Privacy Policy
How we collect, use, and protect personal data across the REACH platform.
1.Scope of This Policy
This Privacy Policy explains how Stratech Ventures Private Limited, operator of the REACH platform (reach-care.net), collects, uses, and protects personal data. It applies to visitors to our website, staff of Client Organisations who use REACH (coordinators, BD teams, clinicians, administrators), and, where a Client Organisation enables patient-facing features, patients whose information passes through the Platform.
2.Information We Collect
We collect: account information such as name, work email, role, and organisation; patient and lead information uploaded or captured through REACH by a Client Organisation, which may include contact details, condition, urgency, budget, language preference, and admissions or care-journey status; usage and device data such as log files, IP address, browser type, and interaction events; and cookies and similar technologies as described in our Cookie Policy.
3.Our Role: Controller and Processor
For account, marketing, and website data, Stratech Ventures acts as the data controller. For patient and lead data uploaded by a Client Organisation into REACH, Stratech Ventures acts as a data processor, acting only on the Client Organisation’s documented instructions under a data processing agreement. Questions about how a specific hospital or clinic uses your data should be directed to that organisation as the data controller.
4.How We Use Information
We use personal data to provide and operate REACH; power AI-assisted lead scoring, routing, and workflow automation; generate dashboards and reporting for Client Organisations; maintain platform security and prevent abuse; communicate with account holders about the service; and meet legal and regulatory obligations.
5.AI Processing of Personal Data
REACH uses AI models to score, flag, and route leads and patient records within the governance tiers described in our Terms & Conditions. AI processing is used to assist Client Organisation staff, not to make final clinical or admissions decisions autonomously — a human confirms every recommendation before it reaches a patient.
6.Legal Bases for Processing
Where GDPR or equivalent law applies, we process personal data on the bases of performance of a contract with the Client Organisation, our legitimate interests in operating and securing the Platform, compliance with legal obligations, and, where applicable, consent obtained by the Client Organisation from patients.
8.International Data Transfers
Where personal data is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms recognised under applicable data protection law.
9.Data Retention
We retain personal data for as long as needed to provide REACH to the relevant Client Organisation, plus any additional period required for legal, audit, or dispute-resolution purposes, after which it is deleted or anonymised in accordance with our data retention schedule and the Client Organisation’s instructions.
10.Data Security
We apply administrative, technical, and physical safeguards described in our Security Policy, including encryption, role-based access controls, and audit logging.
11.Your Rights
Subject to applicable law, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. Where REACH processes your data on behalf of a Client Organisation, we will direct your request to that organisation or assist it in responding, consistent with our processor role.
12.Children’s Data
REACH is not directed at children, and we do not knowingly collect personal data directly from children outside the context of a Client Organisation’s clinical care relationship, which is subject to that organisation’s own consent and safeguarding practices.
13.Cookies
Our website and Platform use cookies as described in our Cookie Policy.
14.Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified through the Platform or by email to account holders.
15.Contact
Privacy questions or requests can be sent to privacy@reach-care.net.
Level 5, Fortius Block, Plot No. 1, SIDCO Industrial Estate, Guindy, Chennai, Tamil Nadu 600032, India