Privacy Policy
Last updated: August 2026
ThalAssist is a student-led project under active development. This policy describes, honestly and in plain language, what we collect today and why. It has not yet been reviewed by a qualified legal professional — that review is planned before the platform is used at scale with real patient or donor data.
1. Who we are
ThalAssist is a student-led social-impact project built to help hospitals, patients and families coordinate thalassemia care, and to connect blood donors with hospitals that need them. It was started by Viraj Patra. You can reach us at support@thalassist.in.
2. What information we collect
We collect different information depending on how you use the site:
| Where | What we collect |
|---|---|
| Contact form | Name, email, phone (optional), the type of enquiry, and your message. |
| Donor registration | Full name, mobile number, address, city, state, pincode, blood group, and your consent to share this with hospitals. |
| Hospital platform (app.thalassist.in) | Handled separately, under stricter access controls, for hospitals enrolled on the platform. This policy covers the public marketing site and donor registration; hospital staff using the clinical platform are covered by that system's own access and audit controls. |
We do not knowingly collect more information than is needed for the purpose it was given for.
3. Why we collect it
- Contact form: to respond to your enquiry.
- Donor registration: so that a hospital can reach you if a patient near you needs your blood type.
We do not use this information for advertising, and we do not sell it to anyone.
4. Consent
Donor registration requires you to actively tick a consent checkbox before submitting — the form cannot be submitted without it. You are giving permission for your name, contact number, blood group and location to be shared with hospitals in the ThalAssist network, specifically for blood donation coordination. You can withdraw this consent at any time by contacting us (see Section 8).
5. How we protect your information
- Encryption in transit and at rest.
- Role-based access — only relevant hospital staff can view donor contact details, and only when coordinating a match.
- No public or unrestricted donor list — donor information is never displayed openly on the website.
- An audit trail of who accessed donor records, and when.
- Rate limiting and spam protection on public forms.
6. Who we share it with
Donor information is shared only with hospitals in the ThalAssist network, and only for blood donation coordination. Final confirmation of blood-group compatibility, eligibility and infection screening is always carried out by the hospital or blood bank directly — ThalAssist does not perform or guarantee this itself.
We do not share your information with advertisers, data brokers, or any other third party for marketing purposes.
7. How long we keep it
Donor records are kept while your registration is active. If you ask us to remove your details, your record is marked as withdrawn and is no longer shown to hospitals — we keep a minimal record that consent was withdrawn and when, since that itself is information we need to retain to honor your request going forward.
8. Your rights
You can ask us at any time to:
- Tell you what information we hold about you.
- Correct information that is inaccurate.
- Withdraw your consent and stop being contacted as a donor.
To do any of these, email support@thalassist.in.
9. Children's information
This website's donor registration is intended for donors who meet standard blood donation age requirements. We do not knowingly collect information directly from children through this site.
10. Cookies
This site runs on WordPress and may use standard, functional cookies needed for the site to work correctly. We do not use tracking or advertising cookies.
11. Changes to this policy
As ThalAssist develops — including once it undergoes formal legal and security review — this policy will be updated to reflect that. We'll update the date at the top of this page when we do.
12. Contact us
Questions about this policy or your data: