Privacy Policy

Last updated: 06 October 2026

This policy explains how personal data is handled in Sahasra LIS GenX. Centromed Labs Pvt. Ltd. decides why and how patient and staff data is processed (the data fiduciary). ATHEN TECH India Pvt Ltd provides and supports the System on its behalf.

1. Data we process

• Patients: name, age, gender, contact details, identifiers, referring doctor or partner, tests ordered, samples, results, reports and billing.
• System users: user ID, name, department, location, role, sign-in and sign-out times, IP address, device/browser type and an audit trail of actions.
• Partners and doctors: organisation and contact details, pricing, billing and payment records.

2. Why we process it

• To register patients, run tests, produce and deliver reports, and bill for services.
• To keep the System secure: authentication, session control, account lockout, IP restrictions and audit logs.
• To meet legal, accreditation (e.g. NABL) and quality obligations, and to manage the business through dashboards and reports.

3. Sharing

Data is shared only as needed: with the patient or their authorised representative, referring doctors and partners for their own orders, referral laboratories for outsourced tests, payment and messaging providers used to deliver reports and receipts, and authorities where the law requires it. We do not sell personal data.

4. Security

Access is limited by role and location. The System uses individual accounts, password policies, lockout after repeated failures, one active session per user, session time-outs, optional network (IP) restrictions and audit logging. Staff must keep data confidential.

5. Retention

Medical records and reports are retained for the periods required by law, accreditation standards and Centromed's retention policy. Audit and sign-in logs are kept as long as needed for security and compliance.

6. Your rights

Under applicable law, including the Digital Personal Data Protection Act, 2023, you may ask to access or correct your personal data, ask questions about how it is used, and raise a grievance. Some medical records must be retained even if deletion is requested.

7. Third-party services in this application

The dashboard shows local weather from Open-Meteo (only the laboratory's configured coordinates are sent) and checks internet connectivity by contacting a Google connectivity endpoint. No patient data is sent to these services.

8. Contact and grievances

For privacy questions or grievances contact Centromed, 040-35162093, customercare@centromedlabs.com.