Privacy Policy

1. Group Privacy Statement

This Privacy Policy forms part of the Carepon Group Privacy Statement. It applies to all business units, platforms, mobile applications, and digital services offered by Carepon and its affiliated entities ("Carepon").

We are committed to protecting the privacy, confidentiality, and security of your personal information and maintaining your trust.

2. Products and Services

This Privacy Policy applies to all products and services offered on the Carepon platform, including:

• Digital health services
• Marketplace services and referrals
• Appointment, delivery, and pharmacy-related services
• Carepon mobile and web applications
• Partner-integrated services
• Customer support services
• Any other service or digital tool provided by Carepon

Use of any Carepon product or service implies agreement with this Privacy Policy.

3. Purpose and Scope of This Statement

The purpose of this Privacy Policy is to:

• Explain how we collect, use, store, disclose, safeguard, update, or delete your personal information
• Provide transparency about your rights and how you may exercise them
• Describe our legal bases for processing personal information
• Outline how we comply with applicable privacy, data protection, and cybersecurity laws

This statement applies to all users who access https://carepon.global, the Carepon mobile application, partner-integrated systems, and any associated digital platforms.

4. What Is Personal Information and What Types Do We Collect?

"Personal information" refers to any information that identifies you or is capable of identifying you.

Carepon may collect the following categories:

4.1 Personal Identifiers

• Name, surname, age, gender, sex
• Identification number or passport number

4.2 Contact Information

• Physical addresses
• Email address
• Mobile and telephone numbers

4.3 Online Identifiers

• IP address
• Cookies, browser data
• Device information
• Online behaviour and usage patterns

4.4 Engagement & Interaction Information

• Use of products and services
• Transactions and requests
• Complaints, queries, communications
• Booking and appointment history

4.5 Financial Information

• Payment and billing data

4.6 Sensitive Personal Information (Processed only when necessary)

• Medical history and health information
• Biometric data
• Race or ethnic origin

4.7 Derived Data

• Internal reports
• Analytics and behavioural insights
• Artificial intelligence or system-generated data

5. How We Collect Your Personal Information

We collect personal information:

• Directly from you during registration, use of services, forms, or communication
• Automatically through analytics technologies
• Through partners such as pharmacies, healthcare professionals, payment providers, or delivery partners
• From public records, where lawful
• Through system interactions and digital behaviour tracking

6. Why We Process Your Personal Information

Our responsibilities to you are important. We aim to provide personalised and efficient services. We may process your personal information for the following lawful reasons:

6.1 Contract Requirements

We process your personal information when required to conclude or perform under a contract with you or a partner you engage through Carepon. This includes:

• Opening, verifying, and maintaining your account
• Providing products and services
• Executing transactions, referrals, or bookings
• Administering claims, where applicable
• Collecting payments owed to us
• Managing risks, service fulfilment, and overall relationship management
• Communicating with you about your products or services
• Providing additional information you request

6.2 Lawful Obligations

We may need to process your personal information to:

• Complete integrity, due-diligence, and business conduct checks
• Perform onboarding and monitoring processes
• Conduct sanctions screening
• Comply with risk management and regulatory requirements
• Comply with voluntary and mandatory codes of conduct
• Detect, prevent, or report fraud, theft, money laundering, terrorist financing, corruption, or other illegal activities
• Process and settle transactions and payments
• Respond to lawful requests from authorities

6.3 Business Operations and Improvements

Carepon may process your personal information to:

• Maintain, monitor, improve, and develop business systems, controls, and policies
• Improve data quality
• Design, develop, test, and improve products and services
• Conduct analytics by combining various data sources
• Respond to queries and record interactions for quality improvement
• Manage emergencies, outages, security incidents, and stress events
• Support customer value-added solutions and reward programs
• Enable your participation in platform features and loyalty initiatives
• Achieve other legitimate operational purposes

6.4 Consent

We may process your personal information:

• When you have provided explicit consent for a specific, defined purpose
• When required by applicable law
• When you agree to optional features or specialised data processing (e.g., health data for digital services)

You may withdraw consent at any time, subject to legal or operational limits.

7. International Data Transfers

Your personal information may be processed in another country. We will only transfer data where:

• Adequate protection measures exist
• Transfer agreements or contractual safeguards are in place
• The receiving party meets our data protection standards

8. How Long We Retain Your Personal Information

We retain your personal information in line with legal, regulatory, and business obligations.

This will generally be for at least five (5) years from your last transaction or interaction, unless information is anonymised for analytics purposes.

After the retention period, we securely delete or anonymise the data.

9. Your Rights

Depending on applicable law, you may have the right to:

• Access your personal information
• Correct inaccuracies or update data
• Request deletion or removal ("right to be forgotten")
• Restrict or object to processing
• Withdraw consent
• Request data portability
• Lodge a complaint with a regulator

We may need to verify your identity before responding to requests.

10. Security Measures

We implement industry-standard security measures, including:

• Encryption
• Multi-layer access controls
• Secure data storage
• Monitoring and incident response
• Regular testing and vulnerability assessments
• Confidentiality obligations for staff and partners

11. Cookies and Tracking Technologies

Carepon uses cookies to:

• Enable login and authentication
• Improve performance
• Analyse usage and interactions
• Personalise the platform experience

You may adjust browser settings to manage cookie use.

12. Children's Privacy

Carepon is not intended for users under 18. We do not knowingly collect personal information from minors without lawful consent.

13. Contact Us

For questions, complaints, or privacy-related requests:

Carepon Privacy Office
Email: privacy@carepon.global
Website: https://carepon.global