1. INTRODUCTION
Cureocity Healthtech ("Cureocity," "Company," "we," "us," or "our") operates the website located at www.cureocity.in and related pages, including our Home, Healthscape, Core Assessment, Blog/Resources, and Careers pages (collectively, the "Website"). We provide science-backed, assessment-first health, fitness, nutrition, and wellness services through our physical health centers in Kochi and Kozhikode, Kerala, and we use the Website to describe our services, allow visitors to book assessments and consultations, and share educational content.
This Privacy Policy explains what personal information we collect through the Website, how we use and share it, the cookies and tracking technologies we use, and the choices and rights available to you. By visiting or using the Website, you acknowledge that you have read and understood this Privacy Policy.
1.1 Relationship to the Cureocity Client App
This Privacy Policy governs the Website only. If you register for and use the separate Cureocity client mobile or web application (the "App") to manage bookings, upload health records, connect wearables, or receive AI-generated wellness insights, your use of the App is governed by the App's own, separate Terms and Conditions and Privacy Policy, which contain more detailed provisions about health-data processing, data safety, and account/data deletion within the App. Where the Website links or connects you to the App (for example, to complete a booking), the App's own privacy policy will apply from the point you begin using the App.
2. INFORMATION WE COLLECT
2.1 Information You Provide to Us
We collect information you voluntarily submit through the Website, including when you:
Use a "Book a Visit," "Get a Consultation Call," "Talk to a Performance Coach," "Assess Your Fitness Level," or similar call-to-action form to request an assessment, consultation, or callback;
Contact us by phone, WhatsApp, email, or a contact form to make an enquiry;
Request or download a sample report, brochure, or other resource;
Subscribe to our newsletter, blog, or marketing communications;
Apply for a position through our Careers page; or
Otherwise correspond with our team.
This information typically includes your name, email address, phone number, city/location, and the nature of your enquiry, and, where you choose to share it (for example, in describing your goals or current health status when requesting an assessment), may include health-related details such as symptoms, medical history, fitness goals, or existing health conditions.
2.2 Health Information
Because our services relate to medical, psychological, fitness, and nutritional care, information submitted through our forms or discussed with our team in connection with a booking may constitute sensitive health information, including medical history, symptoms, and health conditions. We collect this information only where you choose to provide it (for example, to help us prepare for a consultation or assessment) and treat it as a sensitive category of personal data warranting heightened protection, as described in Section 7.
2.3 Information Collected Automatically
When you visit the Website, we and our service providers automatically collect certain technical information, including your IP address, browser type and version, device and operating system information, referring/exit pages, pages viewed, time spent on pages, and access times, using cookies, pixels, and similar technologies described in Section 3.
2.4 Information from Third Parties
We may receive limited information about you from third parties, such as when you interact with our social media pages (Facebook, Instagram, YouTube, and X/Twitter), engage with our advertising on third-party platforms, or are referred to us by an existing client or partner.
3. COOKIES AND TRACKING TECHNOLOGIES
3.1 What We Use
We use cookies and similar tracking technologies (such as pixels, tags, and local storage) to operate the Website, remember your preferences, understand how visitors use our Website, and support our marketing efforts. These generally fall into the following categories:
Strictly Necessary Cookies: required for core Website functionality (for example, page navigation and security).
Analytics and Performance Cookies: help us understand how visitors interact with the Website, including through behavioral metrics, heatmaps, and session replay.
Advertising and Marketing Cookies: used to measure the effectiveness of our marketing campaigns and, where applicable, to show you more relevant advertising on other websites and platforms.
3.2 Microsoft Clarity and Microsoft Advertising
We currently partner with Microsoft Clarity and Microsoft Advertising to capture how visitors use and interact with the Website through behavioral metrics, heatmaps, and session replay, and to help us and Microsoft improve and market our products and services. This data is captured using first- and third-party cookies and similar tracking technologies to help us understand the popularity of our services and online activity, and is also used for site optimization, fraud and security purposes, and advertising. For more information about how Microsoft collects and uses this data, please review the Microsoft Privacy Statement at privacy.microsoft.com.
3.3 Other Analytics and Advertising Tools
We may also use additional analytics or advertising tools (such as Google Analytics, Meta/Facebook Pixel, or similar services) from time to time to measure Website performance and marketing effectiveness. [Confirm and list the current, complete set of trackers/vendors live on the Website before publishing, together with their individual privacy policy links, as required for legal accuracy and for certain state and international cookie-disclosure laws.]
3.4 Managing Cookies
Most browsers allow you to refuse or delete cookies through your browser settings. You can also opt out of interest-based advertising from participating companies through industry tools such as the Digital Advertising Alliance (optout.aboutads.info) or the Network Advertising Initiative (optout.networkadvertising.org), and you can review Microsoft's advertising opt-out options through the Microsoft Privacy Statement. Please note that blocking or deleting cookies may affect the functionality of the Website.
