Privacy Policy

1. Who We Are

Candid Health is a healthcare services and consulting organisation providing services across healthcare recruitment, accreditation advisory, hospital M&A and growth capital, clinical research facilitation, academic and research talent placement, medical tourism coordination, and NGO/community healthcare initiatives.

Our website describes Candid Health as a full-spectrum healthcare partner connecting healthcare institutions, professionals, investors, research organisations, NGOs, and other participants across the healthcare ecosystem.

For privacy-related questions or requests, you may contact us using the details provided in the Contact Us section of this Privacy Policy.

2. Information We Collect

Depending on how you interact with Candid Health, we may collect different categories of personal information.

A. Information You Provide Directly

This may include:

• Name
• Email address
• Telephone or mobile number
• Postal or professional address
• Organisation and designation
• Professional qualifications
• Educational background
• Employment history
• Professional experience
• Areas of medical or professional specialisation
• Registration or licence information where relevant
• CV/resume and other professional documents
• Information provided during recruitment or placement processes
• Information submitted through contact, enquiry, application, or consultation forms
• Information contained in correspondence with us
• Preferences and requirements relevant to a service you have requested
• Any other information you voluntarily provide to us

B. Recruitment and Professional Information

If you apply for or are considered for a role through Candid Health, we may collect information necessary to assess your suitability and facilitate recruitment.

This may include:

• CV/resume
• Qualifications and certifications
• Professional registrations
• Work history
• References
• Employment preferences
• Location preferences
• Availability
• Compensation expectations
• Professional achievements
• Interview or assessment information
• Information reasonably required to verify your professional credentials

Where permitted by law and appropriate to the role, we may also undertake professional or credential verification.

C. Healthcare-Related Information

Certain Candid Health services may involve healthcare-related information.

Where we process information relating to patients, prospective patients, caregivers, medical treatment, healthcare requirements, medical tourism, healthcare assistance, or clinical research, we will seek to collect and process only information reasonably necessary for the relevant purpose and in accordance with applicable law.

D. Information Collected Automatically

When you visit our website, certain information may be collected automatically, such as:

• IP address
• Browser type
• Device type
• Operating system
• Approximate location derived from technical information
• Pages visited
• Date and time of visits
• Referring website
• Interaction with website content
• Technical information relating to website performance and security

We may use cookies and similar technologies for functionality, analytics, security, and website improvement.

E. Information From Third Parties

Where appropriate and lawful, we may receive information from:

• Healthcare institutions
• Employers or prospective employers
• Recruitment partners
• Professional references
• Educational institutions
• Professional or regulatory bodies
• Hospitals and healthcare providers
• Pharmaceutical companies and CROs
• Investors or transaction participants
• NGOs and public-health organisations
• Service providers
• Other individuals or organisations involved in a service or transaction

3. How We Use Personal Information

We may use personal information for purposes including:

Recruitment and Talent Services

• Identifying suitable professional opportunities
• Matching candidates with healthcare institutions
• Communicating with candidates and employers
• Evaluating qualifications and experience
• Facilitating interviews and recruitment
• Verifying professional information
• Supporting onboarding and placement
• Providing post-placement support

Healthcare and Institutional Services

• Responding to enquiries
• Providing accreditation advisory services
• Supporting healthcare institutions with operational requirements
• Facilitating clinical research relationships
• Supporting academic and research talent placement
• Coordinating medical tourism services
• Supporting healthcare assistance initiatives
• Coordinating NGO and community healthcare programmes
• Providing other services requested by clients or partners

Business and Strategic Services

• Facilitating healthcare transactions
• Supporting M&A and investment-related engagements
• Connecting healthcare institutions with potential investors or partners
• Conducting due diligence
• Coordinating professional introductions
• Managing commercial relationships

Website and Communications

• Responding to messages and enquiries
• Providing requested information
• Sending service-related communications
• Improving our website and services
• Understanding how visitors use our website
• Maintaining website security
• Preventing fraud, misuse, or unauthorised activity
• Complying with legal and regulatory requirements

We may also send marketing or informational communications where permitted by applicable law. You may opt out of non-essential marketing communications at any time.

4. Legal Basis for Processing

Depending on the circumstances and applicable law, Candid Health may process personal information where:

• You have provided consent
• Processing is necessary to provide a service or respond to your request
• Processing is necessary to perform or take steps in relation to an agreement
• Processing is necessary to comply with a legal or regulatory obligation
• Processing is necessary for legitimate business purposes, where permitted by applicable law
• Processing is necessary to protect the rights, safety, or security of individuals
• Another lawful basis recognised under applicable law applies

Where consent is required, we will seek consent in an appropriate manner and, where applicable, provide a mechanism for withdrawing consent.

Withdrawal of consent will not affect processing that was lawfully carried out before consent was withdrawn.

5. Sharing of Personal Information

Candid Health does not sell personal information to third parties.

We may share personal information where reasonably necessary for the purposes described in this Privacy Policy.

Depending on the service involved, recipients may include:

• Hospitals and healthcare institutions
• Prospective employers
• Healthcare professionals
• Pharmaceutical companies and CROs
• Clinical research organisations and research sites
• Academic institutions
• Investors, investment firms, and transaction advisers
• NGOs and public-health organisations
• Professional advisers
• Technology and hosting providers
• Communication and customer-support providers
• Background or credential verification providers
• Payment and financial service providers, where applicable
• Government authorities, regulators, courts, or law-enforcement agencies where required
• Other parties where you have authorised or requested us to make the disclosure

We seek to limit disclosures to information reasonably necessary for the relevant purpose.

6. Recruitment Information

Candid Health operates in part as a healthcare recruitment and professional placement partner.

