1. PRINCIPLES OF CONSENT
- FREE: Core services are not conditioned on unnecessary consent.
- SPECIFIC: Each consent request identifies a specific purpose.
- INFORMED: Plain-language explanation provided before consent is sought.
- UNAMBIGUOUS: Active affirmative action required — tick-box or 'I Agree'. No pre-ticked boxes.
- WITHDRAWABLE: Consent may be withdrawn at any time via email to dpo@oplive.app.
2. CONSENT LAYER 1 — ACCOUNT REGISTRATION (ONE-TIME)
At registration, one-time consent is collected through an explicit affirmative screen covering:
- Consent to Terms & Conditions and Privacy Policy.
- Consent to process identity and contact data for account management.
- Consent to receive service communications (OTPs, reminders, booking confirmations).
- Implied consent: by booking a consultation, the User consents to OPLive facilitating the handling and sharing of their personal and health data with the selected RMP for the specific consultation purpose — as a necessary and integral part of the booking service.
3. CONSENT LAYER 2 — HEALTH DATA AND TELECONSULTATION
A one-time, explicit consent covering health data processing and teleconsultation is collected at first booking. This consent covers:
- Consent to share health information with the RMP selected for consultations booked through the Application.
- Consent to participate in video/audio/chat consultations. Camera and microphone permissions are requested by the device OS at first use — no per-session re-request required.
- Acknowledgement that OPLive is a technology intermediary and all medical decisions rest with the consulting RMP.
- Acknowledgement that teleconsultation is not for medical emergencies.
4. CONSENT LAYER 3 — MARKETING COMMUNICATIONS (OPTIONAL)
"I optionally consent to receive health tips, offers, and updates from OPLive via email/SMS/WhatsApp. I may withdraw this consent at any time by emailing
support@oplive.app with subject 'Marketing Opt-Out — [Mobile Number]'."
5. CONSENT WITHDRAWAL
- Marketing consent: Email support@oplive.app — effective within 48 hours.
- Health data / account data processing consent: Email dpo@oplive.app — effective within 7 working days.
- Account deletion: Email support@oplive.app — effective within 30 working days.
Withdrawal does not affect the lawfulness of processing before withdrawal. Withdrawal of core processing consent may prevent use of certain Application features.
6. CONSENT REVIEW
OPLive conducts periodic internal review of its consent framework to ensure ongoing compliance with the DPDP Act. Consent records maintained for a minimum of 3 years post-account closure.
7. MINORS
Where a parent or guardian registers on behalf of a minor, they provide consent on behalf of the minor by completing the account registration process. OPLive makes best efforts to identify minor users.
8. CONSENT LOGGING
Captured at each consent point: User ID, consent type, consent text version, timestamp (IST), and method of consent. Logs stored in a tamper-evident system for a minimum of 3 years.
