Privacy Policy

1. Introduction

Devenv (“we”, “us”, “our” or the “Company”) is a healthcare information technology company headquartered in India, operating globally together with its group entities, including InnoMediTech (Dubai, UAE) and Zamtrutech Limited (Lusaka, Zambia). We design, develop and implement healthcare software solutions, including the InnoCare Hospital Management System (HMS), the SimpliRad PACS and radiology platform, and tele-radiology services.

This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit our website, contact us, request a product demonstration, or otherwise interact with us. By using our website, you agree to the practices described in this Policy.

2. Information We Collect

We may collect the following categories of information:

• Contact information: name, email address, phone number, job title, organisation name and country, when you fill in a contact form, request a demo, subscribe to updates, or correspond with us.
• Business information: details about your hospital, clinic or organisation that you choose to share with us in connection with an enquiry or proposal.
• Technical and usage data: IP address, browser type, device information, pages visited, time spent on pages and referral source, collected automatically through cookies and analytics tools.
• Communications: the content of emails, messages and call notes exchanged with us.

Our website is intended for business and professional use. We do not knowingly collect personal information from children under the age of 18 through this website.

3. Patient and Clinical Data — Important Note

Where our products (such as InnoCare HMS or SimpliRad PACS) process patient or clinical data, we do so on behalf of our hospital and healthcare clients under separate written agreements, acting as a data processor / service provider. The hospital or healthcare provider remains the data controller / data fiduciary responsible for that data. Questions about patient data held in a client system should be directed to the relevant healthcare provider.

4. How We Use Your Information

We use the information we collect to:

• Respond to enquiries, demo requests and support questions;
• Prepare and send proposals, quotations and product information;
• Provide, maintain and improve our website, products and services;
• Send marketing communications and product updates, where permitted (you may opt out at any time);
• Analyse website usage to improve content and user experience;
• Comply with legal, regulatory, tax and audit obligations; and
• Protect our legal rights and prevent fraud or misuse of our website.

5. Legal Bases and Compliance

We process personal data in accordance with applicable laws, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India), and, where applicable to visitors from other jurisdictions, the EU/UK General Data Protection Regulation (GDPR) and other local data protection laws. Depending on the context, we rely on your consent, the performance of a contract or pre-contractual steps, our legitimate business interests, or compliance with legal obligations.

6. Cookies and Analytics

Our website uses cookies and similar technologies to enable core functionality, remember preferences and analyse traffic. We may use third-party analytics services (such as Google Analytics) that collect information about your use of the website. You can control or disable cookies through your browser settings; however, some parts of the website may not function properly without them.

7. Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Group entities: Devenv, InnoMediTech and Zamtrutech, for the purposes described in this Policy;
• Service providers: hosting, email, analytics, CRM and communication providers who process data on our behalf under appropriate safeguards;
• Professional advisers: lawyers, accountants and auditors where reasonably necessary;
• Authorities: where required by law, court order or governmental request; and
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to confidentiality protections.

8. International Data Transfers

As we operate across India, the Middle East and Africa, your information may be transferred to and processed in countries other than your own. Where we do so, we take reasonable steps to ensure your information receives an adequate level of protection consistent with this Policy and applicable law.

9. Data Security

We implement reasonable technical and organisational security measures — including access controls, encryption in transit and secure hosting — designed to protect personal information against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, to comply with legal obligations, resolve disputes and enforce agreements. When information is no longer required, we securely delete or anonymise it.

11. Your Rights

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information;
• Withdraw consent where processing is based on consent;
• Object to or restrict certain processing, including direct marketing; and
• Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, contact us using the details in Section 14. We will respond within the timelines required by applicable law.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. Continued use of the website after changes are posted constitutes acceptance of the updated Policy.