Privacy Policy
Privacy Policy
Effective Date: 9 August 2026
Last Updated: 9 August 2026
At Medrento (“Medrento”, “we”, “us” or “our”), protecting the privacy, confidentiality and security of personal information entrusted to us is important.
This Privacy Policy explains how we collect, use, store, process, disclose and protect personal information when you visit Medrento.com, communicate with us, request a quotation, use our services, participate in medical or screening camps, interact with our healthcare professionals or digital solutions, or otherwise engage with Medrento.
Medrento provides healthcare-related services across India, including medical equipment rentals, screening and medical camps, healthcare worker services, digital medical agents, technology solutions and healthcare support services.
By accessing our website or providing personal information to Medrento, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, we will obtain appropriate consent before processing your personal data.
1. Scope of this Privacy Policy
This Privacy Policy applies to personal information processed through:
- Medrento.com and associated webpages;
- enquiries, quotation requests and contact forms;
- medical equipment rental services;
- medical and diagnostic screening camps;
- healthcare worker and healthcare outsourcing services;
- Digital Medical Agent and patient-engagement services;
- applications, websites and digital solutions operated by or on behalf of Medrento;
- email, telephone, WhatsApp or other communication channels;
- interactions with Medrento employees, healthcare professionals, technicians and authorised representatives; and
- services Medrento provides to hospitals, pharmaceutical companies, diagnostic centres, NGOs, corporates, healthcare providers and individuals.
Where Medrento processes information solely on behalf of a hospital, pharmaceutical company, diagnostic centre, corporate client or other organisation, that organisation may determine the purposes and means of processing. In those situations, its own privacy notice may also apply.
2. Personal Information We May Collect
Depending on your interaction with Medrento, we may collect the following categories of information.
A. Identity and Contact Information
This may include:
- name;
- age or date of birth where required;
- gender where relevant to a healthcare service;
- mobile number;
- email address;
- postal or service address;
- city, state and location;
- organisation or employer;
- designation; and
- other information provided when contacting us.
B. Healthcare and Medical Information
When required for a medical camp, screening service, patient-engagement service or another healthcare-related activity, information may include:
- medical history;
- health conditions;
- screening results;
- diagnostic measurements;
- blood pressure;
- blood glucose or HbA1c results;
- lipid measurements;
- ECG, EEG or other diagnostic information;
- laboratory or screening reports;
- prescriptions or information provided by healthcare professionals;
- appointment and consultation information; and
- other information necessary to provide the requested healthcare service.
Medrento’s services currently include screening activities such as HbA1c, lipid, blood sugar, bone mineral density, ECG, blood pressure, ABPM and other diagnostic and screening categories.
Health and medical information may constitute sensitive personal information under applicable Indian law and will be handled with appropriate safeguards. India’s 2011 Sensitive Personal Data or Information framework specifically addresses information including physical and physiological health conditions and medical records and history.
C. Business and Professional Information
For hospitals, pharmaceutical companies, diagnostic centres, corporates, NGOs, healthcare professionals, suppliers and business partners, we may collect:
- organisation details;
- professional contact details;
- job title;
- healthcare qualifications;
- professional experience;
- service requirements;
- contractual information; and
- correspondence relating to our business relationship.
D. Transaction and Service Information
Where applicable, we may process information relating to:
- quotations;
- equipment rentals;
- orders;
- invoices;
- payments and transaction references;
- equipment delivery or collection;
- service history;
- complaints;
- support requests; and
- contractual documentation.
Payment information may be processed directly by authorised payment providers or financial institutions where such services are used.
E. Website and Technical Information
When you access our website or digital services, certain information may be collected automatically, including:
- IP address;
- browser type;
- device type;
- operating system;
- pages visited;
- referring URL;
- date and time of access;
- approximate location derived from network information;
- cookie identifiers; and
- website interaction and diagnostic information.
F. Communication Information
We may retain communications made through:
- email;
- telephone;
- website forms;
- messaging applications;
- appointment or quotation platforms;
- customer-support channels; and
- authorised digital agents.
3. How We Collect Personal Information
We may collect information:
- directly from you;
- from your employer or organisation;
- from hospitals, healthcare providers or diagnostic partners;
- during screening or medical camps;
- from healthcare professionals and technicians providing services;
- through Medrento’s website and digital platforms;
- through authorised third-party service providers;
- when you request a quotation or appointment;
- when you communicate with us; and
- where permitted by law, from publicly available or legitimate third-party sources.
Medrento’s website currently links users to a third-party scheduling service for quotation/contact bookings. Information provided through such third-party services may additionally be governed by that provider’s privacy practices.
