Privacy notice (DPDP Act 2023)

01Who we are#

MargLabz is a product of Marg ERP Ltd., Delhi, India. This notice explains how we handle personal data through the MargLabz website and software, in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

Enquiries through this website

Marg ERP Ltd. is the Data Fiduciary — we decide why and how that data is used.

Patient data inside the product

The lab holding the account is the Data Fiduciary; Marg ERP Ltd. acts as a Data Processor on that lab's instructions.

02What we collect and why#

• Enquiry details you send us — lab name, your name, phone, email, city and your message — used only to respond to your enquiry and arrange a demo.
• Basic website analytics, used to understand which pages help lab owners and which do not.
• Patient and lab data inside the product, processed only on the instructions of the lab that holds the account.

03How we protect it#

Personal data is encrypted in transit and at rest. Access is role-based, each lab's data is isolated from every other lab's, and clinical and financial changes are recorded in an audit trail. We hold data only for as long as we need it or the law requires.

04How long we keep it#

Enquiry records are retained only as long as needed to follow up and to meet our legal obligations. Product data retention is set by the lab that holds the account under its own retention policy.

05Your rights#

• Access a summary of the personal data we hold about you.
• Ask us to correct or complete inaccurate data.
• Ask us to erase your data, where no legal obligation requires us to keep it.
• Withdraw consent at any time, and nominate someone to exercise these rights on your behalf.
• Raise a grievance with us, and escalate to the Data Protection Board of India if it is not resolved.

To exercise any of these, write to us using the details below. Where the data sits inside a lab's account, we will pass the request to that lab, because it is the lab — not us — that decides what happens to it.

06Changes to this notice#

This notice may be updated as our practices change. The version published here is always the current one, and the date it took effect is shown at the top of this page.