Privacy Policy

Information We Collect

Prakriti Healthcare collects information that you voluntarily provide to us as well as information generated through your use of our services. This includes:

• Personal Identification: Full name, date of birth, gender, nationality, and government-issued ID where required for medical records.
• Contact Information: Phone number, email address, and postal address used to reach you for appointments and reports.
• Medical & Health Information: Medical history, current complaints, diagnoses, prescriptions, treatment records, Prakriti (Ayurvedic constitution) assessments, lab reports, and therapeutic progress notes.
• Financial Information: Payment details including UPI transaction IDs, bank transfer references, and receipts. We do not store full card numbers.
• Digital Information: IP address, browser type, pages visited on our website, time of visits, and device identifiers collected through standard web analytics.
• Communication Records: WhatsApp messages, emails, and phone call logs related to consultations or inquiries.

How We Use Your Information

We use the information collected for the following purposes:

• Providing, managing, and personalising your healthcare and wellness treatments
• Scheduling and confirming appointments, follow-ups, and programme check-ins
• Preparing and maintaining accurate medical records and treatment histories
• Processing payments and issuing receipts and invoices
• Sending health tips, programme updates, and educational content you have opted into
• Improving our clinical protocols, services, and website based on anonymised usage data
• Complying with legal and regulatory obligations under Indian healthcare law
• Responding to your queries and resolving complaints

We will never use your information for unsolicited marketing or sell your data to third parties for commercial purposes.

Medical & Health Data

Because Prakriti Healthcare provides integrative medical treatments, we handle clinical information with the highest level of care:

• All medical records are accessible only to the treating physician and directly involved clinical staff
• Ayurvedic Prakriti and Vikriti assessments are stored as part of your confidential clinical file
• Functional medicine lab results and specialist consultation notes are retained securely and shared only with your consent
• Medical records are never shared with insurance companies, employers, or family members without your written authorisation, except as required by law

Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

• Referring Specialists: With your consent, when referral to an external medical specialist is clinically necessary
• Laboratory Partners: For processing diagnostic tests you have authorised
• Technology Service Providers: Trusted vendors who operate our website, appointment systems, or payment gateways — bound by strict data processing agreements
• Legal Requirements: When required by Indian courts, regulatory authorities, or public health mandates
• Emergency Situations: To prevent serious harm to you or others, as permitted under applicable law

Data Retention

We retain your personal and medical information for the periods required by applicable Indian healthcare regulations:

• Medical records: Minimum 7 years from the date of last treatment, as per Indian Medical Council guidelines
• Financial transaction records: 7 years as required under the Income Tax Act, 1961
• Website usage data: Up to 24 months in anonymised or aggregated form
• Marketing communications: Until you opt out or withdraw consent

After the retention period, data is securely deleted or anonymised in a manner that prevents re-identification.

Your Rights

Under applicable Indian data protection law, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Withdrawal of Consent: Withdraw consent for non-essential data processing at any time
• Right to Grievance Redressal: File a complaint with us and receive a response within 30 days
• Right to Data Portability: Request your medical records in a portable format for transfer to another provider

To exercise any of these rights, please contact us at the details provided in Section 10 below.

Cookies & Digital Tracking

Our website uses cookies and similar technologies to improve your browsing experience:

• Essential Cookies: Required for the website to function correctly — these cannot be disabled
• Analytics Cookies: Help us understand website usage patterns through tools such as Google Analytics (anonymised)
• Preference Cookies: Remember your language and display settings between visits

You can control non-essential cookies through your browser settings. Disabling certain cookies may affect website functionality. We do not use advertising or tracking cookies for third-party ad targeting.

Data Security

We implement appropriate technical and organisational measures to protect your information, including:

• Encrypted storage for all electronic medical records
• Role-based access control so only authorised staff can view clinical data
• Secure HTTPS connections for all website and form interactions
• Regular staff training on data privacy and confidentiality obligations
• Periodic security reviews of our digital systems

While we take all reasonable precautions, no system is entirely immune to breach. In the event of a data breach affecting your sensitive personal data, we will notify you promptly in accordance with applicable law.

Children's Privacy

Our services are primarily designed for adult patients. For patients under 18 years of age, all personal and medical information is collected and managed with the explicit consent of a parent or legal guardian. We do not knowingly solicit personal information from children without parental authorisation.

Contact & Grievances

For any questions, concerns, or requests related to this Privacy Policy, please reach out to our designated Privacy Officer:

• Email: info@prakritihealthcare.in
• Phone: +91 8097846830
• Address: Prakriti Healthcare Campus, Shivtirth Building, Manjari Khurd, Pune — 412307, Maharashtra, India

We are committed to resolving all privacy-related grievances within 30 days of receipt. If you are not satisfied with our response, you may escalate the matter to the relevant data protection authority.

This policy may be updated periodically to reflect changes in our practices or applicable law. Material changes will be communicated to registered patients via email.