Last updated: September 14, 2025
O2D3 Physio & Fitness Solutions Pvt. Ltd. (“O2D3,” “We,” “Us,” or “Our”) is committed to protecting Your privacy and safeguarding Your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect the personal data You provide when You use our website www.o2d3.com (“Website”) and related services (“Services”).
By accessing or using our Website or Services, You agree to the terms of this Privacy Policy. Please read it carefully.
Information We Collect
Personal Information
When You register for an Account or use our Services, We collect personal information including but not limited to:
- Name, contact details (email, phone number, postal address)
- Date of birth and demographic details
- Payment information (billing address, payment cards, transaction data)
- Account login credentials
Health Information
As a healthcare provider, We collect sensitive health information necessary to provide physiotherapy and related services, including:
- Medical history and current health conditions
- Treatment and therapy records
- Physiotherapist notes and session details
- Informed consent and health updates submitted by You
Usage and Technical Data
We also collect information about Your usage of our Website via cookies and similar technologies, including:
- IP address, device type, browser type
- Pages visited, time spent, click patterns
- Cookies and tracking technologies (for analytics and service improvement)
How We Use Your Information
We use Your data to:
- Provide and manage healthcare and consultation services
- Process payments and communicate about Your transactions
- Customize and improve our Services and Website
- Send Service-related communications, updates, and support messages
- Conduct marketing and promotional activities only with Your consent
- Comply with legal and regulatory requirements
How We Share Your Information
We treat Your data confidentially and only share it:
- With healthcare professionals and authorized staff for treatment purposes
- With trusted service providers (e.g., payment processors, IT support) under strict privacy agreements
- When required by law or government authorities
- To protect rights, safety, or property of O2D3, You, or others
We do not sell Your personal or health data to third parties.
Data Security
We employ appropriate administrative, technical, and physical safeguards to protect Your personal and health data from unauthorized access, disclosure, alteration, or destruction. These include:
- Secure servers and encrypted connections (SSL/TLS)
- Role-based access controls and confidentiality agreements for staff
- Regular security audits and vulnerability assessments
Data Retention
We retain Your personal and health information only as long as necessary to provide our Services, comply with legal obligations, resolve disputes, enforce agreements, or as permitted by law.
When data is no longer needed, it is securely deleted or anonymized.
Your Rights and Choices
Depending on applicable laws, You may have rights relating to Your personal data, including:
- Access: Request copies of Your data we hold
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of data, subject to legal restrictions
- Objection: Object to processing for marketing or other purposes
- Restriction: Request limitation of processing in certain circumstances
- Withdrawal: Withdraw consent where processing is based on consent
- Data Portability: Request transfer of Your data to another provider
To exercise Your rights, contact us at the information below. We will respond in accordance with applicable laws.
Cookies and Tracking Technologies
Our Website uses cookies and similar technologies to:
- Enable core website functionality
- Analyze site performance and usage
- Provide personalized content and ads (with consent)
You can control cookie preferences via your browser or device settings.
Children’s Privacy
Our Services are intended for individuals aged 18 and above. We do not knowingly collect personal information from children under 18 without parental consent. If You are a parent or guardian and believe we have collected data from a minor, contact us to request deletion.
Compliance with the Digital Personal Data Protection Act, 2023
O2D3 processes Your personal and health data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDPA”).
- Data Fiduciary Role: O2D3 acts as a Data Fiduciary under the DPDPA and ensures that Your personal data is collected and processed only for lawful purposes and to the extent necessary for providing our Services.
- Consent & Notice: We obtain Your free, specific, informed, and unambiguous consent prior to collecting or processing personal data. Before such processing, You will be provided a clear notice describing the categories of data collected, the purposes of processing, and Your available rights.
- Your Rights under DPDPA:
- Access & Correction: Request access to or correction of Your personal data.
- Erasure: Request deletion of Your personal data, subject to legal and regulatory requirements.
- Grievance Redressal: Raise concerns regarding the processing of Your data. We will respond within the timelines prescribed under the DPDPA.
- Consent Withdrawal: Withdraw consent at any time without affecting prior lawful processing.
- Cross-Border Data Transfers: If Your personal data is transferred or stored outside India, such transfers will only be made in compliance with the DPDPA and any applicable government notifications.
- Data Protection Officer (DPO):
To exercise Your rights or for grievance redressal under the DPDPA, You may contact our designated DPO:
Name/Designation: Data Protection Officer
Email: accounts@o2d3.com
Postal Mail: O2D3 Physio & Fitness Solutions Pvt. Ltd., No. 40, Vinayagar Koil St, Kullanampatti, Natham Rd, Nagalnagar, Dindigul, Tamil Nadu, 624003.
Cross-Border Data Transfers
Your personal and health data may be transferred to and stored on servers located outside India (for example, cloud service providers in the US region). Such transfers are performed in compliance with the DPDPA, 2023 and only to jurisdictions not restricted by the Government of India. We ensure that all service providers receiving Your data maintain adequate security standards and process the data solely for purposes authorized by O2D3.
Cookies and Tracking Technologies
We use cookies and similar technologies for the following purposes:
- Essential Cookies: Necessary for core website functionality (e.g., security, login). These cannot be disabled.
- Analytics Cookies: Help us analyze site performance and usage.
- Marketing/Personalization Cookies: Used to deliver tailored content and promotions.
Under the DPDPA, 2023, we obtain Your explicit consent before enabling any non-essential cookies (Analytics or Marketing). You may withdraw consent or change preferences at any time through our cookie banner or by adjusting browser settings.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will notify You of significant changes by posting the new policy on our Website with an updated “Last Updated” date.
Please review this Privacy Policy periodically to stay informed about how We protect Your information.
Contact Us
If You have questions or concerns about this Privacy Policy or Our data practices, You may contact us by:
- Email: info@o2d3.com
- Postal Mail: O2D3 Physio & Fitness Solutions Pvt. Ltd., No. 40, Vinayagar Koil St, Kullanampatti, Natham Rd, Nagalnagar, Dindigul, Tamil Nadu, 624003.