Privacy Policy

RSConnect Awards is run by RSConnect Healthcare Pvt. Ltd. ("we", "us"), registered at Hyderabad, Telangana, India. We decide why and how your personal data is used for the awards, which makes us the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

This policy explains what we collect when you nominate or recognise a doctor, apply to sponsor, or contact us at https://dev.rsdoctorawards.com, why we collect it, and the choices you have.

From nominators and recognisers:

• Full name, email address and phone number (encrypted at rest).
• City and relationship to the doctor.
• Your experience narrative and treatment year.
• Consent choices (nomination consent, recognition consent, public display consent with version tracking).

From doctors (via nominations):

• Name, speciality, hospital, city, state.
• Registration number, email and phone (when provided; encrypted at rest).
• Photograph (when uploaded by the admin).

From contact and sponsorship forms:

• Name, email, phone (encrypted at rest), organisation, message.

Automatically collected:

• IP address (hashed, used for fraud detection).
• Browser user-agent string.
• Form completion duration (used for automated fraud checks).

We process your personal data for the following purposes:

• Processing doctor nominations and recognitions submitted by patients, family members and caregivers.
• Verifying your identity through email-based one-time passwords (OTP).
• Communicating with you regarding your submissions, including status updates and confirmation emails.
• Enabling the admin team to review, screen and select nominated doctors for the awards.
• Displaying patient stories on the public site when you give explicit public-display consent.
• Responding to contact enquiries, sponsorship applications and partnership requests.
• Preventing fraud and abuse of the platform.

Under the DPDP Act, 2023, we rely on your explicit consent as the legal basis for processing your personal data. You provide this consent when you:

• Tick the consent checkbox on the nomination or recognition form.
• Optionally opt in to public display of your story.

We may also process data where necessary to comply with a legal obligation or to protect against fraud.

We obtain your explicit consent before collecting personal data:

• Nomination and recognition forms: You must tick consent checkboxes before submitting. The consent text is versioned; your submission is linked to the exact version you agreed to.
• Public display consent: Optional. If you consent, your story excerpt and anonymised initials may appear on doctor profiles and the public site. You are clearly informed before opting in.
• Doctor consent: The admin records explicit consent from the doctor (by phone, email, in person or in writing) before publishing their profile on the public site.

You may withdraw consent at any time by contacting us at privacy@rsdoctorawards.com. Withdrawal does not affect the lawfulness of processing before withdrawal.

We implement appropriate technical and organisational measures to protect your personal data:

• Email addresses and phone numbers are stored encrypted (AES-256-GCM) at rest.
• A separate cryptographic hash is used for uniqueness checks, so the system never needs to decrypt all records to find duplicates.
• Admin-facing lists display masked contact details. Full details are shown only in individual detail views.
• OTP codes are hashed; we never store them in plain text.
• No passwords, OTPs, tokens or personal data are written to application logs.
• Access to the admin panel requires OTP-based authentication with rate limiting.

• Active edition data is retained for the duration of the current awards cycle and a reasonable period after the award ceremony for record-keeping and dispute resolution.
• Past edition data may be retained in archived form for historical recognition records.
• On request, the admin can anonymise a participant: name, email and phone are removed, and entry counts are preserved for statistical integrity.
• Contact enquiries and sponsorship applications are retained for up to 24 months after resolution, then deleted or anonymised.

We do not sell, rent or trade your personal data. We may share data with:

• Email service providers for sending OTP codes and notification emails (data is transmitted securely and not stored by the provider beyond delivery).
• Cloud hosting providers for storing the platform and its database (subject to appropriate data processing agreements).

We do not share personal data with sponsors. Sponsorship never influences award selection.

As a Data Principal under the DPDP Act, 2023, you have the right to:

• Access: Request a summary of your personal data that we hold.
• Correction: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion or anonymisation of your personal data, subject to any legal retention obligations.
• Grievance redressal: Raise a complaint about our data practices.

To exercise any of these rights, contact our Grievance Officer (see section 12). We will respond within 30 days.

We use only essential, first-party cookies required for the website to function (such as session tokens). We do not use advertising cookies, analytics trackers, or third-party tracking pixels.

We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when the most recent changes were made. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or complaints about our data practices, you may contact our Grievance Officer:

• Name: Rahul
• Email: grievance@rsdoctorawards.com

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India as established under the DPDP Act, 2023.