Privacy Policy
Q2 ONE is built by Q2 InfoWorld®, the healthcare technology brand of Quantum Quasar Infoworld LLP ("Q2 ONE", "we", "us", "our"), based in Ahmedabad, Gujarat, India. This policy explains how we collect, use, and protect information across q2one.com and the Q2 ONE platform, including Q2 ONE Clinix, HMS, Campus, MR, and Labs.
1. Scope of this policy
This policy covers two categories of information, treated differently:
- Website and account information — data you or your organization give us directly, such as through our contact and demo request forms, or when setting up a Q2 ONE account. We are the data controller for this information.
- Practice and patient data — data your organization enters into a Q2 ONE product (for example, patient records, appointments, prescriptions, or treatment photos in Q2 ONE Clinix) in the course of running your practice. Here, your organization is the data controller and Q2 ONE acts only as a data processor / service provider, handling that data solely on your instructions and under a separate data processing agreement available to every customer on request. This policy does not give Q2 ONE any independent right to use your patients' data for our own purposes.
2. Information we collect
Depending on how you interact with us, we may collect:
- Contact details you submit through demo, contact, or waitlist forms — name, email, phone, organization name, and any message you include.
- Account information for registered customers — organization name, billing contact, authorized user names and roles, and login credentials (stored securely, never in plain text).
- Usage information — pages visited, general device and browser information, and approximate location inferred from IP address, collected automatically when you browse q2one.com.
- Billing information necessary to process subscriptions, handled by our payment processing partners rather than stored directly on our servers where possible.
3. How we use information
We use the information above to: respond to demo and contact requests; set up and administer customer accounts; provide, maintain, and improve the Q2 ONE platform; send service-related communications (billing notices, security alerts, product updates); understand how our website is used so we can improve it; and meet legal and contractual obligations. We do not sell personal information to third parties.
4. Cookies & analytics
Our website may use cookies and similar technologies for essential site functionality and to understand aggregate visitor behavior. You can control cookies through your browser settings; disabling them may affect some site features.
5. Who we share data with
We share information only where necessary to run our business and platform, including with: infrastructure and hosting providers who store data on our behalf under contractual confidentiality and security obligations; form-processing and communication tools (such as our contact form provider) used solely to route your inquiries to us; and professional advisors or authorities where required by law. Any subcontractor who may handle customer or patient data on our behalf is bound by written data protection terms at least as strict as this policy.
6. Data security
We apply industry-standard safeguards appropriate to healthcare data, including encryption of data in transit and at rest, role-based access controls, audit logging of access to sensitive records, and regular review of our security practices. For U.S.-based healthcare customers subject to HIPAA, we offer a Business Associate Agreement (BAA) on request — contact us for details.
7. International transfers
Q2 ONE is based in India, and data may be processed on servers located in India or other countries where our infrastructure providers operate. Where we transfer personal data internationally, we take reasonable steps to ensure it remains protected consistently with this policy and applicable law.
8. Data retention
We retain website and account information for as long as needed to provide our services and meet legal, accounting, or reporting obligations, after which it is securely deleted or anonymized. Retention of practice and patient data within a Q2 ONE product is governed by the data processing terms agreed with each customer, who controls how long their records are kept.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing — including rights available under India's Digital Personal Data Protection Act, 2023, and equivalent laws elsewhere. To exercise these rights over website or account data, contact us using the details below. If your data was entered into a Q2 ONE product by a clinic or organization you're a patient of, please contact that organization directly, as they control that data.
10. Children's privacy
Our website and platform are intended for business and professional use and are not directed at children. We do not knowingly collect personal information directly from children through our website.
11. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the effective date above, and where appropriate, we will notify registered customers directly.
12. Contact us
Questions about this policy or your data can be sent to info@q2one.com, or in writing to Quantum Quasar Infoworld LLP, Ahmedabad, Gujarat, India.