Effective Date: 29-05-2026
This Policy is compliant with the Information Technology Act 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011 ("SPDI Rules"), the Digital Personal Data Protection Act 2023 ("DPDP Act"), and the Digital Personal Data Protection Rules 2025.
By using the BULAMBU Platform, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.
1Data Controller Identity
BULAMBU is the Data Fiduciary under the Digital Personal Data Protection Act 2023, responsible for determining the purpose and means of processing your personal data.
BULAMBU Healthcare Platform
Panvel, Navi Mumbai, Maharashtra, India
Email: bulambu2026@gmail.com
Phone: 7208673693
2What Personal Data We Collect
We collect only the minimum data necessary to provide our services (Data Minimisation Principle under DPDP Act 2023).
2.1 Data You Provide Directly
- •Identity data: Full name, date of birth, gender.
- •Contact data: Mobile number, email address, home address.
- •Family member data: Names, ages, and relationships of family members added to your account.
- •Health-related data: Medical conditions, chronic diseases, and medication schedules (only as entered voluntarily by you for the medicine reminder service).
- •Emergency contact data: Names and mobile numbers of designated emergency contacts.
- •Payment data: Transaction reference numbers and payment confirmation details (full card details are processed by our payment gateway partners and not stored by BULAMBU).
2.2 Data Collected Automatically
- •Location data: Real-time GPS location collected only when the SOS feature is activated or during an active ambulance booking. Location is not tracked continuously in the background.
- •Device data: Device type, operating system, app version, unique device identifiers.
- •Usage data: Features used, timestamps, session duration, and interaction logs.
- •Log data: IP address, browser type (for website access), and error logs.
2.3 Sensitive Personal Data (under SPDI Rules 2011 and DPDP Act 2023)
The following categories of data collected by BULAMBU are classified as Sensitive Personal Data or Information and are processed with heightened care and protection:
- •Health and medical information (conditions and medications entered for reminders).
- •Real-time location data collected during emergency activation.
Collection of sensitive personal data is subject to your explicit, informed, and revocable consent as required under the DPDP Act 2023.
3Legal Basis for Processing
Under the Digital Personal Data Protection Act 2023, BULAMBU processes your personal data on the following legal bases:
Consent
For collection of health data, location data, and sending of reminders — you provide explicit, informed consent which you may withdraw at any time.
Contract
For processing necessary to provide the services you have subscribed to and paid for.
Legitimate Interest
For security monitoring, fraud prevention, and improving Platform functionality.
Legal Obligation
For complying with applicable Indian laws, court orders, or regulatory requirements.
4How We Use Your Data
BULAMBU uses your personal data only for the purposes for which it was collected (Purpose Limitation Principle):
- To create and manage your account and subscription.
- To provide emergency coordination services — dispatching ambulances and displaying nearby hospitals.
- To transmit your location and destination to your selected partner ambulance.
- To send real-time emergency status updates to your designated emergency contacts.
- To deliver medicine reminders via SMS, WhatsApp, and automated voice call.
- To send caregiver alerts when medication reminders are not acknowledged.
- To process payments and manage subscription renewals.
- To send service-related communications, subscription renewal reminders, and important platform updates.
- To comply with applicable legal obligations.
- To improve the Platform and develop new features based on aggregated, anonymised usage patterns.
5Data Sharing and Disclosure
5.1 When We Share Your Data
BULAMBU shares your personal data only to the extent necessary and only with the following parties:
- •Partner Ambulance Providers: Your name, live location, and selected hospital destination are shared with the assigned ambulance provider strictly for the purpose of fulfilling your emergency or planned transport booking.
- •Emergency Contacts: Real-time status updates are sent to contacts designated by you. These contacts are selected and authorised by you.
- •Payment Gateway Partners: Transaction data is shared with our payment processor for the purpose of processing subscription payments. BULAMBU does not receive or store full card details.
- •Technology Service Providers: Mapping, SMS, WhatsApp Business API, and cloud hosting providers who process data on behalf of BULAMBU as Data Processors under binding Data Processing Agreements.
- •Legal and Regulatory Authorities: As required by applicable Indian law, court order, or to protect the rights and safety of BULAMBU or others.
5.2 We Will Never
- •Sell your personal data to any third party.
- •Share your health or medical data with any party without your explicit consent.
- •Share your data with advertisers.
- •Transfer your data outside India without adequate safeguards and in compliance with applicable cross-border data transfer provisions of the DPDP Act.
6Data Storage and Security
6.1 All personal data is stored on secure servers located within India, in compliance with applicable data localisation requirements.
6.2 BULAMBU implements reasonable security practices and procedures as required under Rule 8 of the SPDI Rules 2011, including:
End-to-end encryption
For data in transit using industry-standard TLS/SSL protocols.
