Respondent / Member Terms & Conditions and Consent

• "Platforms" — the websites, applications, panels, interfaces and sub-domains operated under the GRG Health and Kyrios brands, including grgonline.com and kyrios.online.
• "Services" — market research, surveys, interviews, advisory boards, online communities, honoraria administration, content and related products and functionalities we make available, whether qualitative or quantitative.
• "Clients / Sponsors" — our clients and their affiliates, including pharmaceutical, biotechnology, medical device, healthcare and related companies, on whose behalf research or communications may be conducted.
• "Therapy-Area Material" — educational, scientific, disease-awareness or product-related information relating to specified therapy areas or medical specialties.
• "Honorarium" — any monetary or non-monetary consideration offered to recognise your time, effort and expertise in participating in research activities.
• "Confidential Information" — all information relating to Projects and Services made available to you, as further described in Section 8.

To participate you must be at least 18 years old. By participating, you represent and warrant that: (a) you are able to form a legally binding contract under applicable law; (b) you are not prohibited from participating under any applicable law or regulation; (c) any information you submit is accurate, truthful and current; and (d) your participation and the information you submit do not violate any applicable law or regulation.

You consent to receive communications from us electronically, by call, email, SMS, WhatsApp, in-app messaging or other means. You may receive transactional communications relating to your participation — including project invitations, study confirmations, scheduling reminders and payment notifications. You agree that electronic communications satisfy any legal requirement that such communications be in writing, and are deemed given and received on the date we transmit them.

You may opt out of non-essential SMS communications at any time by following the unsubscribe instructions in any such message (for example, replying STOP), and you may opt out of marketing emails by following the unsubscribe instructions in such emails. Opting out of marketing does not affect transactional communications necessary for your participation.

Access to certain Services requires a simple registration process and the creation of a personal user profile ("User Profile"). GRG Health may, at its sole discretion, refuse or revoke any registration.

To complete your User Profile you may be required to provide information including your full name, email address, gender, mobile number(s), date of birth, current city/place of residence, professional details (such as specialty, qualifications and practice), and/or photograph. You must provide complete, accurate and truthful information and keep it current. We are not obliged to verify the information you provide and are not responsible for any consequence arising from incorrect or concealed information.

You are responsible for maintaining the confidentiality of your account credentials, including your username, password and User Profile, and you are fully responsible for all activities that occur under your account. You agree to notify us immediately of any unauthorised access to or use of your account.

This section sets out the consent you provide as part of your acceptance of these Terms. It is the lawful basis on which we and our Clients/Sponsors may contact you and use your data for the purposes below. By accepting these Terms, you provide this consent, which is voluntary, specific and informed, and is provided consistent with the Digital Personal Data Protection Act, 2023. You may withdraw it at any time as set out in Section 4.3.

4.1 What you consent to

By providing your consent, you agree that GRG Health may collect, use, store and process your personal information, and may contact you by email, telephone, SMS, WhatsApp, in-app messaging and other electronic means, for the following purposes:

• Marketing on behalf of pharmaceutical and other Clients/Sponsors — to send you promotional, brand and marketing communications relating to products, services, events and initiatives of pharmaceutical, biotechnology, medical device, healthcare and related companies, whether from us directly or on their behalf.
• Therapy-area and educational material — to send you Therapy-Area Material and educational, scientific and disease-awareness content aligned to your stated specialties, interests and professional profile.
• Market research invitations — to invite you to participate in surveys, interviews, advisory boards, panels and other market-research and insight-gathering activities, including those commissioned by our Clients/Sponsors.
• Sharing data with pharmaceutical companies and third-party sponsors — to share your personal information and profile/response data with our Clients/Sponsors and their authorised service providers for the purposes set out in this section, including for them to send you the communications and material described above and to conduct or commission research. Research responses reported to Clients/Sponsors in aggregated or de-identified form are handled in accordance with applicable market-research codes; any sharing of identifiable data for marketing or direct contact will occur only under the consent given in this section.

