Privacy Policy

This Privacy Policy explains how Andrei Health ("Andrei", the "Company", "we", "us" or "our") collects, uses, and discloses your information when you use our website at www.andreihealth.com (the "Service"), and it describes the privacy rights available to you.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please do not use the Service.

Definitions

Certain capitalized terms have the following meanings, whether used in the singular or the plural:

• Company (referred to as "the Company", "we", "us" or "our") refers to Andrei Health, 4A Rizvi Park, Maharashtra, India.
• Cookies are small files placed on your device by a website, which record details such as your activity on that site.
• Country refers to Maharashtra, India.
• Device means any device that can access the Service, such as a computer, phone, or tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Website.
• Service Provider means any third party that processes data on our behalf to help us operate, provide, or analyze the Service.
• Usage Data refers to data collected automatically through your use of the Service or generated by the Service infrastructure itself (for example, the duration of a page visit).
• Website refers to Andrei, accessible at www.andreihealth.com.
• You means the individual using the Service, or the company or other legal entity on whose behalf that individual is using the Service.

Information We Collect

Information you provide to us

When you contact us or request a demo through our contact form, we collect the information you choose to share, which may include your name, company, work email address, role, industry, and the contents of your message. If you email or call us directly, we receive the information contained in that correspondence.

This is a marketing website. It is not intended to receive confidential regulatory submissions, patient data, or other sensitive records — please do not include such information when you contact us.

Usage Data

We collect Usage Data automatically when you use the Service. This may include your device's IP address, browser type and version, the pages you visit, the date and time of your visit, the time spent on those pages, device identifiers, and other diagnostic data. When you access the Service from a mobile device, we may also collect information such as your device type, operating system, and mobile browser.

Cookies and similar technologies

We use cookies and similar tracking technologies (such as beacons, tags, and scripts) to operate the Service and to understand how it is used. Cookies may be "session" cookies, which are deleted when you close your browser, or "persistent" cookies, which remain on your device until they expire or you delete them.

We use the following categories of cookies:

• Essential cookies. Required for the Website to function and to keep it secure. Without them, parts of the Service may not work.
• Analytics cookies. Set by Google Analytics to help us measure traffic and understand how visitors use the Service, so we can improve it. You can review Google's practices at policies.google.com/privacy.

Where the law requires it, we use non-essential cookies (such as analytics cookies) only with your consent. You can withdraw or change your consent at any time through your browser or device settings. You can also instruct your browser to refuse cookies or to notify you when one is being set, though some parts of the Service may then not work as intended. Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service.
• Respond to your enquiries and demo requests, and communicate with you about them.
• Send you information about our products, services, and events, where you have asked us to or where permitted by law. You can opt out of these communications at any time.
• Analyze usage and trends so we can understand and improve how the Service performs.
• Maintain the security of the Service and prevent fraud or misuse.
• Comply with our legal obligations and enforce our terms and policies.
• Evaluate or carry out a merger, financing, reorganization, or sale of assets, in which the information we hold may be among the assets transferred.

We do not sell your Personal Data.

How We Share Your Information

We may share your information in the following circumstances:

• With Service Providers. We share information with third parties that help us operate the Service — for example, our email and hosting providers and our website analytics provider (Google) — who may process it only on our instructions.
• For business transfers. We may share or transfer your information in connection with a merger, financing, acquisition, or sale of all or part of our business.
• For legal reasons. We may disclose your information where we believe in good faith that it is necessary to comply with the law, respond to valid requests from public authorities, protect our rights or property, prevent wrongdoing, or protect the safety of our users or the public.
• With your consent. We may share your information for any other purpose with your consent.

Retention of Your Information

We keep your Personal Data only for as long as necessary for the purposes described in this Privacy Policy, and to comply with our legal obligations, resolve disputes, and enforce our agreements. Where possible, we shorten retention periods or reduce identifiability by deleting, aggregating, or anonymizing data.

The periods below are maximums ("up to"); we may delete or anonymize data sooner when it is no longer needed:

• Enquiry and correspondence data — up to 24 months after our last contact with you, to handle follow-up questions and keep our business records.
• Website analytics data (cookies, IP addresses, device identifiers) — up to 24 months from collection.
• Server logs (IP addresses, access times) — up to 24 months, for security monitoring and troubleshooting.

We may retain information for longer where we are required to by law, where it is needed to establish, exercise, or defend legal claims, or where you have asked us to. When a retention period ends, we securely delete or anonymize the data. Residual copies may remain in encrypted backups for a limited period and are not restored except where necessary for security, disaster recovery, or legal compliance. Anonymized data, which can no longer be linked to you, may be retained indefinitely for analytics.

You can ask us how long we will retain specific information by contacting us using the details below.

International Transfers

Your information may be processed at our offices and by our Service Providers in locations that may be outside your state, province, or country, where data protection laws may differ from those in your jurisdiction. Where required by law, we take reasonable steps to ensure that such transfers are subject to appropriate safeguards and that your information is treated securely and in accordance with this Privacy Policy.

Your Rights

Depending on where you live, you may have the right to access, correct, update, or delete the Personal Data we hold about you, to object to or restrict certain processing, and to withdraw consent where processing is based on it. To exercise any of these rights, contact us using the details below, and we will respond in accordance with applicable law.

Please note that we may need to retain certain information where we have a legal obligation or another lawful basis to do so.

Disclosure of Your Personal Data

Business transactions

If we are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different privacy policy.

Law enforcement and legal requirements

In certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities, or where we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights or property, prevent or investigate wrongdoing, protect the safety of users or the public, or protect against legal liability.

Security

The security of your Personal Data matters to us, and we use commercially reasonable measures to protect it. However, no method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee its absolute security.

Children's Privacy

The Service is not directed to anyone under the age of 16, and we do not knowingly collect Personal Data from children under 16. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us and we will take steps to remove it. Where consent is the basis for processing and your country requires a parent's consent, we may require that consent before collecting the information.

Links to Other Websites

The Service may contain links to websites that we do not operate. If you click a third-party link, you will be directed to that third party's site, and we strongly advise you to review its privacy policy. We have no control over, and assume no responsibility for, the content or privacy practices of any third-party sites or services.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date above, and where appropriate we will notify you by email or a prominent notice on the Service before the change takes effect. We encourage you to review this policy periodically. Changes are effective when posted on this page.

Contact Us

If you have any questions about this Privacy Policy, you can contact us:

• By email: aditya@andreihealth.com
• By phone: +91 98203 58952