Not affiliated with Certinal.

Data Fiduciary
Kestrova Health · Hyderabad cluster (fictional)
Overview

Synthetic tenant: Kestrova Health (fictional), 442 receipts. Sixty days of activity are generated deterministically and anchored to the current hour, so expiry and breach clocks are live. Every receipt is signed at load with Ed25519 key ksv-47c7d4987f3a and re-verified by the same code the public verify API runs. Consents you sign in the patient journeys appear at the top of the registry, held only in your browser.

Purposes and notices

The purpose catalogue drives every notice, every receipt and every withdrawal cascade. Each notice version is hashed, and each receipt stores the hash of the exact wording and language it showed (DPDP Sec 5, Rule 3).

12 purposes

  • Treatment and care

    Carehigh risk

    We will use your medical information to provide treatment and coordinate your care.

    Minimum identity
    L1 · OTP or app session
    Retention
    5 years
    Withdrawal reaches
    Internal care team only

  • Diagnostic lab sharing

    Sharing with a processorstandard risk

    Your samples and results will be shared with our partner diagnostic lab for testing.

    Minimum identity
    L1 · OTP or app session
    Retention
    5 years
    Withdrawal reaches
    Partner diagnostic lab

  • Insurance and TPA sharing

    Sharing with a processorstandard risk

    For cashless claims, we share your treatment details with your insurer or TPA.

    Minimum identity
    L2 · ABHA or witnessed OTP
    Retention
    3 years
    Withdrawal reaches
    Insurance TPA

  • Recording of consultation

    Carestandard risk

    We record the consultation for safety, quality review and prescription accuracy. Access is limited to your doctor and the privacy office.

    Minimum identity
    L1 · OTP or app session
    Retention
    3 years
    Withdrawal reaches
    Teleconsult video platform

  • Share prescription with pharmacy

    Sharing with a processorstandard risk

    Share your prescription with the pharmacy you choose so they can dispense your medicine.

    Minimum identity
    L1 · OTP or app session
    Retention
    3 years
    Withdrawal reaches
    Pharmacy fulfilment partner

  • Medicine order and dispensing

    Carehigh risk

    Process your medicine order and dispense it to the address you provide.

    Minimum identity
    L1 · OTP or app session
    Retention
    5 years
    Withdrawal reaches
    Pharmacy fulfilment partner

  • Share address with courier

    Sharing with a processorstandard risk

    Share your delivery address and phone number with the courier that delivers your medicine.

    Minimum identity
    L1 · OTP or app session
    Retention
    90 days
    Withdrawal reaches
    Courier partner

  • Lab test referral

    Sharing with a processorstandard risk

    Refer you to our partner lab for tests your doctor prescribes.

    Minimum identity
    L1 · OTP or app session
    Retention
    3 years
    Withdrawal reaches
    Partner diagnostic lab

  • Updates to family contact

    Communicationstandard risk

    Share treatment updates and discharge information with the family contact you nominate.

    Minimum identity
    L1 · OTP or app session
    Retention
    3 years
    Withdrawal reaches
    SMS and WhatsApp gateway

  • Appointment and refill reminders

    Marketinglow risk

    Reminders for upcoming appointments, prescription refills and follow-up visits.

    Minimum identity
    L1 · OTP or app session
    Retention
    1 year
    Withdrawal reaches
    SMS and WhatsApp gateway, Patient-engagement CRM

  • Health tips and seasonal alerts

    Marketinglow risk

    Curated health tips, chronic-care education and seasonal health alerts by SMS or email.

    Minimum identity
    L1 · OTP or app session
    Retention
    1 year
    Withdrawal reaches
    SMS and WhatsApp gateway, Patient-engagement CRM

  • Partner offers (insurance, pharmacy)

    Marketinglow risk

    Offers from vetted insurance and pharmacy partners. Your data is never sold.

    Minimum identity
    L1 · OTP or app session
    Retention
    1 year
    Withdrawal reaches
    Patient-engagement CRM, Partner-offers network

Hindi, Tamil and Telugu labels exist for every purpose and are machine-translated in this demo.