4.2 Targeting and personalisation

You agree that we may use your registration details, stated therapy-area interests, professional profile and your engagement with our Services to determine which communications, research invitations and Therapy-Area Material are relevant to you, and to personalise what you receive.

4.3 Nature and withdrawal of consent

1. Your acceptance of these Terms includes the consent in this section. You may nonetheless withdraw the marketing, therapy-area and data-sharing consent without ceasing to use the core Services for which such consent is not required, although some optional Services or paid opportunities may depend on it.
2. You may withdraw your consent at any time, in whole or in part, using the unsubscribe link in any communication, your profile preferences, or the contacts in Section 17. Withdrawal takes effect prospectively and does not affect the lawfulness of processing carried out before withdrawal.
3. Where your data has already been shared with a Client/Sponsor under your consent, we will notify the relevant Client/Sponsor of your withdrawal so far as reasonably practicable; the Client/Sponsor's subsequent handling of your data is governed by their own privacy terms.
4. Nothing in this section waives your statutory rights under the Digital Personal Data Protection Act, 2023 or any other applicable law.

Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable licence to participate in the Services solely in the manner enabled by us. This licence is automatically revoked if you breach these Terms or we terminate them. This is not a sale of any aspect of the Services; we and our partners and suppliers retain all right, title and interest in the Services and reserve all rights not expressly granted.

We may, at any time and in our sole discretion, alter, suspend, discontinue, terminate or subcontract the Services in whole or in part without notice, and add or remove features (including making free Services paid and vice versa). The Services may periodically be unavailable due to maintenance or technical issues. We may monitor your access for security, operational, improvement and performance purposes.

You agree to participate honestly and in good faith and to provide genuine, accurate responses. You represent and warrant that all information you provide is accurate and complete, that you have the right to provide it and have obtained any necessary consents, that it does not violate the rights of or contain the confidential information of any third party, and that you have no agreement with any third party that would prohibit your participation.

You shall not, nor authorise or facilitate any attempt by another person to:

1. Use the Services other than as expressly permitted, or in any unlawful or fraudulent manner;
2. Participate if GRG Health has previously banned you;
3. Disrupt or interfere with GRG Health's systems or Services;
4. Misrepresent yourself, your identity, qualifications or characteristics, or submit false, inaccurate, duplicate or invalid information;
5. Circumvent, remove or interfere with any security features, or access non-public areas or underlying infrastructure;
6. Introduce viruses, worms or other malicious code;
7. Reproduce, modify, distribute, create derivative works from, reverse-engineer or attempt to access the source code or structure of the Services;
8. Use any robot, spider or automated device to access, scrape or index any portion of the Services;
9. Resell, assign, sub-license, disclose or transfer the Services to any third party;
10. Post or transmit content that is unlawful, harmful, threatening, abusive, harassing, hateful, defamatory, obscene or otherwise objectionable, or that infringes any third party's intellectual-property rights;
11. Harass, threaten, stalk or invade the privacy of any person, or collect personal information from other users without permission;
12. Engage in unsolicited advertising or promotion, or any activity inconsistent with the purpose of the Services; or
13. Threaten the unity, integrity, defence, security or sovereignty of India, friendly relations with foreign states, or public order.

If we reasonably determine that you have violated these Terms, we may, in our sole discretion and without prior notice, suspend or terminate your access; forfeit any Honorarium earned, pending or payable; claw back or recoup any Honorarium previously paid; and report the violation, with associated information, to law enforcement, the affected Client/Sponsor, the relevant tax authorities or any third-party payment provider. These remedies are not exclusive and survive termination.

7.1 Status and lawful basis

GRG Health acts as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (India) and applies controls equivalent to the EU General Data Protection Regulation for projects involving EU respondents or sponsors. We process your personal information only on the basis of your informed consent (including the consent in Section 4), for the specific purpose(s) notified to you at the time of collection and as set out in our Privacy Policy. Processing is conducted consistent with industry research codes including those of ESOMAR, EphMRA, Intellus Worldwide and BHBIA, and an information security management system aligned to ISO 27001.

