Privacy Policy

Caspian Healthcare Foundation ("we") respects your privacy and processes your personal data in line with India's Digital Personal Data Protection Act, 2023. This policy explains what we collect, why, and your rights.

What we collect

• Enquiry details: name, email, phone/WhatsApp, city and role.
• Application details (to enrol): your title and the name as it should appear on your certificate, date of birth, medical council and registration number, qualification and specialty, workplace, your permanent and correspondence addresses, a passport-style photograph, and your responses about your goals and preferences.
• Payment information is handled by our payment gateway, Razorpay; we do not store your card or bank details.

Identity & medical-registration verification

So that a certificate is issued to a genuinely registered doctor and is publicly verifiable, we may verify your details through a licensed verification provider (Surepass Technologies):

• Medical registration (NMC / State Medical Council): we check the registration number you provide against the National Medical Register to confirm your registered name.
• Aadhaar via DigiLocker, only with your explicit, separate consent: you sign in to your own DigiLocker and choose to share your Aadhaar. We use this solely to confirm that your name matches and to obtain your address.

We never store your Aadhaar number. We retain only the outcome of the check (verified: yes/no), the verified name and address, and a reference number for audit. This verification is optional: if you decline, or a check cannot be completed, we simply review your application manually rather than refusing it. You may withdraw your consent at any time.

How we use it

• To respond to your enquiry, confirm your seat, run the course, and issue your certificate.
• To confirm eligibility and to print your name correctly on a verifiable certificate.
• To meet legal, accounting and tax obligations.

Sharing

We share data only with the service providers who help us run the course: our payment gateway (Razorpay), our identity-verification provider (Surepass), our database and secure file-storage provider (Supabase), and our email provider, and where required by law. We do not sell your data.

Retention & your rights

We keep enrolment records for as long as needed for the course, certification and legal requirements; your photograph and verified details are kept as part of your course record and certificate. Under the DPDP Act you may request access to, correction or deletion of your data, and withdraw consent, by writing to us. We will respond within a reasonable time.