Privacy Policy
Transparent data handling and service terms for CareStep home care services
Privacy Policy & Terms of Service
Last updated: July 23, 2026 | CareStep: Trusted provider of home care, elderly care, and professional services across India.
Welcome to CareStep \u201cwe\u201d, \u201cour\u201d, \u201cus\u201d, a professional provider of home care, elderly care, patient care, and professional services across India This page explains how we collect, use, protect, and manage personal data and outlines the terms governing our caregiving services.
By accessing our website or availing our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy and Terms & Conditions.
This document complies with the Digital Personal Data Protection Act, 2023 (India), Information Technology Act, Consumer Protection Act, Indian Contract Act, and applicable Maharashtra regulations governing home healthcare and professional services.
1. Scope & Definitions
Client / You: Any individual or family availing CareStep's home care or professional services.
Professional: A trained CareStep professional, attendant, or nurse assigned for home-based care.
Services: Home caregiving including elderly care, assistance with daily living, mobility support, companion care, dementia support, medication reminders (non-invasive), and services mutually agreed under a care plan.
2. Personal Data We Collect
- Identity & contact details: name, address, phone number, email, WhatsApp, emergency contacts.
- Health information: diagnoses, mobility status, medications, allergies, doctor instructions.
- Billing & finance: invoices, payment history, UPI references, tax details where applicable.
- Service records: professional attendance, visit logs, timesheets, incident reports.
- Images or videos only with explicit consent or for safety and documentation purposes.
- Website analytics: anonymised IP data, cookies, device information.
- Professional verification data: KYC, background checks, police verification where required.
3. Purpose & Lawful Basis of Processing
Personal data is processed strictly for legitimate purposes such as:
- Delivering and managing home care and professional services.
- Creating personalised care plans and safety protocols.
- Communication regarding schedules, emergencies, or service updates.
- Regulatory, taxation, and legal compliance.
- Professional supervision, quality assurance, and training.
- Fraud prevention and safeguarding clients and professionals.
Processing is based on consent, contractual necessity, legal obligation, and legitimate interest as permitted under Indian data protection laws.
4. Consent for Health & Sensitive Data
Health-related information is collected only with informed consent, except in medical emergencies or where required by law. Withdrawal of consent may limit our ability to provide safe care.
5. Sharing of Personal Data
Data is shared only when necessary with:
- Matched professionals and supervisory staff.
- Medical professionals during emergencies.
- Secure technology and payment service providers.
- Government authorities when legally required.
- Insurance providers if claims arise.
We never sell personal data.
6. Data Security Practices
CareStep follows industry-standard security practices, including:
- Encrypted data storage
- Restricted, role-based access
- Regular system audits
- Incident response procedures
7. CCTV & Home Surveillance
Clients must disclose CCTV usage. Cameras are prohibited in private areas. Professionals must be informed to ensure workplace privacy compliance.
8. Data Retention
- Care records: 3–7 years depending on service.
- Medical records: as required by law.
- Billing records: minimum 8 years under GST laws.
9. Your Data Protection Rights
- Right to access and correction.
- Right to withdraw consent.
- Right to grievance redressal.
- Right to data portability where applicable.
Terms & Conditions \u2014 Professional & Home Care Services
Service Scope
Non-medical caregiving is provided unless a separate nursing agreement exists. Invasive medical procedures are excluded unless explicitly contracted.
Client Responsibilities
- Provide accurate medical and safety information.
- Ensure a safe, hygienic working environment.
- Respect professional dignity and boundaries.
Payments & Cancellations
Payments must be made as agreed. Cancellation notice requirements vary by plan. Certain customised services may be non-refundable.
Governing Law
These terms are governed by Indian law and subject to Mumbai jurisdiction. Consumer rights remain protected under the Consumer Protection Act, 2019.
Contact & Grievance Redressal
CareStep
Email:
privacy@carestep.in
Marathi version available upon request.