PRIVACY & DATA PROTECTION
Your health data stays yours.
Last updated: 18 September 2026. We review this policy as our services evolve and update the date above when we do.
CSR Lifestyle Private Limited, Hyderabad — connects Hyderabad residents with preventive healthcare: at-home sample collection, 24-hour digital lab reports, doctor consultations, and personalized care plans. This policy explains what personal information we collect, why, how we protect it, and the rights you hold.
Information we collect
When you book a home collection, join a waitlist, or reach out to us, we collect only what we need to care for you:
- → Full name, WhatsApp / phone number, and your Hyderabad locality or pincode
- → The health package or service you are interested in
- → Diagnostic results produced during your care journey with CSR Lifestyle
- → Any additional details you voluntarily share with your care team
Why we collect it
We use your information to schedule and deliver your care — never to sell it. Specifically:
- → To arrange certified phlebotomist visits across Hyderabad and call you back with a custom quote
- → To deliver digital lab reports to your WhatsApp and Email within 24 hours
- → To schedule doctor consultations and ongoing care-journey check-ins
- → To comply with legal, audit, and quality obligations
How reports are shared
Your diagnostic reports are shared only with you and the care staff actively working on your journey — the physicians and clinical coordinators who interpret results and guide your plan. We do not sell, rent, or trade your personal or diagnostic data with anyone.
Partners & service providers
Limited, essential third parties help us operate, and each is bound by access-only-what-is-needed practices:
- → Certified partner laboratories that produce your diagnostic results
- → Secure internal record-keeping and messaging services used only by our care team (e.g. Airtable, Discord)
- → WhatsApp, email, and phone carriers that physically deliver your reports and messages
Data security & retention
Diagnostic records are stored in encrypted systems with role-based access. We retain personal data only while your care journey is active and for the period needed to meet legal, clinical, and audit requirements. You can request deletion of your records at any time (subject to legal obligations to retain some records), and we will action it promptly.
Your rights & compliance
Our privacy practices are aligned with India’s Digital Personal Data Protection (DPDP) Act and apply HIPAA-grade safeguards wherever we serve international partners. You have the right to:
- → Access a copy of the personal data we hold about you
- → Ask us to correct inaccurate details
- → Object to, or withdraw consent for, specific uses
- → Request deletion or restriction of processing where permitted
To exercise any of these rights, contact us using the details below — we will respond within the timeframes required by law.
Cookies & analytics
This website does not use tracking cookies. The only thing stored on your device is your day/night theme preference in your browser’s local storage, so the site can remember how you like to view it. No behavioural profiling or advertising trackers are used.
External links
Links to WhatsApp, Instagram, and YouTube open third-party services with their own privacy policies. We encourage you to review those policies before using those services; once you leave this website, their terms apply.
Changes to this policy
If we change how we handle personal information, we will update this page and revise the "Last updated" date above. Material changes may also be announced through the website or by message via the contact details you have shared with us.
Contact us
Questions, requests, or privacy concerns? Reach the CSR Lifestyle care team: