Privacy Policy

7Unit Softwares Private Limited (“7Unit”, “we”, “us”) operates the Hally platform and related product lines (Hally, Hally Connect, Hally Connect+, Hally Hospital), including websites at https://www.gethally.com and application environments such as https://demo.gethally.com.

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our marketing sites, request a demo or pilot, or when healthcare organisations use Hally to deliver outpatient workflows.

Healthcare organisations that deploy Hally (“Customers”) typically act as data fiduciaries / controllers for patient data. 7Unit acts as a data processor / service provider for Customer-controlled patient data, except where we process data for our own business purposes (for example, sales enquiries).

This policy covers: (a) visitors to gethally.com and related marketing pages; (b) prospective customers who contact us; and (c) the design of how Hally processes personal data on behalf of Customers.

Customer-specific processing is also governed by the Customer’s agreement with 7Unit, any data processing terms, and the Customer’s own privacy notice to patients.

Marketing and sales: name, organisation, role, email, phone, city, message content, and similar details you submit when requesting a 21-day trial or emailing us. The trial/request form is not intended for patient names, diagnoses, prescriptions, reports, or other medical information.

Website technical data: IP address, browser type, device information, pages viewed, and referrer — collected through server logs and, if enabled, privacy-safe analytics.

On the Hally product (Customer environments): patient identifiers and health-related information required for outpatient workflows (for example name, phone, appointment details, visit reason, clinical notes, consent records), staff identity and role data, and operational audit metadata. Exact fields depend on the modules a Customer enables.

To respond to trial requests and enquiries, and provide customer support.

Information submitted through the Hally trial/request form is used to assess the request, contact the organisation about onboarding, and manage the related sales conversation. Optional marketing communication (product updates, healthcare-operations content, and similar) is separately optional and can be declined or withdrawn without affecting the trial request.

We may store source and attribution fields (for example UTM parameters, landing page, and referrer) so we can understand how an organisation found Hally. These are sales analytics, not clinical records. Please submit verified organisation contact details only.

To operate, secure, and improve the Hally platform (including multi-tenant isolation, encryption, access control, and audit logging).

To process outpatient workflows on behalf of Customers (WhatsApp journeys, booking, documentation assistance, reception and operations features) as instructed by the Customer.

To comply with applicable law and enforce our agreements.

Information submitted through the Hally trial/request form is used to: assess the request; contact the organisation; and manage onboarding and sales communication.

Optional marketing (Hally product updates, healthcare-operations content, and future marketing communication) is separately optional. You can decline or withdraw marketing permission without affecting the trial request.

The trial interest form is not intended for patient or medical information. Please do not include patient names, diagnoses, prescriptions, reports, or other health records.

Source and attribution data (for example UTM parameters, landing page, and referrer) may be stored with the enquiry so we can understand how an organisation found Hally.

Please use verified organisation contact details only.

Where the Digital Personal Data Protection Act, 2023 applies, we process personal data based on consent and/or other lawful grounds permitted under the Act and rules, including processing that is necessary for employment/contractual purposes with Customers and for compliance with law.

For patient-facing WhatsApp and clinical workflows, Hally is designed so that Customers can capture consent before health-related intake, and retain consent records for accountability.

Where Customers use WhatsApp-based journeys, messages are transmitted via Meta’s WhatsApp Business infrastructure. Meta’s terms and policies also apply to that channel. Usage charges from Meta may be billed separately from Hally subscription fees.

We do not sell personal data.

We may share data with subprocessors that help us host and operate the service (for example cloud infrastructure, email delivery, transcription or AI providers used inside approved product integrations), under contractual confidentiality and security obligations.

We may disclose information if required by law or to protect rights, safety, and security.

Hally is engineered with multi-tenant isolation, encryption of sensitive fields at rest (AES-256-GCM with organisation-scoped keys), access controls, and audit logging of access to patient data. See our Security & data processing page for a fuller description.

No method of transmission or storage is perfectly secure. Customers remain responsible for configuring access within their organisation and for their own device and staff practices.

Marketing enquiry data is retained as needed to manage the sales relationship and for legitimate business records.

Customer patient data retention follows the Customer agreement and Customer instructions, subject to legal holds and applicable healthcare record requirements.

Depending on applicable law, individuals may have rights to access, correction, erasure, and grievance redressal regarding personal data.

If you are a patient of a Hally Customer, please contact that healthcare organisation first — they control your care record. You may also contact us at privacy@gethally.com and we will route the request appropriately.

If you are a website visitor or sales contact, email privacy@gethally.com or hello@gethally.com.

Our marketing site is directed to healthcare organisations and professionals, not to children. Product workflows may involve paediatric patients only as configured and authorised by the Customer.

We may update this policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of the site after updates constitutes notice of the revised policy for marketing-site visitors.

The trial-request and optional-marketing wording on this page is operational notice text and is flagged for legal review. It is not a claim of DPDP certification. This policy does not appoint a Data Protection Officer or a grievance officer.

7Unit Softwares Private Limited

Email: privacy@gethally.com · hello@gethally.com

Web: https://www.gethally.com