Privacy Policy | VisionX

Effective Date: August 7, 2026

Last Updated: August 7, 2026

1. Introduction & Scope

VisionX Enterprise Pvt. Ltd. ("VisionX", "Company", "we", "us", or "our") is committed to protecting the privacy, confidentiality, and security of personal and health-related data collected through our digital healthcare platform, mobile applications, multi-vendor marketplace, and logistics network.

This Privacy Policy outlines how we collect, use, store, share, and protect your information when you interact with VisionX as a patient, consumer, vendor, healthcare provider, or institutional partner. By accessing or using the platform, you consent to the data practices described in this policy.

Where required under applicable law, you provide explicit consent for the collection, processing, and sharing of sensitive personal data, including health-related information, for the purposes outlined in this Policy.

2. Information We Collect

To provide integrated healthcare marketplace, rental, diagnostic, and home care services, VisionX collects the following categories of information:

Personal Identification Data: Full name, phone number, email address, physical delivery/pickup address, government-issued IDs, and company registration details (for vendors and institutional B2B buyers).
Sensitive Health Data: Diagnostic test requisitions, lab sample collection details, prescription records, and health-related information voluntarily provided for service fulfillment, diagnostics, or home care coordination.
Financial & Transaction Data: Payment histories, PAN/VAT invoicing details, bank account numbers for vendor payouts, and transaction logs. Payment card and wallet details are processed directly via secure, PCI-DSS compliant third-party payment gateways.
Technical & Usage Data: Device IP addresses, browser types, operating systems, app usage statistics, cookies, and geographic location data for delivery optimization across Nepal.

3. How We Use Your Information & Lawful Basis

VisionX uses collected data strictly for legitimate operational, service delivery, and legal purposes, including:

Fulfilling product purchases, medical equipment rentals, and delivery logistics across 77 districts.
Facilitating diagnostic lab sample collection, digital report generation, and home nursing dispatch.
Verifying vendor credentials, enforcing quality standards, and executing B2B procurement contracts.
Generating itemized PAN/VAT-compliant tax invoices and managing accounts.
Improving platform functionality, user interface design, data security, and customer support.
Complying with regulatory requirements established under the laws of Nepal.

We process personal and health-related data based on lawful grounds including user consent, contractual necessity for service fulfillment, compliance with legal obligations, and legitimate operational interests in maintaining and improving the platform.

4. Data Sharing & Third-Party Integrations

VisionX does not sell, rent, or trade your personal or health data to third-party advertisers. We share information only with authorized entities necessary to complete your requested services:

Verified Vendors & Logistics Partners: Delivery details and item orders are shared with sellers and courier networks to ensure accurate order fulfillment.
Accredited Diagnostic Labs & Phlebotomists: Patient name, contact, address, and test details are shared with certified lab partners for sample collection and report generation.
Independent Caregivers: Relevant contact and location details are provided to assigned home nurses or technicians for on-site care.
Regulatory & Legal Authorities: Information may be disclosed if required by law, court order, or official government requests under Nepalese jurisdiction.

While VisionX works only with verified partners, we do not control the independent operations of third-party vendors, laboratories, logistics providers, or caregivers. Each party is responsible for its own data handling practices in accordance with applicable laws.

5. Data Security & Protection Standards

We implement administrative, technical, and physical safeguards designed to protect personal and medical data against unauthorized access, loss, alteration, or disclosure. These measures include encrypted communication channels (SSL/TLS), access-controlled database architectures, regular security audits, and strict internal authorization protocols.

While we implement industry-standard safeguards, no system can guarantee absolute security. Users acknowledge and accept inherent risks associated with digital data transmission and storage.

6. Data Retention & User Rights

VisionX retains personal and transactional data for as long as necessary to fulfill service commitments, maintain audit-ready business records, and satisfy statutory tax and legal obligations under Nepalese law. Data retention periods vary depending on the nature of the information, regulatory requirements, and business needs, including taxation, audit, and healthcare-related record obligations.

Subject to regulatory constraints, users have the right to:

Access, review, or request a copy of their personal data stored on VisionX.
Request correction of inaccurate or incomplete personal information.
Request account deactivation or deletion of non-essential personal data.
Opt out of non-essential promotional or marketing communications.

7. Account Responsibility

Users are responsible for maintaining the confidentiality of their account credentials and for all activities conducted under their account. VisionX shall not be liable for unauthorized access resulting from user negligence.

8. Cookies & Tracking Technologies

VisionX utilizes cookies, web beacons, and analytical tools to maintain user sessions, remember preferences, secure platform interactions, and evaluate platform performance. Users can control cookie settings through their browser preferences, though disabling essential cookies may impact platform functionality.

9. Third-Party Links & External Services

The VisionX platform may contain links to external third-party websites, payment gateways, or partner tools. VisionX is not responsible for the privacy practices, data handling policies, or content of external websites. We encourage users to review the privacy policies of any third-party service they visit.

10. Updates to This Privacy Policy

VisionX Enterprise Pvt. Ltd. may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Updates will be published on this page with a revised "Last Updated" date. Continued use of the platform after updates are published constitutes acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or data handling practices at VisionX, please reach out to our privacy and legal team:

Legal Entity: VisionX Enterprise Pvt. Ltd.
Privacy & Data Team: privacy@visionx.com.np
Customer Support: support@visionx.com.np
Location: Kathmandu, Nepal