HomeNurse4U Private Limited

Thank you for visiting our website. We appreciate your interest in HomeNurse4U and the trust you place in us.

This Privacy Policy explains how HomeNurse4U Private Limited (“HomeNurse4U,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data gathered through our corporate website at www.homenurse4u.com, including through the enquiry, careers, and resource-download forms available on it.

This Policy should be read together with our Terms of Use.

If you have any questions about this Policy or our practices, you may contact us at data.protection@homenurse4u.com.

1. SCOPE AND APPLICABILITY

This Privacy Policy explains how HomeNurse4U Private Limited (“HomeNurse4U,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data gathered through our corporate website at www.homenurse4u.com, including through the enquiry, careers, and resource-download forms available on it.

This Policy should be read together with our Terms of Use.

This Policy applies to all visitors who interact with our website, including prospective clients, sponsors, contract research organizations (CROs), investigational sites, job applicants, and other visitors who submit information through our website forms or correspond with us directly. It governs personal data collected through our general enquiry form, our “Reach Out to Our Team” (RFI/RFP) form, our careers/job application form, and our resource-download forms (white papers, case studies, and articles), as well as information collected automatically when you browse our website.

HomeNurse4U Private Limited is a single legal entity operating through offices in India, the United Kingdom, and Australia. These offices are not separately incorporated entities, and HomeNurse4U Private Limited is the data controller (under the GDPR/UK GDPR) and Data Fiduciary (under India's DPDP Act, 2023) for all personal data covered by this Policy.

2. REGULATORY COMPLIANCE

We are committed to complying with applicable data protection regulations in the jurisdictions where we operate and where our website visitors are located.

India

We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025, together with relevant provisions of the Information Technology Act, 2000, in respect of personal data collected through this Website.

Europe and United Kingdom

We comply with the General Data Protection Regulation (GDPR) and, in the United Kingdom, the UK GDPR, in respect of personal data of visitors located in the European Economic Area or United Kingdom.

Australia

We comply with the Privacy Act 1988 and the Australian Privacy Principles (APPs) in respect of personal data of visitors located in Australia.

Other Jurisdictions

Where visitors to our Website are located elsewhere — including Latin America, the Middle East, and other parts of the Asia-Pacific region — we seek to honour equivalent data protection principles and rights under applicable local law.

3. CATEGORIES OF INFORMATION WE COLLECT

We collect personal data that visitors choose to share with us, as well as certain technical information collected automatically when you browse our Website.

Information from General Enquiries

When you contact us through our homepage or Contact Us page, we collect your Name and Contact Details, including your full name, email address, and phone number, which we use to identify you and respond to your message, and the Content of Your Message, which helps us understand and address your enquiry.

Information from Business and Partnership Enquiries

When you submit our “Reach Out to Our Team” (RFI/RFP) form, we collect your Identity and Organization details, including your name, job title, and company or organization name, your Contact Details, including email address and phone number, and your Enquiry Details, including your country, the service(s) you are interested in, and the content of your submission, which we use to evaluate and respond to potential business and partnership opportunities.

Information from Job Applicants

When you apply for a role through our Careers page, we collect your Contact Details, including your name, email address, and phone number, and your Application Materials, including your CV/resume and any information you choose to include in it or an accompanying cover letter, such as your education and work history.

Information from Resource Downloads

When you download a white paper, case study, or other resource, we collect your Name and Professional Details, including your name, email address, organization, and job title, which we use to deliver the requested resource and, where you consent, to share related updates.

Information Collected Automatically

When you visit our Website, we and our service providers automatically collect Device and Technical Data, including your IP address, browser type and version, device type, and operating system, and Usage Data, including the pages you view, the website that referred you to us, and the date, time, and duration of your visit, together with cookie identifiers and similar tracking technologies described in Section 13 (Cookies and Tracking).

We do not use this Website to knowingly collect health information, financial account details, or government identification numbers.