4. Why We Use Personal Information
We may process personal information for purposes including:
Providing Healthcare Services
To:
- organise and conduct medical or screening camps;
- perform requested screenings or diagnostic procedures;
- coordinate healthcare workers and technicians;
- provide equipment and medical-device rental services;
- communicate screening information where appropriate;
- coordinate appointments, referrals or support;
- provide digital patient-engagement services; and
- fulfil services requested by healthcare organisations.
Customer and Business Support
To:
- respond to enquiries;
- provide quotations;
- process service requests;
- manage bookings;
- communicate with customers;
- provide technical or operational support;
- manage complaints; and
- maintain our business relationships.
Operational and Administrative Purposes
To:
- manage contracts;
- process payments and invoices;
- coordinate equipment logistics;
- maintain service records;
- manage vendors and partners;
- undertake internal reporting; and
- improve operational efficiency.
Improving Our Services
We may analyse aggregated or appropriately protected information to:
- understand service performance;
- improve user experience;
- develop new healthcare services;
- enhance website functionality;
- identify operational issues; and
- improve the safety and reliability of our systems.
Communications and Marketing
Subject to applicable law and consent requirements, we may use contact information to communicate:
- service updates;
- healthcare awareness information;
- new products or services;
- events and medical camps;
- educational content; and
- promotional communications.
You may opt out of promotional communications at any time.
Legal, Regulatory and Safety Purposes
We may process information where reasonably necessary to:
- comply with applicable laws;
- comply with lawful requests from authorities;
- establish or defend legal claims;
- prevent fraud or misuse;
- investigate security incidents; and
- protect patients, users, Medrento, our clients and other persons.
5. Consent and Lawful Processing
Where processing is based on consent, Medrento will seek consent that is appropriate to the nature and purpose of the processing.
The Digital Personal Data Protection Act provides that consent should be free, specific, informed, unconditional and unambiguous and should involve clear affirmative action. It also provides for withdrawal of consent where consent is the basis for processing.
Depending on applicable law and circumstances, personal information may also be processed for other uses permitted by law.
Withdrawal of consent will not affect processing lawfully undertaken before the withdrawal and may not require deletion where continued retention or processing is necessary under applicable law.
6. Medical and Health Information
Given the nature of Medrento’s services, we recognise that health information requires particular care.
We will seek to limit collection of health information to what is reasonably necessary for the relevant service.
Access to such information should be restricted to personnel, healthcare professionals, service providers or organisations that require the information for an authorised purpose.
Medrento does not sell patient medical records or health information to third parties for advertising purposes.
Where Medrento performs services on behalf of a hospital, pharmaceutical company, diagnostic centre or other healthcare organisation, health information may be processed in accordance with that organisation’s instructions and applicable contractual and legal requirements.
7. Sharing of Personal Information
We may disclose relevant personal information to authorised parties where reasonably necessary, including:
- hospitals and healthcare providers;
- diagnostic centres and laboratories;
- doctors and authorised healthcare professionals;
- nurses, phlebotomists, technicians, dieticians and physiotherapists;
- medical-equipment suppliers and service technicians;
- Medrento’s corporate clients;
- information technology and cloud-service providers;
- communication and messaging providers;
- appointment and scheduling providers;
- payment-processing providers;
- professional advisers such as auditors or legal advisers;
- logistics providers;
- regulatory, government or law-enforcement authorities when legally required; and
- other service providers necessary to deliver Medrento services.
We expect service providers receiving personal data from us to process such information only for authorised purposes and subject to appropriate confidentiality, contractual and security requirements.
8. We Do Not Sell Personal Information
Medrento does not sell or rent personal information or medical information to third parties in exchange for monetary consideration.
We may share information with authorised service providers and business partners only where necessary for providing services, fulfilling contractual requirements, complying with law or other purposes described in this Policy.
9. Data Retention
We retain personal information only for as long as reasonably necessary for:
- providing the requested service;
- maintaining healthcare or service records where required;
- contractual obligations;
- resolving disputes;
- regulatory or legal requirements;
- accounting and taxation requirements;
- fraud prevention and security; or
- another lawful purpose.
Different categories of information may therefore be retained for different periods.
When information is no longer required, we will take reasonable steps to delete, anonymise, aggregate or securely dispose of it, subject to applicable legal requirements.
10. Information Security
Medrento takes reasonable administrative, organisational, physical and technical measures designed to protect personal information from:
- unauthorised access;
- loss;
- misuse;
- alteration;
- unauthorised disclosure;
- destruction; and
- other unlawful processing.
Measures may include, where appropriate, access controls, authentication, encryption, secure backups, restricted personnel access, confidentiality obligations, system monitoring and security assessments.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
If a personal-data breach occurs, Medrento will take appropriate containment, investigation, remediation and notification measures as required under applicable law.
