1. How we ask for consent
Under the DPDP Act, consent must be free, specific, informed, unconditional and unambiguous, given by a clear affirmative action, and limited to the data needed. So we:
- show a clear notice before collecting, listing each item of data and its purpose;
- ask separately for each purpose — never bundled into terms of service;
- never use pre-ticked boxes or treat silence as consent;
- offer the notice in English and, on request, in Hindi, Punjabi or another language listed in the Eighth Schedule of the Constitution.
2. Permissions we may ask for
| Permission | Used for | How you grant it |
|---|---|---|
| Email contact | Reply to messages you send us. | You choose to email us |
| Optional cookies | Analytics, if ever added. | Cookie banner — off until you accept |
| Health records (at launch) | Store and share your records with providers you approve. | Separate, explicit consent per record type and per provider |
3. Withdrawing consent
You can withdraw consent at any time, as easily as you gave it: clear the cookie choice in your browser, or email us. Once you withdraw, we stop processing and erase the data unless the law requires us to keep it. Withdrawal does not affect what was lawfully done before.
4. Consent Managers
When registered Consent Managers become available under the DPDP Rules, you will be able to give, manage, review and withdraw your consent to us through one of them as well.
5. Children and people needing a guardian
For anyone under 18, or a person with a disability who has a lawful guardian, we require verifiable consent from the parent or guardian before processing their data.
6. Records
We keep a record of the consents given and withdrawn, so we can show what you agreed to and when.
Grievance Officer & contact
Grievance Officer: Rajesh Kumar, Founder
Email: info@curakey.in
Address: CuraKey, a product of Vermaco Healthcare, Sahibzada Ajit Singh Nagar (Mohali), Punjab, India
We acknowledge requests promptly and resolve them within the time the law allows (currently no more than 90 days) — we aim for 7 working days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.