1.1 Personal Identification Information

• Full Name: To address you properly and maintain records
• Date of Birth/Age: To understand age-related nutritional needs
• Gender: To provide gender-specific dietary guidance
• Contact Information: Email address, phone number, WhatsApp number
• Location: City, state, country for time zone coordination and local dietary considerations
• Occupation: To understand lifestyle and activity patterns

1.2 Health and Medical Information

• Current Health Conditions: Diabetes, fatty liver, thyroid disorders, high triglycerides, high uric acid, arthritis, PCOD, hypertension, cardiovascular issues, and any other medical conditions
• Medical History: Past illnesses, surgeries, hospitalizations, family medical history
• Current Medications: All prescription medications, supplements, and over-the-counter drugs
• Allergies: Food allergies, intolerances, and sensitivities
• Blood Test Results: HbA1c, fasting glucose, lipid profile, thyroid function tests, liver function tests, kidney function tests, vitamin levels, and other relevant laboratory reports
• Physical Measurements: Height, weight, BMI, waist circumference, hip circumference, body fat percentage
• Dietary Habits: Current eating patterns, food preferences, restrictions, meal timings, portion sizes
• Lifestyle Information: Physical activity levels, sleep patterns, stress levels, smoking/alcohol consumption
• Treatment History: Previous diet programs, weight loss attempts, medical treatments

1.3 Progress and Monitoring Data

• Weekly Check-ins: Weight measurements, symptom updates, compliance reports
• Food Logs/Diaries: If provided through our tracking systems
• Progress Photos: If voluntarily submitted by clients
• Communication Records: Messages, emails, consultation notes, WhatsApp conversations

1.4 Payment and Financial Information

• Payment Details: Transaction information, payment method (collected and processed through third-party payment gateways)
• Billing Address: For invoicing purposes
• Purchase History: Program enrollment details, payment dates, amounts

1.5 Technical and Usage Information

• Device Information: IP address, browser type, operating system
• Website Usage Data: Pages visited, time spent, clicks, navigation patterns
• Cookies and Tracking Technologies: As described in our Cookie Policy

1.6 Communications

• Correspondence: Emails, messages, feedback, testimonials, reviews
• Customer Service Interactions: Support tickets, complaints, inquiries

2.1 Directly From You

• Registration Forms: When you sign up for our 90-Day Program or consultations
• Health Questionnaires: Initial assessment forms and periodic updates
• Consultations: During video calls, phone calls, or messaging sessions
• Email and WhatsApp: When you communicate with us
• Payment Process: When you purchase our services
• Voluntary Submissions: Progress updates, food logs, photos, testimonials

2.2 Automatically

• Website Analytics: Through cookies and similar technologies
• Email Tracking: To understand email open rates and engagement (if applicable)

2.3 From Third Parties

• Medical Reports: If you provide reports from healthcare providers or laboratories
• Referrals: If you are referred by another healthcare professional or client
• Payment Processors: Transaction confirmation and payment status

3.1 Service Delivery

• Personalized Nutrition Plans: Creating customized meal plans based on your health conditions, goals, and preferences
• Health Monitoring: Tracking your progress throughout the 90-day program
• Consultations: Conducting one-on-one sessions via video call, phone, or messaging
• Medical Guidance: Providing evidence-based nutritional advice for lifestyle disease management
• Program Adjustments: Modifying plans based on your progress and feedback

3.2 Communication

• Program Updates: Sending schedules, reminders, and educational content
• Support Services: Responding to inquiries, addressing concerns, providing motivation
• Follow-up: Checking on progress, compliance, and satisfaction
• Educational Material: Sharing recipes, tips, articles, and resources
• Promotional Communications: With your consent, sending information about new programs, offers, or services

3.3 Administrative Purposes

• Account Management: Creating and maintaining your client profile
• Payment Processing: Managing subscriptions, invoices, and receipts
• Record Keeping: Maintaining accurate health and progress records
• Legal Compliance: Meeting regulatory requirements for healthcare documentation
• Quality Assurance: Improving our services and program effectiveness