4. METHODS OF DATA COLLECTION

Direct Collection is the primary method by which we gather information, through forms you complete and submit on our Website — including our enquiry form, our RFI/RFP form, our careers/application form, and our resource-download forms — as well as through direct correspondence with us by email or phone.

Device Metadata is collected automatically and includes your IP address, browser information, operating system, and time zone, gathered for security monitoring and to ensure our Website displays correctly on your device.

Session Analytics are collected to help us understand how visitors use our Website, including page views, navigation patterns, and session duration, so we can improve our Website's content and usability.

Cookies and Similar Technologies are used to remember your preferences and support core Website functionality, as described further in Section 13 (Cookies and Tracking).

5. PURPOSES OF DATA USE

We process your information based on our legitimate business interests, the fulfilment of contractual or pre-contractual obligations, your consent, and/or compliance with our legal obligations. We process your personal information for these purposes in reliance on our legitimate business interests (“Business Purposes”), in order to enter into or take steps towards a contract with you (“Contractual Reasons”), with your consent (“Consent”), and/or for compliance with our legal obligations (“Legal Reasons”). We indicate the relevant grounds next to each purpose below.

Enquiries and Business Development

To respond to enquiries submitted through our Website for Business Purposes and Contractual Reasons. We use your contact details and message content to understand and address your query.

To evaluate business and partnership opportunities for Business Purposes and Contractual Reasons. We use information submitted through our RFI/RFP form to assess potential collaborations with sponsors, CROs, and investigational sites.

Recruitment

To assess job applications and manage recruitment for Contractual Reasons, Consent, and Legal Reasons. We use your CV and application details to evaluate your candidacy and, where relevant, to contact you about the role or future opportunities.

Content and Communications

To deliver requested resources for Contractual Reasons and Consent. We use your details to send white papers, case studies, or other resources you request.

To send updates, news, or marketing communications for Consent. We only send these where you have opted in, and you may withdraw consent at any time.

Website Operation and Legal Compliance

To operate, secure, and improve our Website for Business Purposes. We use automatically collected information to monitor for misuse, analyse site traffic, and fix errors.

To comply with our legal obligations for Legal Reasons. We may process information to respond to lawful requests from a regulator or court.

We do not sell your personal data, and we do not use information submitted through this Website for automated decision-making that produces legal or similarly significant effects on you.

6. INFORMATION SHARING AND DISCLOSURE

We maintain a strict policy against selling or monetizing your personal data. We may share personal data collected through this Website with carefully selected third parties under the following circumstances and with appropriate safeguards in place.

Our Offices

We may share information with our own personnel in our India, United Kingdom, and Australia offices, on a need-to-know basis, to respond to enquiries and manage global business relationships.

Authorized Service Providers

We engage carefully selected third-party service providers to support our Website and business operations, and these arrangements are governed by appropriate contractual protections.

Cloud hosting and web development services — our Website is hosted on Amazon Web Services (AWS) infrastructure, managed under our web development vendor's AWS account, who also provides ongoing technical support and maintenance for our content management system.

Email and communication services enable us to respond to enquiries and send requested resources or updates.

Analytics services provide Website performance insights while protecting visitor privacy through aggregation and anonymization where possible.

Recruitment and applicant-tracking tools, where used, support our careers and hiring process.

All third-party service providers are only permitted to use your data to provide services to us and are bound by appropriate confidentiality and data protection obligations.

Legal and Business Disclosures

Professional advisers and regulators may receive information where necessary to obtain advice or comply with a legal or regulatory obligation.

A successor entity may receive information in the event of a merger, acquisition, financing, or sale of some or all of our business, subject to appropriate confidentiality safeguards.

7. SECURITY MEASURES

We implement technical, administrative, and physical measures designed to protect personal data submitted through our Website from unauthorized access, use, disclosure, alteration, or destruction.

Technical Controls

We encrypt information submitted through our Website forms in transit using TLS 1.2 and TLS 1.3, and encrypt stored personal data at rest. Our Website runs on a purpose-built content management system with role-based access controls, so only authorized personnel can view submitted data, and the Website is protected by a Web Application Firewall (WAF).

