Privacy Policy

Article I — Preamble and Scope of Application

This Privacy Policy ("Policy") is published in accordance with Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, read with Section 43A of the Information Technology Act, 2000, and in compliance with the Digital Personal Data Protection Act, 2023 ("DPDPA"). This Policy governs the collection, storage, use, and disclosure of personal data by Vetsy, a doorstep veterinary care platform operating in Assam, India.

This Policy applies to all persons — pet owners, visitors, and users — who access the Vetsy mobile application, website, or any related service (collectively, the "Platform"). By accessing or using the Platform, you acknowledge that you have read and accepted the terms of this Policy.

Article II — Identity of the Data Fiduciary

For the purposes of the DPDPA, 2023 and the IT (SPDI) Rules, 2011, Vetsy is the Data Fiduciary responsible for the processing of personal data collected through the Platform.

Contact Email: hello@vetsy.in
Phone: +91 93959 23001

Article III — Categories of Personal Data Collected

Section 3.1 — Data Provided Voluntarily by the User

The following personal data is collected when you register or use the Platform:

• Full name, residential address, phone number, and email address of the pet owner
• Pet-related information including species, breed, age, weight, vaccination history, and prior medical records
• Appointment preferences, service notes, and any additional information provided during booking
• Correspondence submitted through our support channels

Section 3.2 — Data Collected Automatically

The Platform may automatically collect the following technical information:

• Device identifiers, operating system version, and application version
• Location data — collected only with your explicit consent — for the purpose of dispatching the nearest available veterinary professional
• Service usage data such as features accessed and session activity

Vetsy does NOT use cookies or any browser-based tracking technologies. Vetsy does NOT collect crash reports or device diagnostic data.

Section 3.3 — Data from Third-Party Sources

If you use a third-party login service (such as Google or Apple), we receive only the basic profile information authorised by that platform. No additional data is requested or stored from such services beyond what is necessary for account creation.

Article IV — Purpose and Legal Basis for Processing

Personal data is collected and processed exclusively for the following purposes, each of which constitutes a lawful basis under Indian data protection law:

• Registration and account management on the Platform
• Booking, scheduling, and coordination of doorstep veterinary services
• Maintaining a digital Health Passport for your pet — a cumulative record of visits, treatments, and vaccinations
• Dispatching the appropriate veterinary professional to your location
• Communicating appointment confirmations, updates, and service-related notifications
• Compliance with applicable laws, court orders, and regulatory requirements
• Improving Platform functionality through aggregated, anonymised usage analysis

Vetsy does not use personal data for unsolicited commercial marketing. Vetsy does not sell, rent, or trade personal data to any third party under any circumstances.

Article V — Disclosure and Third-Party Sharing

Section 5.1 — Disclosure to Veterinary Professionals

Upon confirmation of a booking, the assigned veterinary professional is provided with the user's service address, pet information, and appointment notes — limited strictly to what is necessary to perform the requested service.

Section 5.2 — Disclosure to Technology Service Providers

We engage third-party providers for cloud infrastructure and SMS/notification delivery. These providers process data solely on Vetsy's behalf and under binding confidentiality obligations. They are prohibited from using your data for any independent purpose.

Section 5.3 — Disclosure under Legal Compulsion

Vetsy may disclose personal data if lawfully required to do so by a court of competent jurisdiction, a regulatory authority, or a governmental body acting under applicable Indian law, including but not limited to the Code of Criminal Procedure, 1973 and the Information Technology Act, 2000.

Section 5.4 — Absolute Prohibition on Commercial Data Sharing

Vetsy maintains an unconditional policy against the commercial sale, rental, or transfer of personal data to any third party. This prohibition is not subject to exception or waiver.

Article VI — Data Security Practices

Vetsy implements reasonable security practices and procedures as mandated under Rule 8 of the IT (SPDI) Rules, 2011, including encrypted data transmission (TLS/HTTPS), role-based access controls, and periodic security reviews.

Notwithstanding the foregoing, no electronic system can guarantee absolute security of data transmitted over public networks. Users are advised to maintain the confidentiality of their account credentials and to report any suspected unauthorised access to hello@vetsy.in immediately.

Article VII — Data Retention

Personal data is retained for the duration of the user's active account and for such further period as may be necessary to comply with applicable legal obligations or to resolve any pending disputes. Upon written request for account deletion, personal data will be deleted or anonymised within a reasonable time, subject to mandatory retention requirements under Indian law.

Article VIII — Rights of Data Principals

In accordance with the Digital Personal Data Protection Act, 2023, and the IT (SPDI) Rules, 2011, users — as Data Principals — have the following rights:

• Right to access personal data held by Vetsy
• Right to correction of inaccurate or incomplete data
• Right to withdrawal of consent for data processing (subject to impact on service availability)
• Right to erasure of personal data, subject to statutory retention obligations
• Right to lodge a grievance with Vetsy's designated Grievance Officer

Requests to exercise any of the above rights must be submitted in writing to hello@vetsy.in or by calling +91 93959 23001.

Article IX — Minors and Children's Data

The Platform is designed for use by individuals aged 18 years and above. Vetsy does not knowingly collect or process personal data from persons below the age of 18. If Vetsy becomes aware that personal data of a minor has been collected without verifiable parental consent, such data will be deleted without delay.

Article X — Amendments to This Policy

Vetsy reserves the right to amend this Policy at any time, in response to changes in applicable law, business operations, or technology. Material amendments will be notified to registered users via email or in-app notification at least seven (7) days prior to taking effect. Continued use of the Platform following the effective date of an amendment constitutes acceptance of the revised Policy.

Article XI — Grievance Officer and Contact

In accordance with Rule 5(9) of the IT (SPDI) Rules, 2011 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the following officer has been designated to address grievances relating to data privacy:

Grievance Officer: Bhaskar Jyoti Kalita
Designation: Co-Founder, Vetsy
Email: hello@vetsy.in
Phone: +91 93959 23001

Article XII — Governing Law and Jurisdiction

This Policy is governed by and shall be construed in accordance with the laws of India, including the Information Technology Act, 2000, the IT (SPDI) Rules, 2011, and the Digital Personal Data Protection Act, 2023. Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of the competent courts in Guwahati, Assam, India.