endeavour to provide you with reasonable notice, such as via prominent notice on the Application or to your registered mobile number. To the extent permitted under applicable law, your continued use of our Services after we publish or send a notice about changes to this Policy shall constitute your consent to the updated Policy.

14. ESCALATION TO THE DATA PROTECTION BOARD OF INDIA

If you are not satisfied with the manner in which your grievance has been addressed by our Grievance Officer, you may escalate your grievance to the Data Protection Board of India, constituted under the DPDP Act, in the manner prescribed under applicable law.