CONSENT FOR PROCESSING HEALTH DATA

1. INTRODUCTION

[INSERT LEGAL ENTITY NAME], a company incorporated under the Companies Act, 2013, operating under the brand "Aarog Health Records" ("Aarog", "Company", "we", "our", "us").

This Consent for Processing Health Data ("Consent") forms part of the Aarog Health Records legal framework and should be read together with the Privacy Policy, Terms & Conditions, End User License Agreement (EULA), Data Retention Policy, and other applicable policies.

By selecting "I Agree", creating an account, or using Aarog Health Records ("Aarog"), you voluntarily provide your explicit consent for the collection, storage, processing, and use of your Personal Data and Health Data in accordance with this Consent.

If you do not agree, you should not upload health records or use features that require processing of Health Data.

2. PURPOSE OF THIS CONSENT

Aarog is a secure digital health record management platform.

To provide the Services, Aarog must process certain Personal Data and Health Data that you voluntarily provide.

This Consent explains:

• what Health Data is processed;
• why it is processed;
• how it is protected;
• your choices regarding such processing; and
• your rights concerning your Health Data.

3. YOUR VOLUNTARY CONSENT

You acknowledge and agree that:

• you are voluntarily providing your Health Data;
• you understand the nature of the information being processed;
• you authorize Aarog to process such information solely for the purposes described in this Consent and the Privacy Policy;
• you understand that certain Services cannot function without processing the information you choose to provide.

Where processing is based on your consent, you may withdraw that consent as described in this document, subject to legal and operational limitations.

4. TYPES OF HEALTH DATA YOU MAY PROVIDE

Depending on your use of Aarog, you may voluntarily upload or enter:

• prescriptions;
• laboratory reports;
• diagnostic reports;
• radiology reports;
• discharge summaries;
• vaccination records;
• hospital records;
• medical certificates;
• allergy information;
• chronic disease information;
• surgical history;
• medication history;
• blood group;
• vital signs (such as blood pressure, blood sugar, pulse, height, weight, BMI);
• emergency contact details;
• health notes created by you; and
• any other health-related documents you choose to upload.

You are under no obligation to upload any specific document unless required for a feature you choose to use.

5. PURPOSES FOR PROCESSING HEALTH DATA

You consent to Aarog processing your Health Data for purposes including:

• securely storing your health records;
• organizing and categorizing records;
• enabling retrieval and viewing of records;
• creating a chronological health timeline;
• managing family health profiles where authorized;
• generating medicine, vaccination, appointment, or health reminders;
• enabling secure sharing of records when instructed by you;
• responding to customer support requests;
• maintaining platform security;
• preventing fraud and unauthorized access;
• complying with legal or regulatory obligations; and
• improving the functionality, reliability, and security of the Services.

Where new features require materially different processing, Aarog will seek any additional consent required by Applicable Law.

6. FAMILY MEMBER DATA

You may choose to manage Health Data for Family Members.

By uploading or managing such information, you represent and warrant that:

• you have the lawful authority to do so; or
• you have obtained the necessary consent from the relevant individual; or
• you are acting as the parent or lawful guardian of a minor.

You agree to indemnify Aarog against claims arising from unauthorized submission or management of another person's Health Data.

7. CHILDREN AND MINORS

Health Data relating to a person below the age of eighteen (18) years may only be uploaded by a parent or lawful guardian, or another person authorized under Applicable Law.

The parent or guardian is responsible for:

• providing consent;
• ensuring the accuracy of uploaded information;
• exercising privacy rights on behalf of the minor where permitted by law.

8. OWNERSHIP OF HEALTH DATA

You remain the owner of your Health Data or represent that you are authorized to act on behalf of the lawful owner.

Uploading information to Aarog does not transfer ownership of your Health Data to Aarog.

You grant Aarog only a limited, revocable, non-exclusive authorization to store, organize, encrypt, retrieve, display, back up, and process your Health Data solely for providing the Services and complying with legal obligations.

9. NO MEDICAL ADVICE

You acknowledge that:

• Aarog does not diagnose diseases;
• Aarog does not prescribe medicines;
• Aarog does not interpret reports;
• Aarog does not provide medical opinions;
• Aarog does not replace healthcare professionals.

Any reminders, document organization, timelines, or future AI-assisted features are provided for informational purposes only.

10. SHARING OF HEALTH DATA

Aarog will not share your Health Data with third parties except:

• with your authorization;
• where necessary to provide the Services you request;
• where required by Applicable Law or a lawful order;
• to protect the rights, safety, or security of users or Aarog; or
• as otherwise described in the Privacy Policy.

Aarog does not sell your Health Data to third parties.

11. SECURITY OF HEALTH DATA

Aarog employs reasonable administrative, technical, and organizational safeguards designed to protect Health Data.

These measures may include:

• encryption in transit;
• encryption at rest;
• secure authentication;
• access controls;
• audit logging;
• backups;
• security monitoring.

While Aarog takes reasonable measures, no method of electronic storage or transmission can be guaranteed to be completely secure.

12. WITHDRAWAL OF CONSENT

You may withdraw your consent at any time by:

• deleting specific Health Data;
• deleting your account; or
• contacting Aarog through the designated support channels.

Withdrawal of consent will not affect processing already carried out before the withdrawal.

Certain information may continue to be retained where required by Applicable Law or for legitimate purposes such as fraud prevention, dispute resolution, or security.

13. YOUR RIGHTS

Subject to Applicable Law, you may have the right to:

• access your Health Data;
• request correction of inaccurate information;
• request deletion of information;
• export your records where functionality is available;
• withdraw consent for future processing based on consent;
• lodge a grievance through Aarog's grievance mechanism.

Aarog may require reasonable verification of identity before acting on such requests.

14. CHANGES TO THIS CONSENT

Aarog may update this Consent from time to time to reflect changes in:

• applicable law;
• technology;
• Services;
• security practices; or
• business operations.

Where required, Aarog will notify Users of material changes and obtain renewed consent if legally necessary.

15. CONTACT INFORMATION

Questions regarding this Consent may be addressed through Aarog's official support channels.

Grievance Officer

• Name: Arpan Gupta
• Email: support@aaroghealthrecords.com
• Registered Office: 206, Millenium Garden, Peer Muchalla, Zirakpur, Punjab

16. USER DECLARATION

By selecting "I Agree" or using Aarog features that require processing of Health Data, you declare and confirm that:

• You have carefully read this Consent.
• You understand the nature and purpose of the processing.
• You voluntarily provide your consent.
• You are authorized to provide any Health Data relating to yourself or, where applicable, your Family Members.
• You understand that Aarog is a technology platform for managing health records and does not provide medical diagnosis, treatment, prescriptions, or emergency healthcare services.
• You understand that you may withdraw your consent as described in this document, subject to applicable legal and operational limitations.