Administrative Measures

We maintain internal policies and procedures for handling personal data, and we are strengthening these practices in line with internationally recognised frameworks, including ISO/IEC 27001. Website and infrastructure logging is currently managed by our external web development vendor as part of our hosting arrangement.

Physical Measures

Our Website is hosted on Amazon Web Services (AWS) infrastructure, managed under our web development vendor's AWS account. AWS maintains its own physical and environmental security controls, including restricted data centre access and environmental monitoring.

No method of transmission or storage is completely secure, and while we work hard to protect your personal data, we cannot guarantee its absolute security.

8. DATA RETENTION POLICY

We retain personal data collected through this Website only for as long as necessary to fulfil the purposes described in this Policy, comply with legal and regulatory requirements, and support legitimate business operations.

Enquiry and business development data, including submissions through our Contact Us and RFI/RFP forms, is retained for a minimum of 5 years from your last interaction with us, in line with HomeNurse4U's internal records retention standard.

Job application data, including CVs and application materials, is retained for up to 1 year from submission, or longer where you consent to being considered for future roles. This is shorter than our general 5-year records retention standard, since retaining unsuccessful candidates' personal data for that long would not be proportionate to the purpose for which it was collected.

Resource-download and related marketing data: we stop using your data for marketing purposes as soon as you unsubscribe, but retain a record of your download or subscription history for a minimum of 5 years, in line with HomeNurse4U's internal records retention standard.

Website analytics and log data is retained in line with our analytics tools' technical limits, typically up to 26 months — these tools do not support retaining individual-level data for 5 years, regardless of our general records retention standard.

9. YOUR PRIVACY RIGHTS

Depending on your jurisdiction, you may have some or all of the following rights over your personal data:

Right to access allows you to request a copy of the personal data we hold about you and information about how it is used and shared.

Right to rectification enables you to correct inaccurate or incomplete personal data.

Right to erasure permits you to request deletion of your personal data, subject to any legal retention requirements.

Right to restrict processing allows you to limit how we process your personal data in certain circumstances.

Right to data portability enables you to receive your personal data in a machine-readable format, where technically feasible.

Right to object permits you to object to certain types of processing, including direct marketing, where applicable law provides this right.

Right to withdraw consent allows you to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

How to Exercise Your Rights

Contact Methods

To exercise any of these rights, you may contact us at:

• Email: data.protection@homenurse4u.com
• Phone: +91 87589 03112

Identity Verification

To protect your personal information, we may ask you to verify your identity before processing a rights request, such as by confirming the name, email address, or phone number you originally provided to us.

Processing Timeframes

We are committed to responding to your requests within the timeframes required by applicable law:

Under India's DPDP Act, 2023 and DPDP Rules, 2025: we aim to resolve grievances within 90 days.

Under the GDPR/UK GDPR: standard response within 30 calendar days of a complete request, extendable by a further 60 days for complex requests.

Under Australia's Privacy Act 1988: we will respond within a reasonable period, generally within 30 days.

Other jurisdictions: as required by applicable local data protection law.

Request Processing Steps

We will acknowledge receipt of your request within 5 business days, verify your identity, and then process your request or provide an explanation of any limitations that apply.

10. INTERNATIONAL DATA TRANSFERS

HomeNurse4U operates globally, with personal data collected through this Website processed primarily in India, and accessed by personnel in our UK and Australia offices, as well as by service providers such as AWS, which may process data in other locations.

Where we transfer personal data originating in the European Economic Area or United Kingdom to a country not recognised as providing an adequate level of protection, we rely on appropriate safeguards, including the Standard Contractual Clauses approved by the European Commission and, for UK-originating data, the UK's International Data Transfer Addendum, together with supplementary measures where appropriate.

For personal data governed by India's Digital Personal Data Protection Act, 2023, we may transfer personal data outside India except where transfer to a specific country or territory has been restricted by the Central Government.

11. CHILDREN & MINORS

This Website is intended for business and professional audiences and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18 (or the age of majority or digital consent in your jurisdiction, if different) through this Website.

If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete that information. If you believe a child has provided us with personal data, please contact us using the details in Section 14 (Contact Us).

12. BREACH NOTIFICATION

In the event of a data breach involving your personal information, we maintain incident response procedures designed to minimise harm and provide timely notification to affected parties.

Data Subject Notifications

We will notify affected individuals without undue delay where there is a risk to their rights and interests, explaining what happened, what data was affected, and the steps we are taking in response.

Regulatory Authority Notifications

India: We will report qualifying cybersecurity incidents to the Indian Computer Emergency Response Team (CERT-In) within 6 hours of becoming aware of them, as required under the CERT-In Directions, 2022, and will notify the Data Protection Board of India as required under the DPDP Act, 2023 and DPDP Rules, 2025.

European Union/EEA and United Kingdom: We will notify the relevant supervisory authority within 72 hours of becoming aware of a breach, as required by GDPR Article 33 (and the equivalent UK GDPR provision).

Other jurisdictions: We will notify relevant data protection authorities according to applicable local requirements.

13. COOKIES AND TRACKING

Managing Cookie Preferences

Cookie Banner: When you first visit our Website, you can accept or reject non-essential cookies through our cookie banner.

Preference Settings: You can review and change your cookie choices at any time through the “Settings” option available via our cookie banner or Website footer. Choices you save apply only to this Website.

Browser Settings: You can also manage cookies through your browser settings, which let you block, delete, or be notified about cookies.

Cookie Categories

Necessary cookies are used for activities strictly necessary to operate and deliver our Website, such as submitting forms and maintaining basic site security, and do not require your consent.

Functionality cookies enable basic interactions and features that allow you to access selected parts of our Website and facilitate your communication with us.

Experience cookies help us improve the quality of your experience on our Website and support interactions with any external content or platforms we embed.

Measurement cookies help us measure traffic and analyse visitor behaviour so we can improve our Website. This currently consists of Google Analytics (GA4) and a website performance-monitoring cookie set by our hosting/website platform provider, and does not include third-party advertising or retargeting tracking.

We do not currently use cookies or similar technologies for third-party advertising, ad retargeting, or personalised/programmatic advertising. If this changes in future, we will update this Policy and our cookie banner accordingly, and will seek your consent before any such tracking begins.

List of Cookies

Impact of Cookie Choices

Denying consent for a particular category may make related features unavailable. Necessary cookies cannot be disabled, as they are required for the Website to function. Use “Accept all” to consent to all categories, or “Reject all” to continue with only Necessary cookies. You can freely give, deny, or withdraw your consent at any time by accessing the preferences panel described above.

14. CONTACT US

For privacy-related questions, concerns, or requests, please contact us:

Privacy Queries / Grievance Officer

• Name: Sunita Rogers, Head of Operations
• Email: data.protection@homenurse4u.com
• Phone: +91 87589 03112

General Enquiries

• Email: info@homenurse4u.com

Registered Office (India)

HomeNurse4U Private Limited, D-1009, Westgate by True Value, Nr. YMCA Club, SG Highway, Makarba, Ahmedabad, 380015, Gujarat, India

UK Office

71-75 Shelton Street, London, Greater London, WC2H 9JQ, United Kingdom

Australia Office

22 Banksia Road, Caringbah, 2223 Sydney, Australia

15. CHANGES TO THIS POLICY

We may revise this Privacy Policy periodically to reflect regulatory updates, changes to our Website, or changes in our data processing practices. We will post the revised Policy on this page with an updated “Last Updated” date and, where changes are material, provide reasonably prominent notice on our Website.

16. VERSIONING

Effective Date: August 5, 2026

Version: V 1.0

This Policy replaces all prior versions of our website privacy policy. Continued use of our Website following the effective date constitutes acceptance of the current Policy. If you do not agree with any provision of this Policy, please discontinue use of our Website and contact us to discuss your concerns.

By using our Website, you acknowledge that you have read and understood this Privacy Policy.