Effective Date: 01 August 2025

Numen Healthcare PTE Limited, a company incorporated under the Companies Act, 2013, having its registered office in India (“Numen”, “Company”, “we”, “our” or “us”), is committed to safeguarding the privacy of individuals who access and use its website www.numenhealthcare.com (“Website”).

This Privacy Policy explains how personal data is collected, processed, stored, disclosed, and protected in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and other applicable laws of India.

By accessing or using this Website or submitting any information through it, you (“User”, “you”, or “Data Principal”) acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

ARTICLE I – SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies solely to personal data collected through the Website, including data submitted via enquiry or contact forms. It does not apply to offline data collection or to third-party websites linked to or from this Website.

ARTICLE II PERSONAL DATA COLLECTED

We may collect the following personal data when you voluntarily submit it through the Website:

• Full name
• Email address
• Mobile number
• City, state, or location
• Professional or organizational details (if shared)
• Any other information voluntarily provided in your message or communication

Numen does not collect sensitive personal data unless voluntarily disclosed by the User.

ARTICLE III PURPOSE OF COLLECTION AND PROCESSING

Personal data collected by Numen shall be processed for legitimate business purposes, including but not limited to:

• Responding to enquiries, requests, or communications
• Providing customer, technical, or business-related support
• Maintaining internal records and correspondence
• Improving the Website, services, and user experience
• Complying with applicable legal, regulatory, or contractual obligations

Numen does not use personal data for unsolicited marketing communications unless explicit consent is obtained.

ARTICLE IV LEGAL BASIS FOR PROCESSING

Personal data is processed on the basis of explicit and voluntary consent provided by the User at the time of submitting information through the Website.

Submission of any enquiry or information through the Website constitutes consent to the processing of such personal data in accordance with this Privacy Policy.

ARTICLE V WITHDRAWAL OF CONSENT

Users may withdraw their consent by submitting a written request using the contact details provided under Article 12 of this Privacy Policy.

Upon acknowledgement of the withdrawal request by Numen, the consent shall cease to be valid and effective, and further processing of personal data shall be discontinued, except where retention or processing is required under applicable law, regulatory obligations, dispute resolution, or enforcement of legal rights.

Numen shall process withdrawal requests within a reasonable period.

ARTICLE VI Disclosure and Sharing of Personal Data

Personal data may be disclosed only in the following circumstances:

• To authorized employees, officers, or representatives of Numen on a strict need-to-know basis
• To comply with legal obligations, court orders, or requests from governmental or regulatory authorities
• To protect the rights, property, or safety of Numen, its users, or the public

Numen does not sell, rent, or commercially exploit personal data.

ARTICLE VII DATA STORAGE AND RETENTION

Personal data is stored on secure systems and retained only for as long as:

• Necessary to fulfill the purpose for which it was collected
• Required under applicable laws or regulations
• Necessary for legal, audit, or compliance purposes

Numen reserves the right to retain personal data where required to establish, exercise, or defend legal claims.

ARTICLE VIII DATA SECURITY MEASURES

Numen employs reasonable and appropriate technical and organizational safeguards to protect personal data, including:

• Secure servers and access controls
• Encrypted data transmission (HTTPS)
• Limited internal access to personal data

While Numen endeavours to protect personal data, no system can guarantee absolute security, and Users acknowledge and accept this inherent risk.

ARTICLE IX USER OBLIGATIONS

Users represent and warrant that:

• The personal data provided is true, accurate, and lawful
• They have the authority to share such information
• They shall not submit false, misleading, or unauthorized information

Numen shall not be responsible for inaccuracies or misuse arising from incorrect data provided by Users.

ARTICLE X THIRD-PARTY WEBSITES

The Website may contain links to third-party websites. Numen does not control and is not responsible for the privacy practices, content, or security of such third-party websites. Accessing such websites is at the User’s own risk.

ARTICLE XI RIGHTS OF DATA PRINCIPALS

Subject to the DPDP Act, Users have the right to:

• Access their personal data
• Request correction or updating of personal data
• Request deletion of personal data, subject to legal obligations
• Withdraw consent for processing

Requests shall be addressed within a reasonable timeframe in accordance with applicable law.

ARTICLE XII GRIEVANCE REDRESSAL AND CONTACT INFORMATION

For any queries, concerns, or grievances relating to this Privacy Policy or processing of personal data, Users may contact:

Email: corporate@numenhealthcare.com

Numen shall address grievances in accordance with the DPDP Act, 2023.

ARTICLE XIII CHANGES TO THIS PRIVACY POLICY

Numen reserves the right to amend or update this Privacy Policy at any time without prior notice. Any changes shall be effective upon posting on the Website with a revised effective date.

Continued use of the Website after such changes constitutes acceptance of the updated Privacy Policy.

ARTICLE XIV GOVERNING LAW AND JURISDICTION

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Courts having jurisdiction at Chennai, Tamil Nadu shall have exclusive jurisdiction, subject to statutory provisions.