Privacy Policy
DRAFT — NOT LEGAL ADVICE. This is a starting draft written to cover the data this site actually collects (name, phone, email, and health-related information submitted through lead forms). It is not a substitute for review by a qualified lawyer familiar with Indian data protection law (the Digital Personal Data Protection Act, 2023) before the site goes live. Every [TODO] marker below needs an owner-specific answer.
Last updated: [TODO: date of publication].
Who we are
This website is operated by [TODO: registered business/company name and address] ("we", "us", "the clinic"). If you have questions about this policy or your data, contact our grievance officer:
- Grievance Officer: [TODO: name]
- Email: [TODO: grievance officer email]
- Phone: [TODO: grievance officer phone]
What we collect
When you submit a form on this site (the hero form, contact form, popup, package enquiry, health survey, or callback request), we collect:
- Your name, phone number, and email address
- Your age, gender, and city, where asked
- Health-related information you choose to share — for example, the condition you want help with (such as PCOS, thyroid, or diabetes), or details you type into a message field
- Which page and campaign you came from (source URL and UTM parameters), your IP address, and browser user agent, for spam prevention and to understand which marketing is working
Health information is sensitive personal data. We only collect what you volunteer through these forms — we do not collect medical records, lab reports, or diagnoses through the website itself.
Why we collect it
- To contact you about your enquiry and offer a consultation or diet plan
- To tailor the service or package we recommend to your stated health condition
- To measure which pages and marketing campaigns actually bring in genuine enquiries
- To meet legal and accounting obligations where a paid service is involved
We do not use your health information for advertising, and we do not sell it.
How long we keep it
We retain lead and enquiry data for [TODO: retention period, e.g. "3 years from your last contact with us" or "as long as you remain a client, plus 7 years for accounting records"]. After that period, it is deleted or anonymised.
Who we share it with
We do not sell your data. We may share it with:
- Staff and the treating dietitian(s) at this clinic, to respond to your enquiry
- Service providers who help us run the site and communicate with you — for example, our hosting provider, email/SMS/WhatsApp delivery services, and analytics tools (Google Analytics, Google Tag Manager) — under their own privacy and security terms
- Authorities, where required by law
[TODO: list any specific third-party tools actually in use, e.g. a CRM, payment gateway, or WhatsApp Business API provider, once finalised.]
Your rights
You can ask us to:
- Tell you what personal data we hold about you
- Correct inaccurate data
- Delete your data, subject to any legal obligation we have to keep it
- Withdraw consent for us to contact you
To exercise any of these, email [TODO: grievance officer email] or call [TODO: phone number]. We aim to respond within [TODO: e.g. "30 days"].
Cookies and tracking
We use cookies and similar technologies (Google Analytics, Google Tag Manager, and — if enabled — the Facebook Pixel) to understand how visitors use the site and to measure marketing campaigns. You can disable cookies in your browser settings; some site features may not work as well as a result.
Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.
Children's data
This site is not directed at children. If you are under 18, please have a parent or guardian submit any enquiry on your behalf.
Changes to this policy
We may update this policy from time to time. The "last updated" date above will change when we do.