VENDOR PRIVACY POLICY

Effective Date: 17-12-2025

Introduction

This Privacy Policy describes how Novus Health Labs (“Company”, “we”, “our”, “us”) collects, uses, processes, and protects information of vendors using the Novus Vendor App (“App”).

The Vendor App is used by authorized field vendors to:
  • Receive home sample collection assignments.
  • Accept or reject jobs.
  • Navigate to customer location.
  • Update job status
  • Submit samples to diagnostic centre

Location Data and GPS Tracking

The Novus Health Labs Vendor Application collects and processes location information to enable home healthcare and diagnostic sample collection services.

2.1 Location Information We Collect

We may collect the following location data when the application is in use:
  • Precise GPS location of vendor staff during patient home visits.
  • Background location data while a visit or assignment is active.
  • Address and map location entered for appointment and service delivery.
  • Device location coordinates required for navigation and visit verification.

2.2 Purpose of Collecting Location Data

Location data is collected strictly for operational and healthcare service purposes, including:
  • Assigning and navigating vendors to patient locations.
  • Enabling home sample collection services.
  • Verifying visit completion and service authenticity.
  • Improving logistics, routing efficiency, and service quality.
  • Ensuring safety and accountability during field operations

2.3 Background Location Usage

The application may access location data even when running in the background solely to:
  • Track active service visits
  • Monitor vendor travel status during assigned appointments
  • Location tracking stops when the visit is completed or the user logs out of the application.

2.4 How We Use Location Data

  • Location data is used only for healthcare service operations.
  • We do not use location information for advertising or marketing purposes.

2.5 Data Sharing

Location information may be shared only with:
  • Authorized Novus Health Labs administrators.
  • Healthcare operations teams.
  • Logistics personnel necessary to complete assigned services.
  • We do not sell or rent location data to third parties.

2.6 User Control

  • Users may enable or disable location permissions anytime through device settings.
  • However, disabling location access may limit app functionality.

2.7 Data Retention

Location data is stored only for as long as required to provide services, maintain operational records, and comply with legal obligations.

Information We Collect

3.1 Vendor Personal Information

  • Full Name
  • Phone Number
  • Email Address
  • Government ID (if required)
  • Employment/Contract Details

3.2 Customer Data Access (Limited Access)

Vendors may access limited customer information:
  • Name
  • Phone Number
  • Address
  • Test Details
  • Appointment Slot
  • Vendors are strictly prohibited from storing or misusing customer data outside the app.

3.3 Device Information

  • Device ID
  • IP Address
  • App activity logs
  • Crash reports

WhatsApp & Notification Integration

The App may send job-related notifications via:

  • In-app notifications
  • SMS
  • WhatsApp Business API
  • We do NOT access vendors’ personal chats. Communication is strictly service-related.

Data Sharing

We may share data only with:

  • Novus Health Labs diagnostic centre staff
  • Cloud service providers
  • Legal authorities (if required by law)
  • We do NOT sell vendor or customer data.

Data Security

We implement:
  • Encrypted communication (HTTPS/SSL)
  • Secure server storage
  • Role-based internal access
  • Authentication controls

Data Retention

Vendor data is retained:
  • During active engagement
  • As required by law
  • For compliance and audit purposes

Vendor Responsibilities

Vendors must:

  • Maintain confidentiality
  • Use data only for assigned tasks
  • Not share or misuse personal information
  • Violation may result in suspension or legal action.

User Control & Permissions

Vendors may:
  • Grant or deny location permission
  • Disable location access in device settings
  • However, disabling location may restrict job assignment functionality.

Compliance with Laws

This policy complies with:
  • Information Technology Act, 2000
  • IT Rules 2011 (India)
  • Google Play User Data Policy