Privacy Policy

MedSkills ("MedSkills", "we", "us" or "our"), a unit of MedXL Ventures Private Limited, is committed to protecting the privacy of everyone who uses our website and our LMS with e-learning content for hospitals. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We handle personal data in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Information we collect

• Information you provide — such as your name, hospital or organisation, work email, phone number and any message you send when you request a demo or contact us.
• Learner and training data — where a hospital uses our LMS, we process learner profiles, course enrolments, assessment results and certificates on that hospital's behalf.
• Technical information — such as IP address, browser type, device information and pages visited, collected through cookies and analytics.

2. How we use information

• To respond to enquiries and provide demonstrations of our platform and content.
• To deliver, operate and improve the LMS with e-learning content for hospitals and related services.
• To issue and verify certificates and generate compliance and progress reports for the relevant hospital.
• To understand website usage and improve our content, security and performance.
• To meet legal, regulatory and contractual obligations.

3. Legal basis

We process personal data on the basis of your consent, to perform a contract with you or your organisation, to comply with a legal obligation, or for our legitimate business interests where permitted by law.

4. Roles: controller and processor

For website enquiries and our own communications, MedSkills acts as the data fiduciary/controller. Where we host training on behalf of a hospital, that hospital is the controller of its learner data and MedSkills acts as a processor, handling data only on the hospital's documented instructions.

5. Sharing and disclosure

We do not sell personal data. We may share information with trusted service providers who help us operate our platform (such as hosting and analytics providers), with our parent company MedXL Ventures Private Limited, and where required by law or to protect our rights. Any providers are bound by appropriate confidentiality and data-protection obligations.

6. Data retention

We retain personal data only for as long as necessary for the purposes described here, to comply with legal obligations, or as instructed by the hospital whose data we process, after which it is deleted or anonymised.

7. Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. No method of transmission or storage is completely secure, but we work to safeguard your information appropriately.

8. Your rights

Subject to applicable law, you may have the right to access, correct, update or request deletion of your personal data, to withdraw consent, and to raise a grievance. To exercise these rights, contact us using the details below. Where your data is held by a hospital using our LMS, we may direct your request to that hospital as the controller.

9. Children's data

Our services are intended for hospitals and their staff and are not directed at children. We do not knowingly collect personal data from children except where a hospital lawfully does so within its own use of the platform.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above indicates when it was last revised. Material changes will be notified through our website.

11. Contact & grievance

For any privacy questions or to exercise your rights, contact our grievance officer at info@medskills.in. We will respond within the timelines required by applicable law.