7.2 Your rights

Subject to applicable law and our legitimate retention obligations, you have the right to: (i) withdraw your consent at any time; (ii) access the personal information we hold about you; (iii) seek correction of inaccurate or incomplete information; (iv) request erasure; and (v) raise grievances with our designated Grievance Officer / Data Protection Officer (see Section 17).

7.3 Retention

We retain respondent data only for as long as necessary for the documented purpose and related audit, regulatory and contractual obligations. Without limitation: (i) operational respondent datasets used for internal validation are purged within ninety (90) days following project closure; (ii) a limited audit sample (approximately 5–10% of validated respondents) may be retained in a secure, access-restricted environment for three (3) to five (5) years for compliance verification; and (iii) any respondent subset disclosed to a Client/Sponsor for validation is deleted within thirty (30) days of disclosure, save where retention is required by law or under a legal hold.

7.4 Anonymised data and AI/ML

Where we use respondent data in anonymised, aggregated or de-identified form (such that you cannot be identified, directly or indirectly), we may use such data for purposes including service improvement, benchmarking, analytics and the training, validation and evaluation of artificial intelligence and machine-learning models, in each case in accordance with applicable law.

7.5 Recordings and cross-border transfer

Where research activities are audio or video recorded, we will disclose this in advance and obtain your specific consent to be recorded; recordings are handled as personal information. You acknowledge that GRG Health is headquartered in India and operates through affiliates in jurisdictions including the United States, Singapore and the Philippines, and that your personal information may be transferred to, processed in and stored in such jurisdictions, subject to appropriate safeguards and applicable data-protection laws.

You agree to keep confidential all information relating to Projects and Services made available to you, in any format ("Confidential Information"), including the identity of any Client/Sponsor, the terms of your participation, and the feedback and responses you provide or receive. You shall not use or disclose Confidential Information except as permitted by these Terms or authorised in writing. You may disclose to the extent compelled by law, provided you notify us promptly and cooperate in any lawful action to limit disclosure. Where a separate confidentiality agreement exists with a Client/Sponsor, its terms prevail over this section to the extent of any conflict. Your obligations under this section survive indefinitely.

GRG Health may, at its sole discretion and subject to applicable law, Client requirements, industry codes, healthcare compliance rules and project eligibility criteria, offer an Honorarium for participation. Some participation may be voluntary or unpaid. The nature, amount and mode of any Honorarium may vary by study type, duration, respondent profile, expertise, complexity, geography, fair-market-value considerations and client-approved budgets, and may include non-monetary benefits such as aggregated insights or research findings (provided for informational purposes only and not constituting medical advice, promotional material or any inducement to prescribe or purchase).

Payment is subject to satisfactory completion, validation and quality checks, compliance with these Terms, and provision of accurate payment/tax information. We may withhold, reduce, cancel, forfeit or recover any Honorarium in cases of incomplete participation; inaccurate, misleading, duplicate, fraudulent or poor-quality responses; breach of confidentiality; or failure to meet eligibility or quality requirements.

Once an Honorarium has been issued (including by causing a virtual card, digital gift card or electronic payment), our obligation is satisfied in full regardless of whether you access, redeem or use it. After issuance, redemption, expiration and use are governed solely by the third-party issuer's terms; we are not the issuer and disclaim liability for the terms, expiration, redemption or non-use of any Honorarium. Any post-issuance claim must be directed to the applicable issuer, and you agree to redeem each Honorarium promptly. Honorarium is offered solely for bona fide research participation and is not intended to influence any response, opinion or professional judgment. You remain solely responsible for your independent professional judgment and for any taxes arising from receipt of any Honorarium.

GRG Health owns and retains all right, title and interest in the Services, all improvements and modifications, any technology developed in connection with them, and all related intellectual-property rights. All content, trademarks, logos, designs, layout, text, graphics, audio, video and software on the Platforms are owned or controlled by GRG Health and/or its affiliates or licensors and are protected by applicable law. Nothing in these Terms grants you rights in the Services other than the right to participate as expressly stated. You may not copy, reproduce, distribute, modify, create derivative works from, or exploit any such content without our prior written authorisation.

