Privacy Policy
Last updated: 7 October 2026
This Privacy Policy explains how Health Hub Media Private Limited ("HealthBuzz", "we", "us"), Flat GA, Atlas Apartment, Road No. 10, Banjara Hills, Hyderabad, Telangana, India, collects, uses, shares and protects personal data when you use www.healthbuzz.in, our newsletters, E-Paper, E-Magazine, the Dr. Buzz AI assistant and related services (the "Platform").
We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the "DPDP law"), the Information Technology Act, 2000 and the rules under it, and other applicable Indian law. For the purposes of the DPDP law, HealthBuzz is the Data Fiduciary and you are the Data Principal.
1. Personal data we collect
| What | When | Why (purpose) |
|---|---|---|
| Name, email, password (stored only as an encrypted hash), and optionally phone, organisation and designation | When you create an account | To create and manage your account, provide saved bookmarks and paid features, and secure your login |
| Email address and name | When you subscribe to our newsletter or alerts | To send the newsletters you asked for. Every email has an unsubscribe link |
| Name, email, phone (optional), organisation, message and any attachments | When you use our contact, advertise, press-release or "Ask an expert" forms | To reply to you and handle your request |
| Name, email and comment text | When you comment | To publish and moderate comments |
| Plan purchased, amount, order and transaction IDs, payment status | When you buy HB Plus or another paid product | To activate your purchase, issue receipts, handle refunds and meet tax and accounting law. Card, UPI and bank details are collected directly by the payment gateway and are never stored by us |
| Questions you type or speak to Dr. Buzz | When you use the AI assistant | To generate an answer (see section 4) |
| Browser push subscription token | If you allow breaking-news alerts | To send notifications. You can switch them off in your browser at any time |
| IP address, browser and device type, pages visited, referring site, approximate location (city level), cookies | Automatically when you browse | To run and secure the Platform, prevent abuse and fraud, measure readership, and show and measure advertising (see our Cookie Policy) |
We do not ask for sensitive data such as health records, Aadhaar, PAN, or bank account details. Please do not send them to us through forms, comments or the AI assistant.
2. Legal basis
- Consent — for newsletters, push notifications, non-essential cookies, account creation and the AI assistant. You give consent through a clear affirmative action (for example ticking a box or clicking "Accept") and can withdraw it at any time, as easily as you gave it.
- Legitimate uses permitted by the DPDP law — for example, where you voluntarily provide data for a specific purpose (such as sending an enquiry or making a purchase), to comply with law, court orders or government requests, and for security and fraud prevention.
Withdrawing consent does not affect processing already carried out, but we may no longer be able to provide the related service.
3. How we share personal data
We do not sell your personal data. We share it only as needed with:
- Service providers (Data Processors) acting on our instructions under contract: our web-hosting provider (servers in India), email delivery, payment gateways (Razorpay, PhonePe, Bank of Baroda — as applicable), and analytics or advertising partners such as Google Analytics or Google AdSense if enabled.
- AI service provider — questions sent to Dr. Buzz are processed by our AI provider (currently Anthropic, PBC) to generate answers (see section 4).
- Authorities — when required by law, court order, or a lawful request from a government agency, or to protect the rights, property or safety of our users, the public or HealthBuzz.
- A successor in the event of a merger, acquisition or sale of our business, subject to this Policy.
4. Dr. Buzz AI assistant
When you ask Dr. Buzz a question, your question, the recent conversation and relevant HealthBuzz articles are sent securely (HTTPS) to our AI service provider to generate a reply. Our API key stays on our server and is never exposed to your browser. We do not attach your name or account details to these requests. Under its commercial terms, the provider does not use this data to train its models. Conversation text is kept only in your browser session (it clears when you close the tab) and is not stored in our database. Voice input uses your browser's built-in speech-recognition service, which may be provided by your browser vendor (for example Google for Chrome) under its own privacy terms. Please do not share personal health information with the assistant.
5. Cross-border transfer
Some of our service providers (for example the AI provider and analytics or email services) may process data outside India. We transfer personal data outside India only as permitted under the DPDP law and to countries not restricted by the Central Government, and we require providers to protect it with appropriate safeguards.
6. How long we keep data
- Account data — while your account is active; deleted or anonymised within 30 days of a verified deletion request, unless the law requires us to keep it longer.
- Newsletter data — until you unsubscribe.
- Enquiries and form submissions — up to 2 years, then deleted.
- Payment and invoice records — for the period required by tax and accounting laws (generally 8 years).
- Security and server logs — normally up to 1 year, or longer where required by law (for example under CERT-In directions) or for an ongoing investigation.
- Inactive accounts — we may delete accounts that have been inactive for 3 years, after giving you at least 48 hours' notice by email.
7. Your rights
Subject to the DPDP law, you have the right to:
- obtain a summary of the personal data we process about you and the processing activities;
- have inaccurate or incomplete data corrected and completed, and have data updated;
- have your data erased when it is no longer needed for the purpose it was collected for, unless the law requires us to keep it;
- withdraw consent at any time;
- nominate another person to exercise your rights in the event of your death or incapacity; and
- have your grievances redressed by us, and, if you are not satisfied, to complain to the Data Protection Board of India.
To exercise these rights, email info@healthbuzz.in with the subject "Data request", or update your details on your account page. We may ask you to verify your identity. We will acknowledge your request promptly and respond within the time required by law, and in any case within 30 days.
8. Children
The Platform is a general-audience news service and is not directed at children. We do not knowingly create accounts for, take payments from, or knowingly process the personal data of anyone under 18 without verifiable consent from a parent or lawful guardian, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has given us personal data, contact us and we will delete it.
9. Security
We protect personal data with reasonable security safeguards, including HTTPS encryption, hashed passwords, access controls for staff, CSRF and rate-limit protection, security headers, regular software updates and backups. Payment data is handled only by PCI-DSS compliant payment gateways. No system is completely secure; if a personal-data breach occurs, we will inform the Data Protection Board of India and affected users as required by the DPDP law (informing the Board without delay and providing a detailed report within 72 hours), and report cyber-security incidents to CERT-In where required.
10. Cookies
We use essential cookies to keep the Platform working and, with your consent, analytics and advertising cookies. See our Cookie Policy for details and choices.
11. Grievance Officer / contact for data protection
If you have a question or complaint about how we handle personal data, contact our Grievance Officer:
Grievance Officer, Health Hub Media Private Limited
Flat GA, Atlas Apartment, Road No. 10, Banjara Hills, Hyderabad, Telangana, India
Email: info@healthbuzz.in
We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
12. Changes to this Policy
We may update this Policy to reflect changes in law or our services. We will post the updated Policy here with a new "Last updated" date and, for material changes, notify you on the Platform or by email.