4. HOW WE USE YOUR INFORMATION
We use the information we collect to:
Respond to your enquiries and schedule assessments, consultations, and visits to our centers;
Provide, operate, and improve the Website and our services;
Personalize the content, recommendations, and offers we show you;
Send you appointment confirmations, service updates, and, where you have consented, marketing communications;
Conduct analytics and research to understand Website usage and improve our marketing;
Maintain the security and integrity of the Website and prevent fraud or misuse;
Comply with applicable laws, regulations, and lawful requests from authorities; and
Evaluate job applications submitted through our Careers page.
5. LEGAL BASIS FOR PROCESSING
Where applicable law requires a legal basis for processing, we rely on: your consent (for example, when you submit a form, subscribe to communications, or accept non-essential cookies); our legitimate interests in operating, securing, and marketing the Website in a manner that is not overridden by your rights; and compliance with our legal obligations. Where you provide health-related information, we treat this as a sensitive category of data and process it only on the basis of your explicit, informed consent, given by voluntarily submitting that information to us.
6. HOW WE SHARE YOUR INFORMATION
We do not sell, trade, or rent your personal information to third parties without your consent. We may share information with:
Our clinical and wellness staff (doctors, dietitians, trainers, psychologists, and center staff) at our Kochi and Kozhikode centers, solely to respond to your enquiry or deliver the service you requested;
Service providers who help us operate the Website and our business, including website hosting and content-delivery providers, analytics and advertising partners (including Microsoft, as described in Section 3), email/SMS/WhatsApp communication providers, and customer-relationship-management tools, each of whom is authorized to use your information only as necessary to provide services to us;
Professional advisors (such as legal or accounting advisors) where necessary;
Regulators, law enforcement, or other parties where required by law, to protect our rights, or to protect the safety of any person; and
A successor entity in connection with a merger, acquisition, financing, or sale of assets, subject to that entity's continued obligation to protect your information consistently with this Policy.
7. SENSITIVE PERSONAL DATA (HEALTH INFORMATION)
Health-related information you share with us through the Website (for example, in describing symptoms, medical history, or health goals when requesting an assessment) is treated as sensitive personal data. We limit access to this information to personnel and clinical staff who need it to respond to your enquiry or coordinate your requested service, apply additional access safeguards to it, and do not use it for advertising or share it with our analytics or advertising partners described in Section 3. You are never required to provide health information through the Website in order to browse our pages; it is only collected where you choose to share it as part of a specific enquiry, booking, or intake process.
8. DATA RETENTION
We do not keep personal information for longer than necessary. We retain the categories of information described in Section 2 for the specific periods set out below, after which we securely delete or anonymize it, unless a longer period is required to comply with a legal, tax, accounting, or regulatory obligation, to establish or defend a legal claim, or unless you ask us to delete it sooner as described in Section 10.
8.1 Retention Periods by Category
Enquiry and contact-form submissions (name, email, phone, message content): retained for up to 24 months from your last interaction with us, or until you request earlier deletion, so that we can respond to follow-up questions and maintain business records.
Booking, assessment, and consultation records, including any health information you choose to share (medical history, symptoms, health conditions, assessment goals): retained for a minimum of 3 years from the date of your last visit or consultation, consistent with applicable medical record-keeping practice in India, or for the longer period required by applicable law, after which it is securely deleted or anonymized.
Newsletter, blog, and marketing-communication subscriptions: retained until you unsubscribe or withdraw consent, plus up to 30 days to process that request across our systems and service providers.
Careers / job-application submissions: retained for up to 12 months after the relevant recruitment process concludes, after which they are deleted unless you have separately consented to our retaining your details for future opportunities.
Website technical and log data (IP address, browser and device information, pages visited, access times): retained for up to 12 months for security, fraud-prevention, and website-analytics purposes.
Cookies and analytics/advertising data (Microsoft Clarity, Microsoft Advertising, and any other tools listed in Section 3): retained in line with each provider's own retention schedule — generally for the duration of your browsing session up to a maximum of 13 months for persistent cookies — unless you clear or block cookies earlier through your browser settings or an opt-out tool referenced in Section 3.4.
Backups and archived systems: where you request deletion of your information, we remove it from our live, active systems within 30 days and from backup archives within 90 days, except to the extent a longer period is required by law.
8.2 No Indefinite Retention
We do not retain any personal information indefinitely. If we introduce a new category of data collection through the Website that is not listed in Section 8.1, we will update this Policy to disclose the applicable retention period (or state that we do not retain that data) before or at the time we begin collecting it.
