Privacy policy
This policy explains what personal data Confidra collects, why, how long we keep it, and the rights you have over it under the Digital Personal Data Protection Act, 2023.
Last updated: 28 July 2026
1. Who we are
Confidra is a programme operated by Confid Health Private Limited (formerly Kosha Ops Cloud Private Limited), CIN U86909KA2025PTC211795, with its registered office at No. 9/18, 2nd Cross, Chinamma Layout, Madiwala, Bangalore South, Bengaluru — 560068, Karnataka, India.
For the purposes of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), Confid Health Private Limited is the Data Fiduciary for the personal data described in this policy. You are the Data Principal.
2. What we collect
- Identity and contact data
- Name, phone number, email address, city, and age or date of birth where required to confirm eligibility.
- Health data
- Medical history, current medicines, laboratory results, readings you log, symptoms you report, and clinical notes recorded by your physician or pharmacist. This is sensitive personal data and is treated accordingly.
- Programme data
- Check-in messages with your Programme Guide, appointment records, consultation records, and progress summaries.
- Transaction data
- Reservation and programme payment records. Card and banking details are processed by our payment gateway and are never collected or stored by Confidra.
- Website data
- Anonymised usage analytics via Google Analytics 4 — pages viewed, approximate region, device type, and which buttons are used. This helps us improve the site. We do not use analytics to identify you.
3. Why we use it, and on what basis
- To deliver the programme — to schedule and conduct consultations, arrange lab collection, build your plan, and run your check-ins. Processed on the basis of your consent, given at sign-up.
- To provide clinical care — so your physician and pharmacist can make safe decisions with a complete picture.
- To meet legal obligations — including medical-records retention and tax or accounting requirements.
- To communicate with you — appointment reminders, programme updates, and replies to your enquiries.
We do not sell your personal data. We do not use your health data for advertising, and we do not share it with advertisers or data brokers.
4. Who we share it with
- Your treating physicians and clinical team, who need it to care for you.
- Partner laboratories, limited to what is needed to collect and process your sample.
- Service providers that run our scheduling, communication, payment and hosting infrastructure, under contract and only for those purposes.
- Authorities, where disclosure is required by law or by a valid legal process.
5. How long we keep it
- Clinical records are retained for a minimum of seven years, in line with applicable medical-records retention norms.
- Transaction records are retained as long as tax and company law require.
- Enquiry data where you did not join the programme is deleted within 12 months.
- Data no longer needed for any of the above is erased or anonymised.
6. How we protect it
Access to your data is restricted to the people who need it to deliver your care. Data is held on approved systems with access controls, and staff and clinicians are bound by confidentiality obligations. If a personal data breach occurs, we will notify affected Data Principals and the Data Protection Board of India as required under the DPDP Act.
7. Your rights
Under the DPDP Act you have the right to:
- Obtain a summary of the personal data we hold about you and how it is processed.
- Have inaccurate or incomplete data corrected, updated or completed.
- Have your data erased, except where we are required by law to keep it.
- Withdraw your consent at any time. Withdrawal does not affect processing already carried out, and may mean we can no longer deliver the programme.
- Nominate another person to exercise your rights in the event of your death or incapacity.
- Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied.
To exercise any of these rights, write to grievance@confidra.health from the email address on your account.
8. Children
Confidra is for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child’s data has been provided to us, contact our Grievance Officer and we will erase it.
9. Cookies and analytics
This website uses Google Analytics 4 to understand how the site is used. You can block analytics using your browser settings or an extension without any loss of function on this site. We do not use advertising cookies or cross-site tracking pixels.
10. Grievance Officer
Grievance Officer: Nithin Karthick · grievance@confidra.health
Phone: +91 99444 40094
Address: No. 9/18, 2nd Cross, Chinamma Layout, Madiwala, Bangalore South, Bengaluru — 560068, Karnataka, India.
We acknowledge every grievance within 48 hours and resolve it within 30 days of receipt.
11. Changes to this policy
If we change this policy we will update the date at the top of this page, and notify enrolled members by email where the change is material.
12. Entity details
Confidra is a programme of Confid Health Private Limited (formerly Kosha Ops Cloud Private Limited) · CIN U86909KA2025PTC211795 · No. 9/18, 2nd Cross, Chinamma Layout, Madiwala, Bangalore South, Bengaluru — 560068