International privacy notice

This notice supplements our India privacy notice and applies to individuals in the European Economic Area, the United Kingdom, the United States, and other jurisdictions. It describes our alignment with the EU General Data Protection Regulation (GDPR) and the safeguards we apply to health information consistent with the U.S. Health Insurance Portability and Accountability Act (HIPAA). We are not a HIPAA "covered entity"; we act as a service provider and apply HIPAA-style safeguards to protected health information you share with us.

1. Controller and contact

Nischidha Imaging Services Pvt Ltd (Bengaluru, India) is the controller of your data. Contact our Grievance / Data Protection contact via the grievance page.

2. Lawful bases (GDPR Art. 6 & 9)

• Consent (Art. 6(1)(a) and Art. 9(2)(a) for health data).
• Contract performance (Art. 6(1)(b)) — delivering the service you purchased.
• Legal obligation, vital interests, or legitimate interests, where applicable.

3. Your rights

• Access, rectification, erasure, restriction, portability, and objection.
• Withdraw consent at any time without affecting prior processing.
• Lodge a complaint with your local supervisory authority.

4. International transfers

Data is processed in India and by sub-processors that may be outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and equivalent mechanisms.

5. HIPAA-style safeguards

• Administrative: role-based access, workforce training, written policies.
• Physical: secured facilities and controlled equipment access.
• Technical: encryption in transit and at rest, audit logging, unique user IDs, automatic logoff, minimum-necessary use.

We can execute a Business Associate Agreement with U.S. covered entities on request.

6. Retention

We retain data only for the duration of service delivery and legally required record-keeping periods, then delete or de-identify it.

7. Cookies and tracking

We use only strictly necessary cookies by default and request consent for optional analytics. See our India privacy notice for the cookie inventory.