Effective date: 7 August 2026 · STARFIT INDIA PRIVATE LIMITED
This Privacy Policy explains how STARFIT INDIA PRIVATE LIMITED (“StarFit”, “we”, “us”) collects, uses, shares and protects personal data when you use our website, mobile app, or the employee health benefit platform provided through your employer (together, the “Services”). It is written to reflect the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian law.
This policy applies to employees and their registered dependents who access StarFit through an employer plan, to HR administrators who manage a company's StarFit account, and to visitors of starfitindia.com.
We use personal data to provide the Services — booking consultations, processing diagnostics and pharmacy orders, maintaining your health records within the app, verifying eligibility against your employer's roster, and communicating with you about your benefit. We also use aggregated, de-identified data to report utilisation trends to your employer and to improve the Services.
Your employer's HR administrators can see plan enrolment, dependent registration status and aggregate utilisation statistics. They cannot see the clinical details of any consultation, diagnosis, prescription or medical record — that information is visible only to you, the treating provider, and authorised StarFit personnel who need it to deliver the service.
We process your personal data on the basis of the consent you provide when registering for the Services, and as necessary to perform our obligations to you and your employer. You may withdraw consent at any time by contacting us, though this may limit our ability to provide certain Services.
We share the minimum necessary information with verified doctors, diagnostic labs, pharmacies and wellness partners in our network solely to deliver the care you request, and with service providers who help us run the platform (such as cloud hosting) under contractual confidentiality obligations. We do not sell personal data.
We use encryption in transit and at rest, role-based access controls, and vetted infrastructure providers. Full detail is available on our Security & Trust page.
We retain personal data for as long as your employer's plan is active and for a reasonable period afterward to meet legal, medical record-keeping and audit obligations, after which it is securely deleted or anonymised.
You have the right to access the personal data we hold about you, request correction of inaccurate data, request erasure where legally permissible, and withdraw consent. You may also nominate another individual to exercise these rights on your behalf in the event of your death or incapacity. To exercise any of these rights, contact our Grievance Officer — see our Grievance Redressal page.
Where dependents under the age of 18 are registered under a parent or guardian's plan, we process their data based on the consent of that parent or guardian, in line with the DPDP Act's requirements for processing children's personal data.
Our website uses essential cookies required for the site to function, and may use analytics cookies to understand aggregate visitor behaviour. You can control cookies through your browser settings.
We may update this policy from time to time. Material changes will be notified through the app or by email. Continued use of the Services after an update constitutes acceptance of the revised policy.
For any privacy questions or requests, contact us at info@starfitindia.com or +91 90003 55100, or write to STARFIT INDIA PRIVATE LIMITED, T-HUB, 20, Inorbit Mall Rd, Madhapur, Telangana 500081.