Data Use & Purpose Limitation Agreement

This agreement is between ClinicsRush(the “Tool Provider”) and the subscribing clinic (the “Clinic”). It takes effect on activation of the Clinic's ClinicsRush account and can be attached to, or incorporated into, the master service agreement between the parties.

1. Purpose of the Tool

ClinicsRush is a software tool provided solelyto help the Clinic manage its own patient feedback and Google reviews. It exists only to operate this service for the specific Clinic it is contracted with, and for that Clinic's own business.

2. Ownership of Data

All patient data (names, phone numbers, visit details, feedback and related information) entered into or generated by the Tool remains the exclusive property of the Clinic.ClinicsRush claims no ownership over it and acts only as a data processor following the Clinic's instructions. The Clinic is the data fiduciary/controller; ClinicsRush is the data processor.

3. Permitted Use

ClinicsRush will use the Clinic's and its patients' personal data only to:

• Send review and feedback messages to that Clinic's patients on the Clinic's behalf;
• Route patient feedback and concern alerts back to that same Clinic;
• Provide that Clinic with dashboards, reports and support for its own account;
• Operate, secure and maintain the service for that Clinic.

4. Prohibited Use — What ClinicsRush Will Never Do

ClinicsRush expressly agrees that it will not, under any circumstances:

• Use the data to acquire, solicit or market to the Clinic's patients for itself or any third party;
• Use the data to acquire, recruit or approach other clinics;
• Sell, rent, license, share or disclose the Clinic's or its patients' personal data to any third party — except sub-processors strictly necessary to run the service (e.g. messaging and hosting providers), bound by equivalent confidentiality;
• Use the data for any purpose other than serving that specific Clinic's own business, as described in Section 3;
• Combine, pool or cross-use one Clinic's patient data with another Clinic's, or build any independent database, product or marketing list from it;
• Contact the Clinic's patients for ClinicsRush's own promotional purposes.

5. Confidentiality & Security

ClinicsRush keeps all Clinic and patient data confidential and protected with appropriate technical and organisational measures, including access controls so that each Clinic's data is isolated and accessible only to that Clinic's authorised account and to ClinicsRush's service systems operating on its behalf.

6. Retention & Deletion

Patient data is retained only as long as needed to provide the service. On termination of the Clinic's account, or on the Clinic's written request, ClinicsRush will delete or return the Clinic's data within thirty (30) days, save for anything it must retain by law.

7. Patient Consent — the Clinic's Responsibility

Obtaining and maintaining patient consent is solely the Clinic's responsibility.The Clinic confirms it has a lawful basis and the necessary consent from each patient to share that patient's contact details with ClinicsRush and to send them WhatsApp feedback and review requests. By using the tool, the Clinic represents that this consent is in place. ClinicsRush relies entirely on the Clinic's instructions and representations, and ClinicsRush's responsibility for obtaining patient consent ends there.The Clinic indemnifies ClinicsRush against any claim arising from the Clinic's failure to obtain valid consent.

8. Compliance

Both parties will comply with applicable data protection law, including India's Digital Personal Data Protection Act, 2023, and applicable messaging-platform (WhatsApp/Meta) and Google policies.

9. Breach & Liability

If ClinicsRush breaches Section 4, the Clinic may terminate immediately, and ClinicsRush will be liable for the breach to the extent permitted by law and any master services agreement between the parties.

This document is a plain-language data-use commitment and is not a substitute for legal advice; have it reviewed by counsel before signing.