Privacy Policy

Last updated: 26 June 2026

This Privacy Policy describes how SnapFacility (a product of Vistaar Enterprise Solutions, referred to as "we", "us", or "our") collects, uses, discloses, and safeguards your information when you visit our website www.snapfacility.com or use our hospital facility management platform. Please read this policy carefully. If you do not agree with the terms of this policy, please discontinue use of our site and services.

---

1. Information We Collect

1.1 Information You Provide Directly

• Contact details — name, email address, phone number, job title, hospital or organisation name when you submit demo requests, contact forms, or newsletter sign-ups.
• Account information — login credentials, profile details, and role information when you register for or use the SnapFacility platform.
• Communication content — messages, support tickets, and feedback you send us via email or our website forms.

1.2 Information Collected Automatically

• Usage data — pages visited, time spent, clicks, referring URLs, browser type, device type, and operating system.
• IP address and location — approximate geographic location derived from your IP address.
• Cookies and tracking technologies — session cookies, preference cookies, and analytics cookies. See our Cookie Policy for full details.

1.3 Information from Third Parties

• Analytics providers (e.g., Google Analytics) that help us understand website usage patterns.
• CRM and marketing platforms used to manage leads and communications.

---

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the SnapFacility platform and website.
• Respond to your enquiries, demo requests, and support tickets.
• Send you product updates, newsletters, and promotional communications (only with your consent, and you may unsubscribe at any time).
• Analyse website traffic and user behaviour to improve our content and user experience.
• Comply with legal obligations and enforce our Terms of Service.
• Prevent fraud, abuse, and security incidents.

---

3. Legal Basis for Processing (GDPR)

Where applicable under the EU General Data Protection Regulation (GDPR) or similar laws, our legal bases for processing your personal data are:

• Contractual necessity — to deliver services you have requested.
• Legitimate interests — for analytics, security, and improving our services, where these interests are not overridden by your rights.
• Consent — for marketing communications and non-essential cookies.
• Legal obligation — where required by applicable law.

---

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data with:

• Service providers — trusted third-party vendors (hosting, analytics, email, CRM) who process data on our behalf under strict confidentiality agreements.
• Legal authorities — where required by law, court order, or government request.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

All third parties are contractually required to protect your data and use it only for the purposes we specify.

---

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, including legal, accounting, or reporting requirements. Typically:

• Website enquiry and contact data — up to 3 years from last interaction.
• Platform account data — for the duration of your subscription plus 1 year after termination.
• Analytics data — retained in aggregate form; individual-level data purged within 26 months.

After the applicable retention period, data is securely deleted or anonymised.

---

6. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data in transit.
• Access controls and role-based permissions within our platform.
• Regular security assessments and vulnerability testing.
• Data stored on servers located in India with industry-standard safeguards.

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

---

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request erasure of your personal data, subject to legal retention obligations.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Portability — receive your data in a structured, machine-readable format.
• Withdrawal of consent — withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@snapfacility.com. We will respond within 30 days.

---

8. Cookies

We use cookies and similar tracking technologies on our website. For full details on what cookies we use and how to manage your preferences, please see our Cookie Policy.

---

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

---

10. Children's Privacy

Our platform and website are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

---

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated date at the top of this page will reflect when the policy was last revised. We encourage you to review this policy periodically. Continued use of our website or platform after changes are posted constitutes acceptance of the revised policy.

---

12. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Gurgaon, Haryana, India.