Privacy Policy

1. Introduction

Saltlick Healthcare Pvt. Ltd. ("Saltlick", "we", "us" or "our"), a company of the Esperer Group headquartered in Mumbai, India, owns and operates the website www.saltlickhealthcare.com (the "Website") and the Saltlick mobile application (the "App"). This Privacy Policy explains how we collect, use, share and protect personal data when you visit the Website, contact us, or use the App and our related services (together, the "Services").

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. For the purposes of these laws, Saltlick is the Data Fiduciary for your personal data.

By using the Services, you confirm that you have read this Policy. Where we rely on your consent, we will ask for it clearly and separately, and you may withdraw it at any time (see Section 8).

2. Information we collect

We collect only the information needed to operate the Website and to provide cancer risk assessment, screening and referral services. Items marked (App) are collected only if you use the Saltlick App.

Category	Examples	Source
Contact and enquiry details	Name, email, phone number, organisation and message you send through the website's contact form, email or phone	You
Identity and account details (App)	Name, age or date of birth, gender, mobile number, email, address, preferred language	You, or a health worker registering you
Health and risk-assessment data (App)	Medical and family history, lifestyle factors (tobacco, alcohol, diet, activity), symptoms, screening and test results, risk scores	You, health workers, partner labs and clinics
Uploaded files (App)	Photos of reports or prescriptions you choose to upload	You, with camera or photo permission
Location (App)	Approximate or precise location, to find nearby screening camps and referral centres	Your device, with your permission
Website and device data	IP address, browser and device type, pages visited, referring site, date and time of visit, cookie identifiers	Collected automatically
Programme information	Eligibility or beneficiary ID under government schemes such as PM-JAY, where provided	You or the partner programme

Health information is sensitive personal data. We collect it only with your explicit consent and use it only for the purposes described in Section 4.

3. Cookies and similar technologies

The Website is built and hosted on the Wix.com platform, which places cookies on your device. These include strictly necessary cookies that make the Website work securely, and performance cookies that help us understand how visitors use the Website.

We do not use cookies for targeted advertising. You can block or delete cookies through your browser settings; some parts of the Website may not function properly if you do.

4. How we use your information

We use your personal data to:

Respond to enquiries, partnership requests and messages you send us through the Website.
Operate, maintain and secure the Website, and understand how it is used so we can improve it.
Create and manage App accounts and verify identity.
Assess cancer risk using our AI-enabled risk assessment model and show you your results.
Recommend screening, schedule appointments and refer you to doctors, hospitals or programme centres.
Send reminders, results and service messages by SMS, WhatsApp, email or in-app notification.
Prevent fraud and misuse, and fix technical errors.
Improve our risk models and services using data that has been de-identified or aggregated so it no longer identifies you.
Prepare aggregated, anonymised public-health reports for government health programmes.
Comply with legal obligations.

AI-generated results

Risk scores are produced automatically from the information provided. They indicate risk only and should always be reviewed with a qualified healthcare professional before any medical decision.

No sale or advertising use

We do not sell your personal data, we do not use health data for advertising or marketing, and we do not track you across other companies' apps or websites.

We share personal data only as described below, and only what each recipient needs:

Healthcare partners: doctors, hospitals, diagnostic laboratories and screening camps involved in your care or referral, with your consent.
Government health programmes: agencies under NPCDCS, the National Health Mission or PM-JAY, where you are enrolled through them or have consented. Otherwise we share only anonymised, aggregated statistics.
Service providers: website hosting (Wix.com), cloud hosting (AWS), SMS and messaging (MSG91), analytics, and email providers that process data on our behalf.
Esperer Group companies: only where needed to deliver the Services, under the same protections as this Policy.
Legal requirements: where required by law, court order or a lawful request from a government authority, or to protect life and safety.
Business transfers: if Saltlick is merged or acquired, your data may transfer to the new owner, who must honour this Policy.

Every third party we share data with is bound by a written agreement to protect it to the same standard as this Policy, to use it only for the agreed purpose, and to delete it when that purpose ends.

6. Data storage and security

Website data is hosted by Wix.com on its servers, which may be located outside India. App and health data are stored on secure servers located in India. Where data is transferred outside India, we do so only as permitted by Indian law.

We protect personal data with encryption in transit (TLS/HTTPS) and at rest, role-based access controls, audit logging and regular security reviews. Staff and partners can access health data only when their role requires it.

No system is completely secure. If a personal data breach affects you, we will notify you and the Data Protection Board of India as required by law.

7. Data retention

We keep personal data only as long as needed for the purposes in this Policy:

Website enquiries and correspondence: up to 24 months after our last contact with you.
App account and health records: while your account is active, and then for 5 years where medical-record or legal retention rules require it.
De-identified and aggregated data, which no longer identifies you, may be kept for research and reporting.

When the retention period ends, or you ask us to delete your data, we delete or anonymise it.

8. Your rights and choices

You have the right to:

Access a summary of the personal data we hold about you and how it is used.
Correct and update inaccurate or incomplete data.
Erase your data, subject to legal retention requirements.
Withdraw consent at any time. This does not affect processing already done, but we may no longer be able to provide some services.
Nominate another person to exercise your rights if you die or become incapacitated.
Raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

Device permissions

Camera, photo library, location and notification access in the App are optional and can be turned off at any time in your device settings.

Deleting your account and data

You can request erasure of your account and the personal data held against it from inside the Saltlick App, under Profile → Consent & Privacy. The request starts a grace period during which you can cancel it; after that, your identity details — name, mobile number, email, address, date of birth, photo, ABHA link, emergency contacts and signature — are erased.

If you no longer have the App installed, email aurindam@esperernutrition.com from the address or with the mobile number registered to your account and we will process the request on your behalf.

Screening and test records required by medical-record or legal retention rules are kept for the period described in Section 7, in a form that no longer identifies you where possible.

To exercise any right, contact our Grievance Officer (Section 11). We respond within 30 days.

9. Children

The Services are intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or legal guardian. If we learn that we have, we will delete it.

10. Medical disclaimer, third-party links and changes

Medical disclaimer. Our Services support early risk awareness. They do not diagnose cancer or replace a doctor. Always consult a qualified healthcare professional about your results. In an emergency, call 112 or go to the nearest hospital.

Third-party links. The Website may link to other websites, such as LinkedIn. We are not responsible for their privacy practices and encourage you to read their policies.

Changes to this Policy. We may update this Policy from time to time. We will post the new version on this page with a revised effective date, and notify App users before any material change takes effect.

11. Grievance Officer and contact

For questions about this Policy, requests to exercise your rights, or complaints, please contact our Grievance Officer:

Aurindam S, Grievance Officer
Saltlick Healthcare Pvt. Ltd.
Mumbai, Maharashtra 400072, India
Email: aurindam@esperernutrition.com

We acknowledge complaints within 24 hours and resolve them within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.