Privacy Policy

1. Introduction

KSHITI Ayurveda (“Company”, “we”, “our”, “us”) is committed to protecting the privacy and confidentiality of the personal information of all users of our healthcare services. This Privacy Policy describes how we collect, use, store, process, and disclose your information when you:

• Access or use our website https://kshitiayurveda.com and its subdomains (“Website”)
• Use our applications, digital platforms, or communication channels
• Avail our healthcare services, including doctor consultation (online, offline, chat, audio and video consultation), treatments and procedures, and Ayurveda medicines (collectively, the “Services”)

By using our Website or Services, you agree to the terms of this Privacy Policy and expressly consent to the collection and processing of your information in accordance with applicable laws in India, including the Information Technology Act, 2000 and the rules made thereunder, and any applicable healthcare and data protection regulations.

If you do not agree with any part of this Privacy Policy, please discontinue use of our Website and Services.

2. Scope and Applicability

This Privacy Policy applies to:

• Patients and users availing healthcare services from KSHITI Ayurveda
• Visitors to our Website and users of our digital platforms
• Doctors, Ayurvedic practitioners, therapists, and other healthcare professionals using the platform
• Any other individual whose personal information is collected by us in connection with our Services

This Policy does not apply to third-party websites, services, or applications that may be linked to or integrated with our Website or Services. Such third parties are governed by their own privacy policies.

3. Information We Collect

We collect different categories of information depending on how you interact with us. Some of this information may be considered sensitive personal data or information under Indian law (such as health information), and we handle it with enhanced care and security.

3.1 Personal Identification Information

When you register, book an appointment, or contact us, we may collect:

• Full name
• Date of birth / age
• Gender
• Contact details (mobile number, email address, postal address)
• Login credentials (username, password or other authentication information)
• Profile photograph (if you choose to provide one)
• Language preferences and basic demographic details

3.2 Health and Medical Information

In the course of providing healthcare services (online/offline consultations, treatments, procedures, and Ayurveda medicines), we may collect:

• Medical history and records
• Current symptoms, complaints, and health conditions
• Lifestyle information relevant to Ayurveda (diet, sleep, routine, habits, occupation, stress factors, etc.)
• Reports and diagnostic information (laboratory reports, imaging, previous prescriptions, medical records, test results) that you share with us
• Details of consultations (online, offline, chat, audio, video), including notes, diagnosis, treatment plans, prescriptions, and recommended procedures
• Follow-up and progress details, including responses to treatment

This information may be collected through:

• Direct inputs by you on our Website or forms
• Interactions with our doctors and practitioners (including chat, audio, and video)
• Documents or records you upload or share with us
• Notes recorded by our doctors/practitioners in the course of consultation

3.3 Practitioner / Doctor / Staff Information

If you are a doctor, Ayurvedic practitioner, therapist, or healthcare provider associated with KSHITI Ayurveda, we may collect:

• Full name and contact details
• Educational qualifications, professional licenses, registration numbers, and certifications
• Experience, specialization, and professional profile information
• Clinic address, practice locations, and consultation timings
• Government-issued identification and relevant documents for verification (as mandated by law or policy)
• Bank account or payment details (for remuneration, payouts, or other payments)

3.4 Technical, Device, and Usage Information

When you use our Website or digital Services, we automatically collect certain technical data, including:

• IP address
• Device details (device type, operating system, browser type and version, device identifiers)
• Access times and dates, pages viewed, time spent on pages, clickstream data
• Referring and exit pages/URLs
• Information collected through cookies, web beacons, and similar technologies

This information helps us improve performance, security, and user experience.

3.5 Communication and Interaction Data

We may also collect:

• Records of communications with us via phone, email, SMS, messaging platforms, website forms, or chat
• Queries, complaints, support requests, and feedback
• Reviews, testimonials, ratings, and survey responses
• Consents, acknowledgements, and preferences you provide to us

4. Legal Basis and Consent

By registering on our Website, providing your information, or using our Services, you:

• Confirm that you are at least 18 years of age, or are the parent/guardian providing information on behalf of a minor patient as per applicable law
• Provide your explicit, informed consent for the collection, use, storage, processing, and disclosure of your personal and health information as described in this Privacy Policy
• Consent to receiving communication (including via phone calls, SMS, WhatsApp, email, and in-app notifications) related to your appointments, treatments, medicines, and health-related guidance

Where required by law, we may obtain specific additional consents (for example, for teleconsultations, certain procedures, or specific data processing activities). You may withdraw your consent at any time, subject to legal and contractual restrictions and reasonable notice, understanding that this may affect or limit your ability to use some or all of our Services.

5. How We Use Your Information

We use your information only for lawful purposes related to providing and improving our healthcare services.

5.1 Provision of Healthcare Services

• To create and manage your patient/user account
• To register you for appointments and schedule consultations (online, offline, chat, audio, video)
• To facilitate doctor–patient interactions, including sharing relevant health information with your consulting doctor or practitioner
• To enable assessment, diagnosis, treatment planning, and prescription of Ayurveda medicines and therapies
• To plan and execute treatments and procedures at our facility or associated centres
• To maintain medical records and treatment history as required under applicable healthcare regulations

5.2 Operations, Administration, and Support

• To manage administrative tasks such as billing, invoicing, and payment processing
• To respond to your queries, requests, and support needs
• To send appointment reminders, follow-up reminders, and key health-related notifications
• To verify practitioner credentials and maintain records of healthcare professionals associated with us

5.3 Personalization and Service Improvement

• To understand how you use our Website and Services and to improve content, layout, and user experience
• To customize or personalize healthcare content, wellness recommendations, and Ayurveda-related advice
• To conduct internal research, quality control, audits, and training of our staff (using anonymized or limited data where possible)

5.4 Communication and Marketing (Where Permitted)

• To send you health tips, updates, Ayurveda-related educational content, and information about new services, offers, or products
• To request feedback and conduct surveys about our Services

You may opt out of non-essential marketing communications at any time by using the unsubscribe option or contacting us.