11. Cookies and Similar Technologies
Medrento’s website may use cookies and similar technologies to:
- enable website functionality;
- remember preferences;
- understand website usage;
- improve performance;
- detect security issues; and
- measure the effectiveness of communications or campaigns.
Cookies may include:
Essential Cookies required for website operation and security.
Functional Cookies used to remember preferences or improve functionality.
Analytics Cookies used to understand how visitors interact with the website.
Marketing Cookies, where used and permitted, may help measure or personalise marketing activities.
You can restrict or disable cookies through your browser settings. Certain website features may not function correctly if essential cookies are disabled.
12. Third-Party Websites and Services
Our website may contain links to external websites, appointment services, social-media platforms or other third-party services.
Medrento does not control the privacy practices of independent third parties. We recommend reviewing their privacy policies before providing personal information.
13. International Processing and Transfers
Some technology providers or service providers supporting Medrento may operate infrastructure in multiple jurisdictions.
Where personal information is transferred or processed outside India, Medrento will seek to ensure that such processing complies with applicable Indian law and any restrictions notified by the Government of India.
The DPDP Act permits the Central Government to restrict transfers of personal data to specified countries or territories.
14. Children’s Personal Information
Certain Medrento healthcare activities may involve children or persons below 18 years of age.
Where children’s personal information is processed, we will take steps required under applicable law, which may include obtaining appropriate consent from a parent or lawful guardian and applying additional safeguards.
We do not knowingly use children’s personal data for behavioural advertising or inappropriate profiling.
15. Your Privacy Rights
Subject to applicable law and relevant exemptions, you may have the right to:
- request information about personal data being processed;
- request correction of inaccurate personal information;
- request completion or updating of personal information;
- request deletion or erasure of personal information where applicable;
- withdraw consent where processing is based on consent;
- opt out of marketing communications;
- raise a grievance regarding processing of your personal information; and
- exercise any additional rights provided under applicable privacy legislation.
The DPDP Act provides, among other things, rights relating to access, correction, updating, erasure and grievance redressal, subject to its applicable provisions.
To exercise a privacy right, contact us using the details below. We may need to verify your identity before fulfilling certain requests.
16. Marketing Preferences
If you have consented to or otherwise lawfully receive promotional communications from Medrento, you may opt out at any time by:
- following an unsubscribe instruction provided in the communication;
- informing the Medrento representative contacting you; or
- emailing us at info@medrento.com.
You may continue to receive non-promotional communications relating to active services, appointments, transactions, safety matters or contractual obligations.
17. Data Processed on Behalf of Medrento Clients
Medrento works with healthcare organisations including hospitals, pharmaceutical companies, diagnostic centres, NGOs and corporates.
In some engagements, Medrento may process personal or patient information solely on behalf of such organisations.
Where this occurs:
- the client organisation may remain responsible for determining why the information is processed;
- Medrento will process information according to applicable contractual instructions;
- requests concerning that information may need to be referred to the relevant client; and
- Medrento will apply appropriate confidentiality and security requirements.
18. Automated and Digital Healthcare Services
Medrento offers technology-enabled healthcare and Digital Medical Agent services intended to improve patient communication and engagement. The website describes these services as supporting activities such as appointment scheduling, prescription-refill communications and medical enquiries.
Where automated technologies are used, we will seek to use personal information only for authorised purposes and maintain appropriate human oversight where required.
19. Changes to this Privacy Policy
We may update this Privacy Policy periodically to reflect:
- changes to our services;
- changes to technology;
- regulatory developments;
- changes to our data-processing practices; or
- security and operational requirements.
The updated version will be published on this website with a revised Last Updated date.
Material changes may also be communicated through other appropriate channels where required.
20. Applicable Law
This Privacy Policy is intended to operate in accordance with applicable Indian privacy and information-technology laws, including, as applicable:
- the Information Technology Act, 2000;
- the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
- the Digital Personal Data Protection Act, 2023; and
- the Digital Personal Data Protection Rules, 2025 and other regulations or notifications issued thereunder as and when applicable.
The DPDP Rules, 2025 were formally published in November 2025 with different provisions scheduled to commence at different stages.
21. Grievance and Privacy Contact
If you have questions about this Privacy Policy, wish to exercise your privacy rights or have a complaint regarding the handling of your personal information, please contact:
Privacy / Grievance Officer
Medrento
Girgaon, Mumbai, Maharashtra, India – 400 004
Email: info@medrento.com
Phone: +91 772 8888 909
Website: Medrento.com
These contact details correspond to those currently published by Medrento.
We will endeavour to acknowledge and resolve privacy-related grievances within the timelines required under applicable law.