Privacy Policy

Effective date: November 2017

This Privacy Policy explains how Prana Healthcare Centre ("Prana", "we", "us", "our"), with its office at B 363, Lodha Signet, Senapati Bapat Marg, Lower Parel, Mumbai 400013, Maharashtra, India, collects, uses, shares and protects personal information when you:

• visit www.pranabydimple.com (the "Website");

• use the Prana by Dimple Jangda mobile app (the "App");

• buy or attend our workshops, masterclasses, courses, live sessions or events;

• book a consultation or treatment, online or at our clinic in Mumbai;

• sign up for our newsletter, take our dosha quiz, or contact us.

Together these are our "Services". By using the Services you acknowledge this policy. Where we rely on your consent, we will ask for it clearly and separately.

This policy is written to meet India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules, and, for users in the UK and European Union, the UK and EU General Data Protection Regulation (GDPR).

1. Summary

2. Information we collect

2.1 Information you give us

2.2 Information collected automatically

• Device and usage data: IP address, browser and device type, operating system, pages viewed, links clicked, time spent and the website that referred you.

• Cookies and similar technologies: see section 11.

• App data: app version, crash reports, and a device identifier used to send notifications.

2.3 Information from others

• Payment providers confirm whether a payment succeeded and give us a transaction reference. We never receive or store your full card number, CVV or bank login.

• Google Play and the Apple App Store tell us about App subscriptions you buy.

• Sign-in providers (Google or Apple) share your name and email when you choose to sign in with them.

• People who book for you, such as a family member or your employer for a corporate workshop. Please make sure they have your permission.

3. Health information

Health and wellness information (symptoms, medical history, medicines, reports, prescriptions, assessment answers and check-ins) is especially sensitive. We:

• collect it only with your explicit consent, given when you book a consultation, take an assessment or use the App, or as required to provide care you have asked for;

• use it only to provide your consultation, treatment, diet plan, course or App plan, to keep you safe, and to meet legal duties;

• limit access to Prana's doctors and the staff who need it to care for you; support staff cannot see App assessment answers;

• never sell it, never use it for advertising, and never share it with brands, sponsors or partners;

• never publish your case, story, photos or results without your separate written consent, and we remove identifying details from any case we discuss for teaching.

You can withdraw consent at any time (section 10). Withdrawing does not affect care already given, and some services may then stop.

4. How we use your information

5. Who we share it with

We share personal information only as described here, and only as much as is needed.

5.1 Within Prana

Prana's doctors, diet consultants, therapists and support team, under confidentiality obligations.

5.2 Service providers who work for us

These providers process data on our instructions and under contract, and may not use it for their own purposes:

5.3 Others, only when needed

• With your permission, for example a doctor or family member you ask us to share reports with.

• With government authorities, courts or regulators when required by law.

• To protect someone's life or safety in an emergency.

• As part of a merger, acquisition or sale of our business, in which case this policy continues to protect your data.

6. Where your data is stored

We store data in India where possible. Some service providers may store or process data in other countries. Where data leaves India, the UK or the EU, we use providers that protect it to a standard required by applicable law, and we do not transfer data to any country restricted by the Government of India.

7. How long we keep it

When data is no longer needed, we delete it or anonymise it so it can no longer identify you.

8. Security

We use reasonable security practices, including encrypted connections (HTTPS), encryption of stored data where our providers support it, access controls, staff confidentiality, and regular reviews. Payments are processed by certified payment providers. No system is perfectly secure; please keep your passwords private and tell us at once if you think your account has been misused. If a breach affects your personal data, we will notify you and the authorities as the law requires.

9. Marketing

• We send newsletters, offers and updates only if you opted in.

• Every email has an unsubscribe link; reply "STOP" on WhatsApp to stop messages.

• Unsubscribing does not stop essential messages about something you bought, such as a login or a booking confirmation.

10. Your rights

Depending on where you live, you have the right to:

• access a summary of the personal data we hold about you and how we use it;

• correct inaccurate or incomplete data, and update it;

• erase your data when it is no longer needed or you withdraw consent, unless the law requires us to keep it (for example, medical and tax records);

• withdraw consent at any time, as easily as you gave it;

• nominate another person to exercise your rights if you die or become unable to (India);

• object to or restrict certain uses, and receive your data in a portable format (UK and EU);

• complain to us first (section 15), and then to the Data Protection Board of India, or to your local data protection authority in the UK or EU.

To use any of these rights, email academy@pranabydimple.com with the subject "Privacy request". We may ask you to confirm your identity. We will reply within the time the law requires. App users can also delete their account in the App under Me → Settings → Delete account, or at pranabydimple.com/delete-account.

11. Cookies

Cookies are small files stored on your device. We use:

You can accept or reject non-essential cookies in our cookie banner, and block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the Website from working.

12. Children

Our Services are for adults aged 18 and over. We do not knowingly collect personal data from children. A consultation for a child must be booked by a parent or guardian, who gives consent on the child's behalf. If you believe a child has given us their data, contact us and we will delete it.

13. Links to other websites

Our Website and App link to other sites and platforms, such as Instagram, YouTube, Spotify and payment pages. Their own privacy policies apply, and we are not responsible for them.

14. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new effective date, and tell you by email or in the App if the changes are significant.

15. Grievance Officer and contact

If you have a question or complaint about your personal data, contact our Grievance Officer:

If you are not satisfied with our response, you may complain to the Data Protection Board of India, or to your local data protection authority if you live in the UK or EU.