9. DATA SECURITY
We employ industry-standard administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction, including access controls and secure hosting infrastructure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security of information you transmit to us through the Website.
10. YOUR RIGHTS AND CHOICES
Subject to applicable law, you have the right to:
Access the personal information we hold about you and request a copy of it;
Request correction of inaccurate or incomplete information;
Request deletion of your personal information, subject to legal retention requirements;
Withdraw consent to processing (including marketing communications and non-essential cookies) at any time, without affecting the lawfulness of processing carried out before your withdrawal;
Opt out of receiving marketing communications from us by using the unsubscribe link in any email, replying "STOP" to SMS/WhatsApp messages where offered, or contacting us directly; and
Lodge a complaint with us (see Section 17) or, where applicable in India, with our Grievance Officer as described in Section 14, or with your local data protection authority.
To exercise these rights, please contact us using the details in Section 17. We may need to verify your identity before fulfilling certain requests.
11. CHILDREN'S PRIVACY
The Website is intended for adults seeking health, fitness, and wellness services and is not directed to children. We do not knowingly collect personal information from children under 18 through the Website. If you believe a child has provided us with personal information, please contact us so we can take appropriate steps to remove it.
12. THIRD-PARTY LINKS AND SOCIAL MEDIA
The Website may contain links to third-party websites and our social media pages (including Facebook, Instagram, YouTube, and X/Twitter). We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party site you visit.
13. INTERNATIONAL DATA TRANSFERS
We are based in India, and information you submit through the Website is primarily processed and stored in India. Some of our service providers (including certain analytics, advertising, and cloud-hosting providers referenced in Section 3 and Section 6) may process information outside India, including in the United States. Where we transfer personal information internationally, we take steps intended to ensure it receives an adequate level of protection consistent with applicable law.
14. SPECIAL PROVISIONS FOR INDIAN VISITORS
Where you access the Website from India, the following apply in addition to the rest of this Policy:
We process your personal data as a "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and rely on your consent, or another legal basis recognized under the DPDP Act, to process your personal data, including any sensitive health information you choose to share with us.
You have the rights of a "Data Principal" under the DPDP Act, including the right to obtain a summary of the personal data we process about you, the right to correction and erasure, the right to grievance redressal, and the right to nominate another individual to exercise your rights in the event of your death or incapacity.
We have appointed a Grievance Officer in accordance with the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. Contact details are provided in Section 17. We will acknowledge grievances and endeavor to resolve them within the timeframes prescribed by applicable rules.
Nothing in this Policy limits any additional rights available to you under the Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020.
15. SPECIAL PROVISIONS FOR U.S. VISITORS
Where you access the Website from the United States, the following apply in addition to the rest of this Policy:
If you are a resident of a U.S. state with a comprehensive consumer privacy law (such as the California Consumer Privacy Act, as amended, or a comparable state law), you may have the right to know what personal information we collect, use, and disclose about you; the right to delete your personal information; the right to correct inaccurate personal information; the right to opt out of the "sale" or "sharing" of personal information (including for cross-context behavioral advertising, which may occur through advertising cookies such as those described in Section 3.2 and 3.3); and the right to be free from discrimination for exercising these rights.
To opt out of the sale or sharing of your information, or to submit any other privacy rights request, please contact us at enquiries@cureocity.in. We will verify and respond to requests as required by applicable law.
If you are a resident of a state with a consumer health data law (such as Washington's My Health My Data Act or a comparable law), you have the right to withdraw consent to the collection, sharing, or use of "consumer health data" you have submitted through the Website, and we will honor valid deletion requests in accordance with applicable timeframes.
We currently do not respond to browser "Do Not Track" signals, as no common industry standard for recognizing such signals has been adopted; however, you may exercise the cookie and opt-out choices described in Section 3.4 and this Section at any time.
16. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, the Website, or applicable law. Any updates will be posted on this page with a revised "Last Updated" date. Where required by applicable law, we will provide additional notice of material changes or seek your renewed consent. We encourage you to review this Policy periodically.
17. CONTACT US
If you have questions about this Privacy Policy, wish to exercise your rights, or need to raise a grievance, please contact us at:
Cureocity Healthtech
Email: enquiries@cureocity.in
Phone: +91 9249 089 357, +91 8848 815 508[Text Wrapping Break][Text Wrapping Break]Registered Address: Athimannil House, karuvambram P.O, Mangalasseri, Manjeri, Malappuram, Kerala 676123
Kochi: Door 56, RCC Building, G-355, Panampilly Nagar, Kochi, Ernakulam, Kerala 682036
Calicut: Signature Atria, Rajeev Nagar, KP Chandran Rd, near AVM Associates, Kozhikode, Kerala 673004
Contact: admin@cureo.city