3.4 Research and Analytics

• Anonymized Research: Using de-identified data to study program effectiveness
• Statistical Analysis: Understanding trends and outcomes (without personal identifiers)
• Service Improvement: Analyzing user feedback to enhance our offerings

3.5 Legal and Safety

• Legal Obligations: Complying with applicable laws and regulations
• Fraud Prevention: Detecting and preventing fraudulent activities
• Safety Concerns: Protecting the health and safety of clients when medically necessary
• Dispute Resolution: Addressing complaints, claims, or legal proceedings

4.1 Consent

• You have provided explicit consent for us to process your health information for nutritional counseling and program delivery

4.2 Contractual Necessity

• Processing is necessary to fulfill our contract with you (providing the 90-Day Program)

4.3 Legitimate Interests

• We have legitimate interests in improving our services, conducting research, and communicating with clients, provided these interests do not override your rights

4.4 Legal Obligations

• Processing is necessary to comply with legal requirements, such as maintaining health records

4.5 Vital Interests

• In rare cases, processing may be necessary to protect your vital health interests

5.1 Healthcare Professionals

• Referring Physicians: With your explicit consent, we may share progress reports with your doctor
• Collaborating Specialists: If your case requires consultation with other healthcare providers (with your permission)
• Laboratory Services: If we coordinate blood tests or medical evaluations on your behalf

5.2 Service Providers

• Payment Processors: Third-party payment gateways (Razorpay, PayPal, Stripe, etc.) to process transactions securely
• Technology Providers: Email services, website hosting, communication platforms (with data protection agreements)
• Analytics Services: Google Analytics or similar tools (with anonymized data where possible)
• Cloud Storage: Secure servers for storing client records and data backups

5.3 Legal Requirements

• Legal Authorities: When required by law, court order, subpoena, or government regulation
• Legal Protection: To enforce our terms, protect our rights, or investigate potential violations
• Emergency Situations: When necessary to protect health, safety, or prevent serious harm

5.4 Business Transfers

• Mergers or Acquisitions: If our business is sold, merged, or restructured, your information may be transferred to the new entity (with continued privacy protection)

5.5 With Your Consent

• Testimonials: We may share your success story or testimonial only with your explicit written permission
• Research Publications: Anonymized case studies may be used for educational purposes (without identifiable information)

5.6 Aggregated Data

• Statistical Reports: We may share anonymized, aggregated data that does not identify you personally

6.1 Technical Security

• Encryption: All sensitive data transmitted through our website is encrypted using SSL/TLS technology
• Secure Storage: Client records are stored on encrypted, password-protected servers
• Access Controls: Only authorized personnel have access to personal health information
• Regular Updates: We regularly update our security protocols and software
• Firewalls: Network security measures to prevent unauthorized access
• Backup Systems: Regular data backups to prevent loss

6.2 Organizational Security

• Confidentiality Training: All team members are trained on data protection and confidentiality
• Non-Disclosure Agreements: Staff members sign confidentiality agreements
• Limited Access: Access to personal information is restricted on a need-to-know basis
• Secure Communication: We use secure channels for sharing sensitive information
• Clean Desk Policy: Physical records (if any) are stored securely

6.3 Your Responsibilities

• Password Security: Keep your account credentials confidential
• Secure Devices: Use trusted devices and secure networks when accessing our services
• Reporting: Immediately notify us of any suspected security breach or unauthorized access

6.4 Limitations

• While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to maintain the highest standards.

7.1 Retention Period

• Active Clients: We retain your information for the duration of your program and as long as you maintain an active account
• After Program Completion: We retain records for a minimum of 7 years as per healthcare documentation standards and legal requirements
• Inactive Accounts: If you do not engage with our services for 3 years, we may archive or delete your account (with prior notice)

7.2 Reasons for Retention

• Continuity of Care: To provide consistent service if you return for future programs
• Legal Compliance: Healthcare regulations require maintaining patient records
• Dispute Resolution: To address any claims or complaints
• Research: De-identified data may be retained for research purposes

