2. Use of information:

2.1. We use Your Information, for the following: (i) To create Your login credentials to establish Your account; (ii) to provide and improve the Services and features on the Platform that You request; (iii) to resolve disputes and troubleshoot problems; (iv) to help promote a safe service on the Platform and protect the security and integrity of the Platform, the Services and the users; (v) to customize Your experience on the Platform or share marketing material with You; (vi) to detect, prevent and protect Us from any errors, fraud and other criminal or prohibited activity on the Platform; (vii) to enforce and inform about our terms and conditions; (viii) to process and fulfil Your request for Services or respond to Your comments, and queries on the Platform; (ix) to contact You; (x) to communicate important notices or changes in the Services provided by the Company, use of the Platform and the terms which govern the relationship between You and Us; (xi) for any other purpose after obtaining Your consent at the time of collection; and (xii) sharing and disclosure of data with third parties. Any collection of additional information and documents shall be subject to Your consent after intimating You of the purpose for such collection.

2.2. We may occasionally ask You to complete optional online surveys. These surveys may ask You for Your contact information and demographic information (like zip code, age etc.,). We use this information to tailor Your experience at the Platform, providing You with content that We think You might be interested in and to display content according to Your preferences.

2.3. We use Your Personal Information to send You communications regarding the Services, as well as send You promotional emails / transaction updates, however, We will provide You the ability to opt-out of receiving such emails from Us If You opt out, the Company may still send You non-promotional emails, such as emails about the Services and Your account on the Platform. Unless and until You explicitly give Your consent to Us to do so, We will not share Your Personal Information with another user of the Platform and vice versa.

2.4. Notwithstanding anything contained herein, the Company may, in compliance with applicable laws in India, process Your Personal Information without obtaining Your consent in the event: (i) You have voluntarily provided Your Personal Information to Us, and You have not indicated to Us that You do not consent to Our use of such Personal Information; (ii) the purpose is for the State and any of its instrumentalities to provide or issue to You such subsidy, benefit, service, certificate, licence or permit as may be prescribed by the Central Government; (iii) the purpose is for performance by the State or any of its instrumentalities of any function under any law for the time being in force in India or in the interest of sovereignty and integrity of India or security of the State; (iv) the purpose is for fulfilling any obligation under any law for the time being in force in India on any person to disclose any information to the State or any of its instrumentalities, subject to such processing being in accordance with the provisions regarding disclosure of such information in any other law for the time being in force; (v) the purpose is for compliance with any judgment or decree or order issued under any law for the time being in force in India, or any judgment or order relating to claims of a contractual or civil nature under any law for the time being in force outside India; (vi) the purpose is for responding to a medical emergency involving a threat to the life or immediate threat to Your health of or any other individual; (vii) the purpose is for taking measures to provide medical treatment or health services to any individual during an epidemic, outbreak of disease, or any other threat to public health; (viii) the purpose is for taking measures to ensure safety of, or provide assistance or services to, any individual during any disaster, or any breakdown of public order. In such an event the Company is in no manner responsible for informing You or seeking Your approval or consent.

3. Sharing of Information:

3.1. Access to your Personal Information will be provided to some of Our employees strictly on a need-to-know basis. With Your consent, We may also disclose Your Personal Information to third party vendors, partnered organizations, consultants, bankers, payment gateways, escrow agents, trustees, administrators, auditors, accountants, technology vendors, KYC verification partners, data storage companies and other service providers etc., who work for the Company or provide Services through the Platform and are bound by contractual obligations to keep such Personal Information confidential and use it only for the purposes for which We disclose it to them. This disclosure may be required for Us, for instance, to provide You access to Our Services, to facilitate and assist Our marketing and advertising activities/initiatives, for undertaking auditing or data analysis, or to prevent, detect, mitigate, and investigate fraudulent or illegal activities related to Our Services.

3.2. We use a variety of third-party service providers and vendors to help Us provide the Services to You. For example, service providers which assist Us to: (i) verify Your identity or authenticate Your identification documents; (ii) perform product development, software and website maintenance and debugging; (iii) allow the provision of the Services through third party platforms and software tools (e.g. through the integration with our API’s); (iv) provide customer service, advertising, or payments services; (v) processing payments including validation of Your bank accounts and account information; (vi) to facilitate and assist Our marketing and advertising activities/initiatives; (vii) for undertaking auditing or data analysis; or (viii) to prevent, detect, mitigate, and investigate fraudulent or illegal activities related to Our Services. These providers have access to Your Personal Information to the extent required to perform these tasks on Our behalf and are contractually bound to protect and to use it only for the purposes for which it was disclosed and consistent with this Privacy Policy. In this regard, You specifically agree and consent to Us collecting, transferring, and sharing information (including Personal Information) related to You with third party service providers solely for providing Services to You including processing Your requests to avail the Services. You may request to view the names of third parties with whom We share Your information.

