Data Processing Agreement
This summary explains how we process personal data on behalf of clinic clients. A signed DPA forms part of every engagement that involves patient or enquiry data.
This is a plain-English overview, not the executed agreement. When we work with a clinic, a full Data Processing Agreement is signed as part of the contract. Request the complete DPA at admin@orvexatech.in.
Roles
The clinic is the data controller; OrvexaTech (orvexatech.io) acts as a processor, handling personal data only on the clinic’s documented instructions.
Scope of processing
We process enquiry and, where applicable, patient contact data solely to deliver the agreed services — capturing, responding to, and managing enquiries and appointments. We do not use it for our own purposes.
Sub-processors
Where we use sub-processors (for example, hosting or communication tools), they are bound by equivalent data-protection obligations, and we maintain a list available on request.
Security measures
Encryption in transit and at rest, least-privilege access controls, auditing of sensitive actions, and region-appropriate data residency for EU and Indian data.
International transfers
We host EU data in the EU region and Indian data in-region where required, and rely on appropriate safeguards for any transfer.
Data-subject rights
We assist the clinic in responding to access, correction, deletion, and objection requests within the timeframes the law requires.
Breach notification
We notify the clinic without undue delay after becoming aware of a personal-data breach affecting their data, with the information needed to meet their obligations.
Retention & deletion
We retain personal data only for as long as needed for the agreed purpose, then delete or return it on the clinic’s instruction or at the end of the engagement.
Compliance
This DPA supports obligations under the EU GDPR and India’s DPDP Act. We describe only measures we actually implement and do not claim certifications we do not hold.
Contact
Data-protection queries: admin@orvexatech.in.