Privacy Policy

Last updated: June 2026

1. Who We Are

This Privacy Policy applies to Zap Private Limited ("Zap", "we", "us", "our"), the operator of Prime Care. We are committed to protecting your personal information and handling it responsibly in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA).

2. Data We Collect

• Identity data: Full name, date of birth, PAN number (for KYC)
• Contact data: Mobile number, email address, residential address
• Health data: Plan selections, benefit utilisation records, annual health check-up results (shared by our benefits partner's diagnostic partners)
• Financial data: Transaction IDs and payment confirmation records. We do not store card numbers, UPI IDs, or bank account details.
• Technical data: IP address, browser type, pages visited, and device information collected via standard web analytics.

3. How We Use Your Data

• To activate and manage your Prime Care plan
• To verify your identity (KYC) as required by law
• To process payments and issue refunds
• To communicate plan updates, benefit reminders, and renewal notices
• To enable our benefits partner and its network partners to honour your benefit claims
• To comply with statutory, regulatory, and legal obligations
• To improve our products and services (in aggregated, anonymised form only)

4. Legal Basis for Processing

We process your data on the following bases: (a) contract - to perform our obligations under your Prime Care plan; (b) legal obligation - to comply with DPDPA and tax regulations; (c) consent - for marketing communications, which you may withdraw at any time.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Our benefits partner - to activate and manage your benefits and cashless QR
• Razorpay - solely for payment processing
• Network partners (clinics, labs, pharmacies) - limited to transaction details required to honour your benefit claim
• Regulatory authorities - the IT Department or other statutory bodies when legally required

All third-party partners are bound by confidentiality obligations and are prohibited from using your data for their own marketing purposes.

6. Data Retention

We retain your personal data for the duration of your plan and for 7 yearsthereafter, as required by Indian financial and insurance regulations. Health data is retained for 3 years after plan expiry unless a longer period is mandated by law.

7. Your Rights (DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access - request a copy of the personal data we hold about you
• Correction - request correction of inaccurate or incomplete data
• Erasure - request deletion of your data (subject to regulatory retention obligations)
• Grievance redressal - raise a complaint with our Data Protection Officer
• Nominate - nominate an individual to exercise rights on your behalf in the event of death or incapacity

To exercise any of these rights, email help@getprime.care with subject line "Data Rights Request".

8. Data Security

We implement industry-standard security measures including TLS 1.2+ encryption for data in transit, AES-256 encryption for sensitive data at rest, access controls limited to authorised personnel, and regular security audits. In the event of a data breach that is likely to affect your rights, we will notify you within 72 hours as required by law.

9. Cookies & Analytics

Our website uses essential cookies for functionality and analytical cookies (Google Analytics) to understand usage patterns. You may disable non-essential cookies via your browser settings. Disabling cookies will not affect your ability to purchase or use a Prime Care plan.

10. Children's Privacy

Prime Care plans may cover children as dependants under a Family plan, but the plan holder must be an adult (18+). We do not knowingly collect personal data directly from individuals under 18 years of age.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website at least 14 days before they take effect.

12. Grievance Officer

If you have any concerns about how we handle your personal data, please contact our Grievance Officer at help@getprime.care with the subject line "Privacy Grievance". We will respond within 30 days.

13. Contact

Zap Private Limited
Email: help@getprime.care
Phone: 98862 73398
Bengaluru, Karnataka, India

Zap Private Limited · DPDPA 2023 compliant · help@getprime.care