Noorviro Privacy Policy

1. Introduction

Noorviro ("we," "us," "our," "Noorviro") is a digital growth agency that helps doctors and clinics attract more patients through websites, SEO, CRM systems, and Google visibility services. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, use our platform, or engage our services.

By accessing our website (www.noorviro.com) or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our website and services.

2. Information We Collect

2.1 Information You Provide Directly

• Name, email address, and phone number submitted via contact forms, demo requests, or sign-ups
• Clinic/business details (practice name, specialization, location) shared during onboarding
• Billing and payment information for paid services
• Any information voluntarily shared through email, WhatsApp, or calls with our team

2.2 Information Collected Automatically

• IP address, browser type, device type, and operating system
• Pages visited, time spent, click behaviour, and referral source
• Cookies and similar tracking technologies (see Section 6)

3. How We Use Information

• To provide, operate, and maintain our website development, SEO, CRM, and doctor portal services
• To communicate regarding onboarding, support, updates, and service-related notices
• To process payments and maintain billing records
• To send marketing or promotional communications, only with consent, and with an option to opt out at any time
• To analyze website and platform usage to improve performance and user experience
• To detect, prevent, and address fraud, security issues, or technical problems
• To comply with applicable legal and regulatory obligations

4. Client Information

Noorviro carries out its work for doctors and clinics in line with the National Medical Commission (NMC) Guidelines on Ethical Advertising and Public Communication, as applicable.

When doctors, clinics, or healthcare businesses ("Clients") engage Noorviro for website, CRM, or portal services, we collect and process business information such as clinic name, doctor credentials, service listings, contact details, and content required to build and operate the platform. This information is used strictly to deliver the agreed services and is not sold or shared with unrelated third parties.

Clients are responsible for ensuring that any information, credentials, or claims they provide to us for publication (on their website or portal) are accurate and lawfully obtained.

5. Patient Data (Doctor Websites)

Certain services offered by Noorviro, such as CRM systems, lead management tools, and doctor portals, may involve the collection of information submitted by patients or visitors on behalf of our doctor/clinic Clients — for example, appointment requests, enquiry forms, or callback requests.

• In such cases, Noorviro acts as a data processor, and the doctor/clinic Client acts as the data controller responsible for how patient data is used and disclosed to patients
• We only process patient data as instructed by our Clients, for the purpose of enabling lead capture, appointment scheduling, and communication features on their platform
• We do not access, use, or share patient data for our own independent marketing purposes
• Reasonable technical and organizational safeguards are applied to protect patient data processed through our systems

Patients submitting information through a doctor/clinic website powered by Noorviro should also refer to that specific doctor/clinic's own privacy practices, as they remain the primary data controller for that information.

6. Cookies

We use cookies and similar tracking technologies to operate our website, remember preferences, understand how visitors use our site, and improve functionality. Cookies used may include:

• Essential cookies – required for basic website functionality
• Analytics cookies – help us understand site traffic and usage patterns
• Marketing cookies – used to measure the effectiveness of advertising campaigns

You can control or disable cookies through your browser settings. Disabling cookies may affect certain features of our website.

7. Third-Party Services

We may use trusted third-party service providers to operate our website and deliver our services. These providers process data on our behalf and are bound by their own privacy and security practices, including but not limited to:

• Google Analytics – website traffic and behaviour analytics
• Google Ads / Meta (Facebook & Instagram) Ads – marketing and remarketing campaigns
• Razorpay – secure payment processing for service fees
• Hosting and cloud infrastructure providers – website and application hosting
• WhatsApp Business API / SMS providers – communication and notification services

We encourage you to review the respective privacy policies of these third-party providers. Noorviro is not responsible for the data practices of independent third parties.

8. Data Security

We implement industry-standard technical and organizational measures — including encryption, access controls, secure authentication (JWT-based systems), and regular security reviews — to protect personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Client and patient data processed through CRM or portal systems is retained as per the terms agreed with the respective Client, or until deletion is requested.

10. User Rights (Under the Digital Personal Data Protection Act, 2023)

In accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights regarding your personal data:

• Right to Access – request confirmation and a summary of personal data we hold about you
• Right to Correction – request correction of inaccurate or incomplete personal data
• Right to Erasure – request deletion of personal data that is no longer necessary for the purpose it was collected
• Right to Withdraw Consent – withdraw previously given consent at any time, without affecting the lawfulness of processing prior to withdrawal
• Right to Grievance Redressal – raise concerns or complaints regarding how your personal data is processed
• Right to Nominate – nominate another individual to exercise these rights on your behalf in the event of death or incapacity

To exercise any of these rights, please contact us using the details in Section 13. We will respond within a reasonable timeframe as required under applicable law.

11. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a minor without verified parental/guardian consent, we will take steps to delete such information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact us at: