Last updated: June 2026
1. Who We Are
This Privacy Policy applies to Zap Private Limited("Zap", "we", "us", "our"), the operator of Prime Care. We are committed to protecting your personal information and handling it responsibly in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable IRDAI guidelines.
2. Data We Collect
- Identity data: Full name, date of birth, PAN number (for KYC)
- Contact data: Mobile number, email address, residential address
- Health data:Plan selections, benefit utilisation records, annual health check-up results (shared by Alyve Health's diagnostic partners)
- Financial data: Transaction IDs and payment confirmation records. We do not store card numbers, UPI IDs, or bank account details.
- Technical data: IP address, browser type, pages visited, and device information collected via standard web analytics.
3. How We Use Your Data
- To activate and manage your Prime Care plan
- To verify your identity (KYC) as required by IRDAI regulations
- To process payments and issue refunds
- To communicate plan updates, benefit reminders, and renewal notices
- To enable Alyve Health and its network partners to honour your benefit claims
- To comply with statutory, regulatory, and legal obligations
- To improve our products and services (in aggregated, anonymised form only)
4. Legal Basis for Processing
We process your data on the following bases: (a) contract - to perform our obligations under your Prime Care plan; (b) legal obligation - to comply with IRDAI, DPDPA, and tax regulations; (c) consent - for marketing communications, which you may withdraw at any time.
5. Data Sharing
We do not sell your personal data. We share data only with:
- Alyve Health Pvt. Ltd. - to activate and manage your benefits and Alyve QR
- Razorpay - solely for payment processing
- Network partners (clinics, labs, pharmacies) - limited to transaction details required to honour your benefit claim
- Regulatory authorities - IRDAI, IT Department, or other statutory bodies when legally required
All third-party partners are bound by confidentiality obligations and are prohibited from using your data for their own marketing purposes.
6. Data Retention
We retain your personal data for the duration of your plan and for 7 yearsthereafter, as required by Indian financial and insurance regulations. Health data is retained for 3 years after plan expiry unless a longer period is mandated by law.
7. Your Rights (DPDPA 2023)
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access - request a copy of the personal data we hold about you
- Correction - request correction of inaccurate or incomplete data
- Erasure - request deletion of your data (subject to regulatory retention obligations)
- Grievance redressal - raise a complaint with our Data Protection Officer
- Nominate - nominate an individual to exercise rights on your behalf in the event of death or incapacity
To exercise any of these rights, email help@getprime.carewith subject line "Data Rights Request".
8. Data Security
We implement industry-standard security measures including TLS 1.2+ encryption for data in transit, AES-256 encryption for sensitive data at rest, access controls limited to authorised personnel, and regular security audits. In the event of a data breach that is likely to affect your rights, we will notify you within 72 hours as required by law.
9. Cookies & Analytics
Our website uses essential cookies for functionality and analytical cookies (Google Analytics) to understand usage patterns. You may disable non-essential cookies via your browser settings. Disabling cookies will not affect your ability to purchase or use a Prime Care plan.
10. Children's Privacy
Prime Care plans may cover children as dependants under a Family plan, but the plan holder must be an adult (18+). We do not knowingly collect personal data directly from individuals under 18 years of age.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website at least 14 days before they take effect.
12. Grievance Officer
If you have any concerns about how we handle your personal data, please contact our Grievance Officer at help@getprime.carewith the subject line "Privacy Grievance". We will respond within 30 days.
13. Contact
Zap Private Limited
Email: help@getprime.care
Phone: 98862 73398
Bengaluru, Karnataka, India