Privacy Policy

This notice explains what personal data Arogyam Sutra ("we", "us") collects through this website, why we collect it, how long we keep it and how you can exercise your rights. It is written to meet the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025. For the purposes of that law, Arogyam Sutra is the Data Fiduciary and you are the Data Principal.

1. Personal data we collect

We only collect what you choose to give us, plus the minimum technical data needed to run the website safely.

• Appointment requests: your name, phone number, email address (if given), the therapy and health goals you are interested in, whether it is your first visit, in-clinic or online, your preferred date and time, and any message you write.
• Call-back requests (home page, pop-up or chat assistant): your name, phone number, what you would like help with, whether you prefer a call or WhatsApp and, for chat requests, the messages you typed in the chat.
• Contact, partnership and career forms: the details you enter, such as name, phone, email, organisation, role and message.
• Technical data: IP address, browser type, date and time of visit and the pages requested. This is recorded by our servers for security, to prevent spam and abuse (for example, limiting repeated form submissions), and to keep the site working.

Please do not send medical reports, prescriptions or detailed health history through the website. You can share these in person at your consultation, where they are handled as part of your care.

2. Why we use it

• To reply to your enquiry and to call or message you back.
• To arrange, confirm, reschedule or cancel your appointment or online class.
• To consider partnership proposals and job applications.
• To keep the website secure and prevent misuse.

We process this data on the basis of your consent, which you give when you tick the consent box on a form or confirm in the chat. We do not sell your personal data, and we do not use it for advertising or share it with advertisers.

3. Who we share it with

We share personal data only with service providers that help us run the website, and only for the purposes above:

• our website hosting provider and database provider, which store the website and the messages you send;
• an email or messaging service, if the clinic has chosen to receive form notifications that way;
• Google Maps, Google reviews and YouTube, whose embedded map, reviewer photos and videos on some pages receive technical data (such as your IP address and browser) when they load;

These providers act on our instructions and may store data on servers outside India, which the DPDP Act permits except for countries the Government of India restricts. We will also disclose personal data where the law requires us to.

4. How long we keep it

• Enquiries, call-back requests and appointment requests: up to 2 years from our last contact with you, then deleted.
• Job applications: up to 1 year, unless you join the team.
• Server and security logs: at least 1 year, as the DPDP Rules, 2025 require, and then deleted on a rolling basis.
• Records of treatment given at the clinic are kept separately, for as long as the law governing health records requires.

You can ask us to delete your data sooner (see section 5).

5. Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update your data;
• ask us to erase your data, unless we must keep it by law;
• withdraw your consent at any time, as easily as you gave it. This doesn't affect anything we did before you withdrew it;
• nominate another person to exercise these rights for you if you die or become unable to do so;
• raise a grievance with us, and if you are not satisfied with our answer, complain to the Data Protection Board of India.

To use any of these rights, call or WhatsApp the clinic, or write to us at the address below, with the words "Privacy request". We may ask you to confirm your identity. We will respond as soon as we can, and in any case within 90 days, as the DPDP Rules, 2025 require.

6. Cookies and similar technology

This website does not use advertising or analytics cookies.

The website also stores two small settings in your own browser (not on our servers): whether you have already seen the logo animation, and when the call-back pop-up was last shown, so it doesn't appear again for a week. The admin area uses a security cookie for signed-in staff only.

7. Children

Under the DPDP Act a child is anyone under 18. If you are under 18, please ask a parent or guardian to contact us for you. If a parent or guardian books for a child, they give consent on the child's behalf.

8. How we protect your data

The website uses encrypted connections (HTTPS). Form messages are stored in a database that only signed-in clinic staff can open; staff passwords are stored as one-way hashes, sign-in attempts are limited, and every change is logged. If a personal data breach ever affects you, we will tell you and the Data Protection Board of India, as the law requires.

9. Changes to this notice

We may update this notice when our website or the law changes. The date at the top shows the latest version. Please also see our terms and conditions and medical disclaimer.

10. Contact for privacy requests and grievances

Arogyam Sutra, Sector C 9, Library, Near Community Center, Vasant Kunj, New Delhi 110070. Phone: +91 99589 11321, +91 98686 76595. Email: arogyamsutraofficial@gmail.com.

WhatsApp: +91 99589 11321