Sensitive data protection
Encryption of sensitive data at rest.
Access controls
Role-based permissions limiting employee access to personal data.
Regular audits
Regular security audits and vulnerability assessments.
Incident response
Formal procedures for personal data breaches.
6.3 In the event of a personal data breach affecting your data, BULAMBU will notify you and the Data Protection Board of India without undue delay, as required under Rule 7 of the Digital Personal Data Protection Rules 2025.
7Data Retention
7.1 BULAMBU retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Indian law.
- •Account data: Retained for the duration of your subscription and for two (2) years after account closure.
- •Emergency event data: Retained for three (3) years for legal and audit purposes.
- •Payment transaction records: Retained for seven (7) years as required under Indian tax and financial regulations.
- •Health and medication data: Retained only for the active duration of the medicine reminder service. Deleted within thirty (30) days of service cancellation or account closure upon your request.
7.2 Upon expiry of the applicable retention period, data will be securely deleted or anonymised.
8Your Rights as a Data Principal
Under the Digital Personal Data Protection Act 2023, you have the following rights regarding your personal data:
8.1 Right to Access
You have the right to obtain a summary of the personal data BULAMBU holds about you and the purposes for which it is being processed. You may submit an access request to privacy@bulambu.in.
8.2 Right to Correction
You have the right to correct inaccurate or incomplete personal data. You may update most data directly within the Platform. For data you cannot update yourself, contact privacy@bulambu.in.
8.3 Right to Erasure
You have the right to request deletion of your personal data. BULAMBU will erase your data subject to any overriding legal obligations to retain certain records. Erasure requests can be submitted to privacy@bulambu.in.
8.4 Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw consent at any time. To withdraw consent, contact privacy@bulambu.in or use the in-app consent management settings.
8.5 Right to Grievance Redressal
You have the right to have your privacy grievances addressed promptly. Complaints may be submitted to our Data Protection Officer. If unresolved, you may escalate to the Data Protection Board of India.
8.6 Right of Nomination
You have the right to nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
To exercise any of your rights, contact BULAMBU at: bulambu2026@gmail.com. We will respond within seven (7) business days of receipt of a verified request.
9Location Data — Special Notice
9.1 BULAMBU accesses your device's GPS location only in the following circumstances:
- •When you activate the SOS emergency feature — location access is continuous for the duration of the active emergency.
- •When you initiate a planned ambulance booking — location access is used only at the time of booking confirmation.
9.2 BULAMBU does NOT access your location in the background at any other time.
9.3 Location data is processed in compliance with the Guidelines for Acquiring and Producing Geospatial Data issued by the Department of Science and Technology, Government of India, February 2021.
9.4 You may revoke location permissions through your device settings. However, doing so will prevent the SOS and planned transport features from functioning correctly.
10Children's Data
10.1 BULAMBU's services are not directed at children under 18 years of age as independent users.
10.2 Where a registered adult user adds a minor as a family member (for medicine reminder purposes), the adult account holder is responsible for ensuring appropriate consent and oversight.
10.3 BULAMBU processes children's health data only as permitted under Rule 12 of the Digital Personal Data Protection Rules 2025, with appropriate safeguards and limited to health purposes only.
11Cookies and Tracking Technologies
11.1 The BULAMBU website uses cookies and similar tracking technologies to improve user experience and analyse Platform usage.
11.2 Essential cookies necessary for Platform functionality are always active. Non-essential cookies require your consent, which can be managed through the cookie consent banner or your browser settings.
11.3 BULAMBU does not use tracking technologies for targeted advertising.
12Third-Party Links
The Platform may contain links to third-party websites or services. BULAMBU is not responsible for the privacy practices of third-party platforms. We encourage you to review the privacy policies of any third-party services you access through or in connection with the BULAMBU Platform.
13Changes to This Privacy Policy
13.1 BULAMBU may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. Material changes will be communicated to registered users via email and/or in-app notification at least fifteen (15) days before taking effect.
13.2 The effective date of the current version is stated at the top of this Policy. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy.
14Data Protection Officer
In accordance with the Digital Personal Data Protection Act 2023, BULAMBU has designated a Data Protection Officer:
Data Protection Officer: Nikhil Suryawanshi , Bhushan Bageshwar
Email: bulambu2026@gmail.com
Address: Panvel, Navi Mumbai, Maharashtra, India
Phone: 7208673693 , 7709358537
15Regulatory Authority
If you believe BULAMBU has not adequately addressed your privacy concerns, you have the right to lodge a complaint with the Data Protection Board of India, once operational under the Digital Personal Data Protection Act 2023.
Acknowledgement
By using the BULAMBU Platform, you acknowledge that you have read, understood, and agree to be bound by these Terms and Conditions and this Privacy Policy in their entirety.