Legal

Privacy Policy

Last updated: 1 June 2026 · Governed by the laws of India

This policy explains how OncoBharat collects, uses, stores, and protects your personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made thereunder.

On this page

  1. Who we are & scope
  2. Data we collect
  3. Purpose & legal basis
  4. Consent & withdrawal
  5. Sharing & disclosure
  6. Storage & security
  7. Your rights
  8. Children's data
  9. Cookies
  10. Grievance Officer

01Who we are & scope

OncoBharat ("OncoBharat", "we", "us", or "our") operates the website www.OncoBharat.com, an India-focused oncology knowledge platform. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), OncoBharat acts as a Data Fiduciary in respect of the personal data of its readers, subscribers, and contributors (each a "Data Principal").

This policy applies to personal data processed in connection with our website and services, whether you access them from within India or elsewhere, where such processing is in connection with offering goods or services to individuals in India.

02Personal data we collect

We collect only the data necessary to operate the platform and deliver the services you ask for:

  • Information you give us — your email address when you subscribe to our newsletter; your name, email, and message when you use our contact form; and, for contributors, your name, professional credentials, biography, photograph, and article content.
  • Information collected automatically — limited technical and usage data such as device type, browser, approximate location derived from IP address, and pages viewed, used to keep the platform secure and improve the reading experience.

Health information. OncoBharat is an information platform. We do not ask for, and request that you do not submit, your own health records, diagnostic reports, or other "Sensitive Personal Data or Information" (as defined under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011) through our forms.

03Purpose & legal basis for processing

We process your personal data for the following specified, lawful purposes:

  • To send newsletters, updates, and awareness communications you have opted in to receive.
  • To review, edit, and publish contributed articles and to credit their authors.
  • To respond to enquiries, contribution requests, and grievances.
  • To maintain the security, integrity, and performance of the platform and to comply with applicable law.

In line with the DPDP Act, we process personal data either on the basis of your consent or for certain "legitimate uses" permitted under the Act, such as responding to a communication you have voluntarily initiated.

04Consent & its withdrawal

Where we rely on consent, we ask for it through a clear, affirmative action — for example, submitting the subscription form. Your consent is limited to the purpose for which it was given.

You may withdraw your consent at any time, as easily as it was given: by clicking the "unsubscribe" link in any email, or by writing to our Grievance Officer below. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

05Sharing & disclosure

We do not sell your personal data. We share it only:

  • With trusted service providers (such as email-delivery and hosting providers) who process data on our instructions under appropriate contractual safeguards;
  • Where required to do so by law, by a court of competent jurisdiction, or by a lawful request from a government agency acting under the Information Technology Act, 2000 or other applicable statute.

06Storage, security & retention

We implement reasonable security practices and procedures consistent with the IT Act, 2000 and the SPDI Rules, 2011 to protect personal data against unauthorised access, disclosure, or loss. We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law, after which it is deleted or anonymised.

In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act.

07Your rights as a Data Principal

Subject to the DPDP Act, you have the right to:

  • Access a summary of the personal data we hold about you and how it is processed;
  • Request correction, completion, updating, or erasure of your personal data;
  • Nominate another individual to exercise your rights in the event of death or incapacity;
  • Readily withdraw consent and have a grievance redressed.

To exercise any of these rights, contact our Grievance Officer. We will respond within the timelines prescribed under applicable law.

08Children's data

Our services are intended for adults. In line with the DPDP Act, we do not knowingly process the personal data of children (individuals below 18 years) without verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

09Cookies & analytics

We use only essential cookies and privacy-respecting analytics needed to keep the site working and to understand which topics are most useful. You can control or disable cookies through your browser settings; some features may not function fully if cookies are disabled.

10Grievance Officer

In accordance with the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, you may address any grievance regarding the processing of your personal data to our Grievance Officer:

Grievance Officer — OncoBharat
Email: grievance@oncobharat.com
Postal: OncoBharat, Bengaluru, Karnataka, India
We acknowledge grievances within 24 hours and aim to resolve them within 15 days, or within the period prescribed by law.

If you remain dissatisfied, you may escalate your complaint to the Data Protection Board of India as constituted under the DPDP Act, 2023.