You grant GRG Health the right to use suggestions, ideas and other information you communicate to us ("Submissions") for any purpose without obligation of confidentiality or compensation, subject to the Privacy Policy and the consent terms in Section 4.

Our Clients/Sponsors are express and intended third-party beneficiaries of these Terms solely with respect to Intellectual Property (Section 10), Confidentiality (Section 8), Acceptable Use (Section 6) and Indemnification (Section 13). To the extent your breach causes damage or liability to such a Client/Sponsor, that party may enforce those provisions directly against you. Except as expressly provided, there are no other third-party beneficiaries to these Terms.

The Platforms and communications may contain links to, or material from, third-party sites and Clients/Sponsors that are independent of GRG Health and governed by their own terms and privacy policies. We do not control and have no liability for such third parties, including their content, security, functionality or availability. A link does not imply endorsement.

The Services and all related content are provided on an "AS IS" and "AS AVAILABLE" basis, without warranties of any kind to the fullest extent permitted by law. We disclaim all guarantees regarding accuracy, reliability, availability or performance, and are not responsible for errors, interruptions or results from use. You use the Services at your own risk.

Clients/Sponsors cannot contact Respondents outside the platform or involve them in research without using the Services; participation outside the platform is at your own risk and should be reported.

You agree to indemnify and hold harmless GRG Health, its officers, directors, employees and agents from any claims, damages, losses, liabilities, costs and expenses (including attorneys' fees) resulting from a third-party claim arising out of or in connection with: (a) your access to or use of the Services; (b) content you submit; (c) your breach of these Terms or any representation or warranty; (d) your violation of applicable law; (e) your negligence or wilful misconduct; (f) your violation of the rights of any third party; or (g) any dispute arising from your interaction with a third party in relation to the Services. We may assume the exclusive defence and control of any such matter, and you agree to cooperate. This section survives termination.

Except to the extent prohibited by applicable law, under no legal theory will GRG Health be liable for accidents, property damage, personal injury, death, or any indirect, special, incidental, exemplary, punitive, reliance or consequential damages (including loss of profits, goodwill, use or data) arising out of the Services or your use of them, even if advised of their possibility.

To the maximum extent permitted by law, our aggregate liability under these Terms shall not exceed the greater of (i) the Honorarium paid or payable to you in the three (3) months immediately preceding the event giving rise to liability, and (ii) INR 10,000 (or local-currency equivalent).

No partnership, joint venture, agency or employment relationship is created by these Terms. These Terms are the complete and exclusive statement of the parties' understanding and supersede all prior agreements on the subject matter. Our failure to enforce any provision is not a waiver. If any provision is held unenforceable, it will be modified to best accomplish its original intent and the remainder will remain in effect. You may not assign your rights or obligations without our prior written consent; we may freely assign ours, including in connection with a reorganisation, merger or transfer of a brand, upon notice via an announcement on the relevant Platform.

These Terms are governed by the laws of India, without regard to conflict-of-laws principles, and the courts at Pune shall have exclusive jurisdiction over all disputes. You agree that monetary damages may be inadequate for certain breaches and that we may seek injunctive or other equitable relief.

We may modify or replace these Terms at any time. If a revision is material — including any change that introduces a new purpose for processing your personal information, materially expands our rights, or materially reduces your rights (such as changes to the scope of your consent under Section 4) — we will provide reasonable prior notice and a reasonable opportunity to withdraw your consent or discontinue participation before the change takes effect. Non-material changes are effective when posted. Continued use after any change constitutes acceptance; if you do not accept, you must discontinue use.

For questions about these Terms, to exercise your data-protection rights, to withdraw consent, or to report abuse or a violation, contact our designated Grievance Officer / Data Protection Officer at:

• GRG Health: compliance@grgonline.com
• Kyrios: community@kyrios.online / support@kyrios.online

Registered address: 1102/1103/1104, C Wing, Teerth Technospace, Bengaluru–Mumbai Highway, Baner, Pune, Maharashtra 411045, India.