3.3. The Company may also disclose Your Information, to the extent necessary: (i) to comply with applicable laws and to respond to lawful requests and legal process, (ii) to protect the rights and property of the Company, Our users, and others, including to enforce the Terms, and (iii) in an emergency to protect the personal safety and assets of the Company, the users, or any person. In such an event the Company is in no manner responsible for informing You or seeking Your approval or consent.

3.4. We may, in compliance with applicable laws, share/transfer/assign all of Your Information with any other business entity(ies), in the event of a merger, sale, re-organization, amalgamation, joint ventures, assignment, restructuring of business or transfer or disposition of all or any portion of Our business.

3.5. We do not disclose Your Personal Information to third parties for their marketing and advertising purposes without Your explicit consent.

3.6. You agree and explicitly consent to disclosure of Your Personal Information to such third-parties and for such purposes as mentioned in this Clause 3. Please note that to this extent, you will also be subject to the terms of use and privacy policy that is maintained by such third-party service providers.

4. Security Precautions and Measures:

4.1. Our Platform has reasonable security measures and safeguards in place to protect Your privacy and Personal Information from loss, misuse, unauthorized access, disclosure, destruction, and alteration of the information in compliance with applicable laws. Further, whenever You change or access Your Account on the Platform or any information relating to it, We offer the use of a secure server. We cannot however ensure or warrant the security of any information You transmit to the Company or guarantee that Your Information provided for availing the Services or Platform may not be accessed, disclosed, altered, or destroyed by a breach of any of Our security measures and safeguards. It is further clarified that You have and so long as You access and/or use the Platform (directly or indirectly) the obligation to ensure that You shall at all times take adequate physical, managerial, and technical safeguards, at Your end, to preserve the integrity and security of Your data which shall include and not be limited to Your Personal Information.

4.2. This Privacy Policy and the security controls and practices implemented by the Company to protect Your Personal Information shall be the reasonable security practices and procedures under section 43A of the Information Technology Act, 2000, or any other reasonable security practices and procedures that may be stipulated under any applicable law for the time being in force.

5. Links to Other third - party sites and collection of information:

5.1. Our Platform may provide links to other third - party Platforms (“Third - Party Sites”) that may collect Your Personal Information including Your IP Address, browser specification, or operating system. The Company is not in any manner responsible for the security of such information or their privacy practices or content of those third-party sites. Additionally, You may also encounter “cookies” or other similar devices on certain pages of the Third - Party Sites and it is hereby clarified by the Company that it does not control the use of cookies by these Third - Party Sites. These third-party service providers and Third-Party Sites may have their own privacy policies governing the storage and retention of Your Information that You may be subject to. This Privacy Policy does not govern any information provided to, stored on, or used by these third- party providers and Third-Party Sites. We recommend that when You enter a Third-Party Site, You review the Third-Party Site's privacy policy as it relates to safeguarding of Your Information. You agree and acknowledge that We are not liable for the information published in search results or by any Third-Party Sites.

6. Public Posts:

6.1. You may provide Your feedback, reviews, testimonials, etc. on the Platform on Your use of the Services provided by the Company ("Posts"). Any content or Personal Information and Posts that You share or upload on the publicly viewable portion of the Platform will be publicly available and can be viewed by other users. Your Posts shall have to comply with the conditions relating to use of Platform as mentioned in the Terms. The Company retains an unconditional right to remove and delete any Post or such part of the Post that, in the opinion of the Company, does not comply with the conditions in the Terms. The Company reserves the right to use, reproduce and share Your Posts for any purpose. If You delete Your Posts from the Platform, subject to compliance with the applicable laws, copies of such Posts may remain viewable in archived pages, or such Posts may have been copied or stored by other Users.

7. Your rights and changes to Privacy Policy:

7.1. Withdrawal of consent: You may choose to withdraw Your consent (including consent provided for processing of Your Personal Information or other information by Us or by any third party on our behalf) provided hereunder at any point in time. Such withdrawal of the consent must be sent in writing to Support@Altdrx.com. In case You do not provide Your consent or later withdraw Your consent, We request You not to access the Platform or use the Services and also reserve the right to not provide You any Services on the Platform. In such a scenario, the Company may delete Your Information or de-identify it so that it is anonymous and not attributable to You. In the event, the Company retains the Personal Information post withdrawal or cancellation of Your consent, it shall retain it only for the period permitted under applicable laws.

7.2. Modifying or correcting inaccuracies in the information: In the event that any Personal Information already provided by You is inaccurate, incomplete or outdated, You may correct or update any such information online. You have the right to ask Us to correct inaccurate or incomplete or misleading Personal Information concerning You or update Your Personal Information (which You cannot update yourself online) by contacting Support@Altdrx.com. In the event of loss of access details, You may retrieve the same or receive new access details by sending an e-mail to: Support@Altdrx.com.

