Version privacy-v1.3-2026-09 · Effective 26 September 2026
This Privacy Policy is published by Trustqed Social Private Limited (CIN U58199UP2023PTC186306), registered office at Flat 10052, Tower 10, Plot No. GH-01A, ATS One Hamlet, Sector 104, Baraula, Dadri, Gautam Buddha Nagar 201304, Uttar Pradesh, India ("CollegioDx", "we"), in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it.
Healthcare organisations and their staff. When a clinic, hospital or practitioner uses CollegioDx, we hold Account Data about the individuals who use it. For that data we are the data fiduciary.
Patients. Patient records held in CollegioDx belong to the healthcare organisation that treats the patient. For patient data we are a data processor acting on that organisation's instructions under a Data Processing Agreement. If you are a patient, the organisation that treats you is responsible for the notice you receive and the consent you give, and for responding to your requests; we help it do so.
We collect this data from you, from the organisation that gives you access, and from your use of the Service.
We do not sell Account Data.
We process patient data only to provide the Service to the treating organisation and as its Data Processing Agreement permits. In summary:
We use encryption in transit and at rest, private network endpoints, managed identities, role-based access, a web application firewall, an append-only audit log, backups and periodic security testing. No system is perfectly secure; if a breach affects you we will notify you and the authorities as the law requires.
We keep Account Data for as long as you have access to the Service and for up to three (3) years afterwards for security, audit and legal purposes, unless a longer period is required by law. Audit logs of access to patient records are kept for as long as the related patient records are retained. Patient data is retained under the treating organisation's instructions and the medical-record retention rules that apply to it.
Under the DPDP Act you may request access to, correction, completion, updating or erasure of your personal data, nominate a person to exercise your rights, and withdraw any consent you have given. Withdrawal does not affect processing that the law requires us to continue, such as audit logs. To exercise a right, write to the Grievance Officer below. We will respond within the time the law allows and in any event within thirty (30) days. If you are not satisfied, you may complain to the Data Protection Board of India.
If you are a patient, please direct requests to the organisation that treats you; if you write to us we will pass your request to it and help it respond.
CollegioDx accounts are for adults. Patient records of children are handled by the treating organisation, which is responsible for obtaining verifiable consent from a parent or lawful guardian as the DPDP Act requires.
We use only the cookies necessary to keep you signed in and to remember your active organisation and preferences. We do not use advertising or tracking cookies.
In accordance with the Information Technology Act, 2000 and rules made under it, and the DPDP Act:
Aditya Gupta, Grievance Officer Trustqed Social Private Limited Flat 10052, Tower 10, Plot No. GH-01A, ATS One Hamlet, Sector 104, Baraula, Dadri, Gautam Buddha Nagar 201304, Uttar Pradesh, India E-mail: support@trustqed.com
Grievances are acknowledged promptly and resolved within thirty (30) days.
We may update this Privacy Policy. Material changes will be notified in the Service. The version and effective date appear at the top of this page.