Published notices

  • Video teleconsultation (Tier A · inline)

    current v2026-09.1 · valid 365 days
    • v2026-06.2 en sha256 aef2168c82d4941b6bc2044e…
    • v2026-09.1 en sha256 81a18033e3fad7f2e2c8cd5d…
    Read the English notice
    notice.teleconsult_video v2026-09.1 [en]
Kestrova Health (fictional) collects the data below to run your video consultation.
- Treatment and care (needed for this service): We will use your medical information to provide treatment and coordinate your care. Data: name, contact number, medical history, diagnosis and treatment notes.
- Share prescription with pharmacy (needed for this service): Share your prescription with the pharmacy you choose so they can dispense your medicine. Data: name, prescription.
- Recording of consultation (optional): We record the consultation for safety, quality review and prescription accuracy. Access is limited to your doctor and the privacy office. Data: audio and video of the consultation.
- Lab test referral (optional): Refer you to our partner lab for tests your doctor prescribes. Data: name, test orders.
Withdraw any purpose at any time, as easily as you gave it: https://kestrova.example/privacy/rights.
Questions or complaints: dpo@kestrova.example. You may also complain to the Data Protection Board of India.

  • E-pharmacy order (Tier A · inline)

    current v2026-09.1 · valid 180 days
    • v2026-06.2 en sha256 11b33c1b20e715a7f77d20f2…
    • v2026-09.1 en sha256 5f1b73663182facbf51c4247…
    Read the English notice
    notice.epharmacy_order v2026-09.1 [en]
Kestrova Pharmacy (fictional) collects the data below to fulfil your medicine order.
- Medicine order and dispensing (needed for this service): Process your medicine order and dispense it to the address you provide. Data: name, prescription, order history.
- Share prescription with pharmacy (needed for this service): Share your prescription with the pharmacy you choose so they can dispense your medicine. Data: name, prescription.
- Share address with courier (needed for this service): Share your delivery address and phone number with the courier that delivers your medicine. Data: name, delivery address, phone number.
Withdraw any purpose at any time, as easily as you gave it: https://kestrova.example/privacy/rights.
Questions or complaints: dpo@kestrova.example. You may also complain to the Data Protection Board of India.

  • OPD visit (Tier B · quick)

    current v2026-09.1 · valid 365 days
    • v2026-06.2 en sha256 65f7906774526b4280c00866…
    • v2026-09.1 en sha256 1c6d00fabb9aeb72dc2fd499…
    Read the English notice
    notice.opd_visit v2026-09.1 [en]
Kestrova Health (fictional) collects the data below for your outpatient visit.
- Treatment and care (needed for this service): We will use your medical information to provide treatment and coordinate your care. Data: name, contact number, medical history, diagnosis and treatment notes.
- Diagnostic lab sharing (needed for this service): Your samples and results will be shared with our partner diagnostic lab for testing. Data: name, samples, test orders and results.
- Updates to family contact (optional): Share treatment updates and discharge information with the family contact you nominate. Data: name, treatment updates, nominated family contact.
- Appointment and refill reminders (optional): Reminders for upcoming appointments, prescription refills and follow-up visits. Data: name, phone number, appointment history.
- Health tips and seasonal alerts (optional): Curated health tips, chronic-care education and seasonal health alerts by SMS or email. Data: name, phone number or email, broad condition group.
- Partner offers (insurance, pharmacy) (optional): Offers from vetted insurance and pharmacy partners. Your data is never sold. Data: name, phone number or email.
Withdraw any purpose at any time, as easily as you gave it: https://kestrova.example/privacy/rights.
Questions or complaints: dpo@kestrova.example. You may also complain to the Data Protection Board of India.

  • Inpatient admission (Tier C · ceremony)

    current v2026-09.1 · valid 180 days
    • v2026-06.2 en sha256 8e60e7f157fa55bc7de2a774…
    • v2026-09.1 en sha256 184343f127d606bac817839a…
    Read the English notice
    notice.ipd_admission v2026-09.1 [en]
Kestrova Health (fictional) collects the data below for your hospital admission.
- Treatment and care (needed for this service): We will use your medical information to provide treatment and coordinate your care. Data: name, contact number, medical history, diagnosis and treatment notes.
- Diagnostic lab sharing (needed for this service): Your samples and results will be shared with our partner diagnostic lab for testing. Data: name, samples, test orders and results.
- Insurance and TPA sharing (optional): For cashless claims, we share your treatment details with your insurer or TPA. Data: name, policy number, treatment details, bills.
- Updates to family contact (optional): Share treatment updates and discharge information with the family contact you nominate. Data: name, treatment updates, nominated family contact.
Withdraw any purpose at any time, as easily as you gave it: https://kestrova.example/privacy/rights.
Questions or complaints: dpo@kestrova.example. You may also complain to the Data Protection Board of India.

Draft a new purpose

Describe the processing in a sentence. You get a Rule 3 purpose draft with risk class, assurance level and retention for counsel to review.