7.3. Right to Erasure: This is also known as ‘the right to be forgotten’ and, in simple terms, enables You to request the deletion or removal of Your Information where there’s no compelling reason for Us to keep it. Such right of erasure can be exercised by writing to Us at Support@Altdrx.com. This is not a general right to erasure; there are exceptions, such as when the law requires Us to retain certain Personal Information about You and the transactions You have executed on the Platform or where such retention is required for providing the Services to You, etc. On such a request for erasure, we shall delete all Your Personal Information stored by Us, as well as ensure that any third party service provider processing Your Personal Information on behalf of us deletes all Your Personal Information, unless retention of the same is necessary for the providing the Services or for compliance with any applicable law for the time being in force.

7.4. Right to certain information: You have the right to ask Us for a (i) summary of Your Personal Information being processed by Us and the processing activities undertaken by Us with respect to such Personal Information; and (ii) the identities of all other third party entities with whom Your Personal Information has been shared by Us, along with a description of the Personal Information so shared, except when such sharing is pursuant to a written request by such entity (authorized by law) who obtains the information for the purpose of prevention or detection or investigation of offences or cyber incidents, or for prosecution or punishment of offences.

7.5. Right to nominate: You shall have the right to nominate, in a manner prescribed by the Central Government, any other individual, who shall, in the event of Your death or incapacity, exercise Your rights in relation to Your Personal Information, in accordance with applicable law in India.

7.6. Use of a consent manager: You are permitted to give, manage, review or withdraw Your consent provided to Us to process Your Personal Information through a ‘consent manager’. A consent manager is an entity that is registered with the Data Protection Board. The consent manager is accountable to You and can assist you in providing or withdrawing your consent to Us to process Your Personal Information, on Your behalf. Such consent managers must comply with the obligations imposed on them as may be prescribed by the Central Government.

7.7. Changes To Our Privacy Policy: We reserve the unconditional right to change, modify, add, or remove portions of this Privacy Policy at any time, by notifying You of such changes. Any changes or updates will be effective immediately. You should review this Privacy Policy regularly for changes. You can determine if changes have been made by checking the “Last Updated” legend above.

8. Data Retention and Deletion

8.1. We shall be entitled to retain Your Information for such duration as may be required for the purposes specified hereunder or for such other periods as may be required under the applicable laws and the said information will be used by Us only in accordance with this Privacy Policy. However, We may retain Your Information if we believe it may be necessary to prevent fraud or future abuse, to enable Us to exercise our legal rights and/or defend against legal claims or if required by law or for other legitimate purposes. Notwithstanding anything contained herein, We will not retain your Personal Information and other information for longer than the periods provided below

8.2. We shall be entitled to retain Your Information for such duration as specified above, and Your Information will be used by Us only in accordance with this Privacy Policy. You acknowledge that if We determine that any information You have provided or uploaded violates the terms of this Privacy Policy, We have the right, in our absolute discretion, to delete or destroy such Your Information without incurring any liability to You.

8.3. You hereby agree, acknowledge and grant Your consent enabling Us to retain Your Personal Information for Our compliance under applicable laws including but not limited to the Prevention of the Money Laundering Act, 2002 or the Prevention of Money Laundering (Maintenance of Records) Rules, 2005 as amended, modified/ reenacted from time to time and/ or any other guidelines/policies issued by government/ statutory authorities or any regulatory bodies in this regard.

8.4. When the retention period for Your Personal Information as outlined above expires, We will actively destroy/delete such Personal Information from our systems. We may, however, continue to retain Your Personal Information in anonymized form for analytical and research purposes. However, We shall not retain Your Personal Information if it is no longer required by Us and there is no legal requirement to retain the same. Do note that multiple legal bases may exist in parallel, and We may still have to retain certain data and information at any time.

9. Your Duties:

9.1. You shall, at all times, ensure that:

(i). While exercising Your rights under applicable data protection law, you must comply with the provisions of all applicable laws in India;

(ii). You do not impersonate another person while providing Your Personal Information for a purpose specified to You at the time of collecting such Personal Information;

(iii). You do not suppress any material information while providing Your Personal Information for any document, unique identifier, proof of identity or proof of address issued by the Central Government or any of its instrumentalities

(iv). You do not to register a false or frivolous grievance or complaint with the Grievance Redressal Officer or the Data Protection Board;

(v). You furnish only such information as is verifiably authentic, while exercising Your right to modification, correction, update or erasure under applicable laws in India.

10. Grievance Officer:

You have the right to readily available means of grievance redressal in respect of any act or omission committed by Us or your consent manager regarding the performance of our obligations under this Privacy Policy or the exercise of Your rights in relation to Your Personal Information. If You have any grievance with respect to the Platform or the Services, You may write to the grievance officer, the name and contact details have been provided below:

Name: Sonia Jangda

Email: Compliance@Altdrx.com

In the event You have exhausted Your opportunity of redressing your grievances with respect to Your Personal Information through the Grievance Redressal Officer, you may approach the Data Protection Board established under the Digital Personal Data Protection Act, 2023, in a manner as may be prescribed by the Central Government.

11. Questions?

Please feel free to contact us at Support@Altdrx.com regarding any questions on the Privacy Policy.