5.5 Legal, Regulatory, and Security Purposes

• To comply with applicable laws, regulations, and legal obligations (including record-keeping obligations under healthcare and telemedicine guidelines, if applicable)
• To respond to lawful requests from courts, regulatory bodies, or law enforcement authorities
• To detect, investigate, and prevent fraud, misuse, or security incidents
• To enforce our terms, policies, and agreements and to protect our rights, property, and safety, as well as that of our users and the public

6. Data Sharing and Disclosure

We do not sell your personal information. We share your data only in limited, necessary circumstances as described below.

6.1 With Doctors and Healthcare Professionals

• Your personal and health information may be shared with doctors, practitioners, therapists, and authorized clinical staff of KSHITI Ayurveda for the purpose of providing care, consultations, treatments, and follow-up.
• All such professionals are bound by legal, ethical, and contractual obligations of confidentiality and may use your data only for patient care and related administrative purposes.

6.2 With Service Providers and Vendors

We may share information with carefully selected third-party service providers who assist us in operating and improving our Services, such as:

• IT infrastructure, hosting, and cloud service providers
• Payment processors and payment gateways
• Communication platforms (SMS, email, call, WhatsApp)
• Data backup and security providers
• Analytics and customer support tools

These service providers are required to implement appropriate security measures and are permitted to use your information only as necessary to perform services on our behalf.

6.3 Legal and Regulatory Requirements

We may disclose your information:

• To comply with any applicable law, regulation, legal process, or enforceable governmental or regulatory request
• To comply with obligations under healthcare and telemedicine regulations or guidelines
• To protect the safety, rights, or property of KSHITI Ayurveda, our staff, our users, or the public
• To investigate and address suspected illegal activities, fraud, or security issues

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, reorganization, or sale of assets of KSHITI Ayurveda or its affiliates, your personal information may be transferred as part of the transaction, subject to continued protection consistent with this Privacy Policy or a policy offering comparable protection.

7. Data Storage, Processing, and International Transfers

Your information is primarily stored and processed within India. If, for legitimate operational reasons, your data is transferred or stored in servers located outside India, we will ensure that such transfers comply with applicable data protection requirements and that your data is afforded a similar level of protection.

8. Data Security

We take reasonable and appropriate technical, organizational, and administrative measures to protect your personal and health information against unauthorized access, disclosure, alteration, or destruction, including:

• Secure data transfer using encryption protocols (such as HTTPS/SSL)
• Access controls, authentication, authorization, and role-based access mechanisms
• Regular security assessments, system updates, and monitoring
• Restricted access to personal and health information only to authorized personnel on a need-to-know basis
• Secure storage of medical records in accordance with applicable regulations

Despite our efforts, no method of transmission or storage over the internet or electronic system is completely secure. You are responsible for safeguarding your account credentials and for promptly notifying us if you suspect any unauthorized access or use of your account.

9. Cookies and Tracking Technologies

Our Website and subdomains may use cookies and similar technologies to:

• Recognize you and maintain your session when you log in
• Remember your preferences and settings
• Analyze usage patterns to improve Website performance and user experience
• Enhance security and fraud detection

You may change your browser settings to block or manage cookies. However, disabling certain cookies may affect the functioning or usability of some parts of our Website or Services.

10. Data Retention

We retain your personal and health information for as long as necessary to:

• Provide the Services and manage your relationship with us
• Comply with applicable legal, regulatory, and professional obligations relating to medical record retention and healthcare documentation
• Resolve disputes and enforce our agreements

Retention periods may vary based on the type of data and legal requirements. After the applicable retention period, we may securely delete, anonymize, or aggregate your data so that it no longer identifies you.

11. Your Rights and Choices

Subject to applicable laws in India, you may have the following rights in relation to your personal information:

1. Right to Access
2. You may request details of the personal information that we hold about you.
3. Right to Correction/Rectification
4. You may request correction of any inaccurate or incomplete personal information.
5. Right to Deletion/Erasure
6. You may request deletion of your personal information, subject to our legal and regulatory obligations to retain certain records (especially medical records).
7. Right to Restrict or Object to Processing
8. You may object to or request restrictions on certain processing activities, particularly in relation to marketing communications.
9. Right to Withdraw Consent
10. Where processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing prior to withdrawal but may impact your ability to use certain Services.

To exercise any of these rights, please contact us using the details provided in the Contact Us section. We may request additional information to verify your identity before acting on your request.

12. Children’s Privacy

Our Services are intended primarily for adults. We do not knowingly collect personal data from individuals under 18 years of age without appropriate parental or guardian consent, as required by law.

If you are a parent or guardian and believe that your child has provided information to us without your consent, please contact us so that we can review and, where appropriate, delete such information or take other necessary steps.

13. Third-Party Links and Services

Our Website may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices, content, or security of such third parties. We encourage you to review the privacy policies of any third-party sites or services you access through links from our Website.

14. Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Services.

• The “Last updated” date at the top indicates when this Policy was last revised.
• We may, where required by law or where changes are material, notify you of updates via email, notifications on our Website, or other appropriate means.

Your continued use of our Website or Services after any such changes take effect will constitute your acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise your data protection rights, please contact us at:

KSHITI Ayurveda

[Registered Address, Coimbatore, Tamil Nadu, India]

Phone: +91 95978 51971

Email: hi@kshitiayurveda.com

Website: https://kshitiayurveda.com

If you are not satisfied with our response, you may have the right to approach the appropriate data protection or healthcare regulatory authority in India.