When you submit your profile, CV, qualifications, or other professional information to us, you acknowledge that such information may need to be shared with relevant prospective employers or healthcare institutions in order to identify and facilitate suitable opportunities.

We will seek to make such disclosures consistent with the recruitment or placement purpose for which the information was provided and applicable law.

You should ensure that information supplied to Candid Health is accurate and that you have the appropriate authority to provide any information relating to another person.

7. Healthcare and Patient Information

Because Candid Health operates within the healthcare ecosystem, certain engagements may involve information relating to patients or prospective patients.

Where healthcare-related information is processed:

• We seek to limit collection to information reasonably necessary for the relevant service
• Access may be restricted to individuals who require the information for the relevant purpose
• Information may be shared with appropriate healthcare providers, institutions, or service partners where necessary
• We may request appropriate consent or authorisation where required
• We will handle such information in accordance with applicable legal and contractual obligations

For medical emergencies, contact the appropriate emergency medical service or healthcare provider.

8. Clinical Research Information

Where Candid Health facilitates clinical research activities, personal information may be processed in connection with:

• Research-site identification
• Professional and institutional verification
• Study coordination
• Communication between research participants and relevant organisations
• Regulatory or compliance requirements
• Other activities necessary to facilitate legitimate research engagements

Clinical research activities may be subject to additional consent forms, study-specific privacy notices, agreements, or institutional policies. Where such documents apply, they will govern the relevant processing in addition to this Privacy Policy.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

These technologies may help us:

• Remember preferences
• Understand website usage
• Improve website functionality
• Measure website performance
• Maintain security
• Understand the effectiveness of communications or content

Where required by applicable law, we will seek appropriate consent before placing non-essential cookies or similar technologies.

You may also be able to control cookies through your browser or device settings. Disabling certain cookies may affect website functionality.

10. Third-Party Websites and Services

Our website or communications may contain links to websites, platforms, applications, or services operated by third parties.

Candid Health is not responsible for the privacy practices, content, security, or policies of third-party websites or services.

We encourage you to review the privacy policies of any third party before providing personal information to them.

11. Data Security

We take reasonable and appropriate measures designed to protect personal information against unauthorised access, use, alteration, disclosure, loss, destruction, or other unlawful processing.

Depending on the nature of the information and the processing involved, safeguards may include:

• Access controls
• Authentication mechanisms
• Organisational controls
• Confidentiality obligations
• Secure information handling practices
• Monitoring and security procedures
• Other technical and organisational safeguards appropriate to the circumstances

However, no method of transmission or storage can be guaranteed to be completely secure.

Accordingly, while we take reasonable steps to protect personal information, we cannot guarantee absolute security.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

• Providing or facilitating requested services
• Maintaining business and professional records
• Fulfilling contractual obligations
• Complying with legal, regulatory, tax, accounting, or reporting requirements
• Resolving disputes
• Enforcing agreements
• Protecting our legitimate interests

The appropriate retention period may vary depending on the nature of the information and the purpose for which it was collected.

When information is no longer required, we will seek to delete, anonymise, or otherwise dispose of it in accordance with applicable law and our internal practices.

13. Your Rights

Subject to applicable law, individuals may have rights relating to their personal information, which may include:

• The right to know about personal information being processed
• The right to access information concerning processing
• The right to request correction of inaccurate or incomplete information
• The right to request deletion or erasure where applicable
• The right to withdraw consent where processing is based on consent
• The right to obtain information regarding the manner in which personal information is processed
• The right to raise a grievance or complaint
• Other rights available under applicable data-protection law

The availability and scope of these rights may depend on the applicable law and the circumstances of processing.

To exercise a privacy right or raise a privacy-related concern, please contact us using the details below.

We may need to verify your identity before processing certain requests.

14. Grievances and Privacy Requests

If you have a question, concern, complaint, or request regarding the processing of your personal information, please contact:

Please include sufficient information to allow us to understand and respond to your request.

Where applicable, Candid Health will process privacy requests and grievances within the timelines prescribed by applicable law.

If you are dissatisfied with our response, you may have additional rights to approach the relevant regulatory or statutory authority in accordance with applicable law.

15. International Data Transfers

Some of our service providers, partners, clients, research organisations, technology providers, or other recipients may be located outside India.

Where personal information is transferred outside India, we will do so in accordance with applicable Indian law and any applicable contractual or regulatory requirements.

Additional safeguards may apply depending on the nature of the information, recipient, purpose, and applicable law.

16. Children’s Privacy

Our website and services are primarily intended for adults and organisations operating within the healthcare ecosystem.

We do not knowingly seek to collect personal information from children except where necessary for a legitimate healthcare, patient-support, research, or other lawful purpose and where appropriate safeguards and consent requirements apply.

If you believe that a child has provided personal information to us improperly, please contact us so that we can review the matter.

17. Accuracy of Information

We seek to maintain accurate and reasonably up-to-date personal information.

You are responsible for ensuring that information you provide to Candid Health is accurate, complete, and not misleading.

If your information changes, you may contact us to request an appropriate update.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our services
• Changes in technology
• Changes in our information practices
• Changes in applicable law or regulatory requirements
• Other operational or legal developments

When we update this Privacy Policy, we will revise the “Last Updated” date at the top of this page.

Where required by applicable law, we may provide additional notice or seek consent for material changes.

We encourage you to review this page periodically.

19. Governing Law

This Privacy Policy is governed by the laws of India, subject to any applicable mandatory provisions of law.

Any disputes concerning this Privacy Policy or the processing of personal information will be subject to the jurisdiction of the appropriate courts and authorities in India, subject to applicable law.

20. Contact Us

If you have any questions about this Privacy Policy or Candid Health’s privacy practices, please contact us: