Privacy Policy · Legends of Medicine

1. Who we are

Legends of Medicine is operated by TODO — Registered Entity Pvt. Ltd. (“we”, “us”), a company registered in India. We run cohort-based mentorship programmes in ophthalmology for practising doctors and medical students.

For the purposes of India’s Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023, we are the entity responsible for the personal data described below.

TODO — Registered Entity Pvt. Ltd.
trading as Legends of Medicine
TODO — Building / Street
TODO — Area
TODO — City, State
TODO — PIN code, India

Email: admissions@legendsofmedicine.com
Phone: TODO — +91 XXXXX XXXXX (Monday to Friday, 10:00 – 18:00 IST)

2. What we collect

We only collect what you type into this website. We do not buy contact lists, and we do not scrape data about you from elsewhere.

Application & brochure forms: Your name, email address, phone number, medical qualification, city, state and PIN code, together with the programme and mentor you enquired about.
Waitlist form: Your name, city, phone number and email address.
Newsletter: Your email address, and nothing else.
Account registration: Your name, email address, qualification and a password. Passwords are never stored in a readable form and are never visible to our staff.
Practice growth calculator: The PIN code and specialisation you enter. We use published population and demographic datasets to produce an estimate. These inputs are not linked to you unless you go on to submit an enquiry form in the same visit.
AI assistant: The messages you type into the on-site assistant, and the replies it gives. Please do not enter patient details or any clinical information about an identifiable person into it.
Payment information: When you pay, you are handed over to our payment gateway. Your card, UPI, net-banking and wallet details are entered on their systems and never reach ours. We receive only the payment reference, amount, status and the name and contact details you gave at checkout.
Technical logs: Standard server logs — IP address, browser type, pages requested and timestamps — kept to keep the site running and to investigate abuse.

3. Tracking and what we store on your device

We run no third-party analytics, no advertising tags and no tracking pixels. We do not follow you across other websites, and we do not build a profile of you. There is nothing here to opt out of.

We store a small amount of information on your device, such as a sign-in token, purely to keep you signed in. Nothing stored there is used for advertising or tracking, and clearing your browsing data simply signs you out — it does not delete your account.

If you make a payment, the payment gateway sets its own cookies on its own checkout pages. Those are governed by its privacy policy rather than this one.

4. Why we use it

To respond to an enquiry, send you a brochure and arrange a call.
To assess your application and enrol you in a programme.
To take payment, issue receipts and meet our accounting and tax obligations.
To send you information about the programme you applied for, and — if you asked for it — occasional updates about new cohorts. Every marketing message carries an unsubscribe option.
To keep the website secure, and to detect and prevent misuse.

We do not sell your personal information, and we do not rent or share it with third parties for their own marketing.

5. Who else sees it

We share data only with service providers who need it to deliver something you asked for. Each is bound to use it only on our instructions.

Payment gateway: Razorpay Software Private Limited, to process payments and refunds.
Email delivery: Our email provider, to send welcome mails, brochures and programme updates.
WhatsApp messaging: Twilio, to send the welcome message to the number you provided, where you have given us that number.
AI assistant: Anthropic, which processes the messages you send to the on-site assistant to generate a reply. Those messages are not used to train models.
Mentors and faculty: Where you have applied to a specific programme, the mentor leading it may be shown your name and clinical background so they can assess your application. They are not given your contact details for their own marketing.
Hosting and infrastructure: The providers who host this website and our application database.
Legal: Where we are required to disclose information by law, by a court, or by a government agency acting under lawful authority.

Some of these providers operate servers outside India. Where data leaves the country, we rely on contractual protections requiring a standard of care no lower than this policy.

6. How long we keep it

Enquiries and waitlist entries that do not lead to enrolment: up to 24 months, then deleted.
Enrolment and payment records: eight years, as required by Indian tax and company law.
Newsletter subscriptions: until you unsubscribe, plus a suppression record so we do not email you again by mistake.
Server logs: up to 12 months.

7. How we protect it

The site is served over HTTPS, access to the application database is restricted to staff who need it for their work, and passwords are stored only as salted hashes. Payment credentials never touch our servers.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority as required by law.

8. Your rights

You may ask us at any time to:

tell you what personal data of yours we hold, and give you a copy;
correct anything that is inaccurate or out of date;
delete your data, where we are not required to keep it for legal or accounting reasons;
withdraw a consent you gave — for example, to stop marketing emails or WhatsApp messages.

Write to TODO — privacy@legendsofmedicine.com from the email address you signed up with. We will respond within 30 days. Withdrawing consent does not affect anything we did lawfully before you withdrew it, and it may mean we can no longer deliver a programme you have enrolled in.

9. Children

This website is intended for medical students and qualified doctors, and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal information, write to us and we will delete it.

10. Grievance officer

In accordance with the Information Technology Act, 2000 and the rules made under it, the grievance officer for this website is:

TODO — Full Name
Grievance Officer, TODO — Registered Entity Pvt. Ltd.
TODO — grievance@legendsofmedicine.com

Complaints are acknowledged within 48 hours and resolved within 30 days of receipt.

11. Changes to this policy

We may update this policy as the service changes. The date at the top of this page always reflects the current version. Where a change materially affects your rights, we will email everyone with an active enrolment before it takes effect.