7.3 Deletion Requests

• You may request deletion of your data at any time (subject to legal requirements)
• We will respond to deletion requests within 30 days
• Some information may need to be retained for legal or regulatory reasons

8.1 Access Rights

• View Your Data: Request a copy of all personal information we hold about you
• Data Portability: Receive your data in a structured, commonly used format

8.2 Correction Rights

• Update Information: Correct inaccurate or incomplete personal information
• Request Changes: Ask us to update your health records or contact details

8.3 Deletion Rights

• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Account Closure: Close your account and request data removal

8.4 Restriction Rights

• Limit Processing: Request that we limit how we use your information
• Object to Processing: Object to certain types of data processing

8.5 Withdrawal of Consent

• Opt-Out: Withdraw your consent for data processing at any time
• Marketing Communications: Unsubscribe from promotional emails (does not affect service-related communications)

8.6 Complaint Rights

• Data Protection Authority: File a complaint with your local data protection authority
• Direct Complaints: Contact us directly to resolve concerns

8.7 How to Exercise Your Rights

• Email: [email protected]
• Phone: +91 843 390 1109
• WhatsApp: +91 843 390 1109

We will respond to your request within 30 days.

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit our website. They help us understand how you use our site and improve your experience.

9.2 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality (cannot be disabled)
• Performance Cookies: Help us understand how visitors use our website (Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

9.3 Managing Cookies

• You can control cookies through your browser settings
• Disabling cookies may affect website functionality
• Visit www.allaboutcookies.org for detailed instructions

9.4 Third-Party Tracking

• Google Analytics: We use Google Analytics to understand website usage
• Social Media Pixels: If applicable, for remarketing purposes (with consent)
• Payment Processors: May use cookies for transaction security

10.1 External Websites

Our website may contain links to third-party websites (educational resources, research articles, product recommendations). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information.

10.2 Third-Party Services

• Payment Gateways: For secure payment processing
• Email Services: For communication delivery
• Video Conferencing: For online consultations
• Cloud Storage: For secure data storage

These providers have their own privacy policies and security measures.

10.3 Social Media

We maintain profiles on social media platforms (Instagram: @healthymine.in). Interactions on these platforms are governed by their respective privacy policies.

11.1 Age Restrictions

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal information from children under 18 without parental consent.

11.2 Minors (Under 18)

• Parental Consent Required: Written consent from a parent or legal guardian is mandatory
• Parental Involvement: Parents must participate in consultations and program monitoring
• Special Protections: Enhanced privacy protections apply to minors' information

11.3 Discovery of Underage Users

If we discover that we have collected information from a child under 18 without proper consent, we will delete that information immediately.

12.1 Global Services

We provide services to clients worldwide. Your information may be transferred to and processed in India or other countries where we or our service providers operate.

12.2 Data Protection Standards

• Adequate Protections: Use of standard contractual clauses or equivalent safeguards
• Secure Transfers: Encryption and secure channels for data transmission
• Compliance: Adherence to applicable international data protection laws

12.3 Cross-Border Consultations

If you are located outside India, please be aware that your data may be processed in India, where data protection laws may differ from your country.

13.1 Promotional Emails

• Program Updates: Information about new offerings or services
• Health Tips: Educational content and wellness advice
• Special Offers: Discounts or promotional campaigns
• Success Stories: Inspirational client testimonials (anonymized)

13.2 Opt-Out Options

• Unsubscribe: Click the unsubscribe link in any promotional email
• Preferences: Update your communication preferences in your account settings
• Direct Request: Contact us to opt out of marketing communications

13.3 Service Communications

Please note that opting out of marketing does not affect essential service communications such as:

• Program schedules and reminders
• Payment confirmations
• Important account updates
• Health-related consultations

14.1 Security Incidents

• Timely Notification: We will notify affected individuals within 72 hours of discovery
• Authorities: We will report the breach to relevant data protection authorities as required by law
• Details Provided: Information about the nature of the breach, data affected, and steps taken
• Remedial Actions: Guidance on how to protect yourself

14.2 Our Response

• Contain and mitigate the breach
• Investigate the cause
• Prevent future occurrences
• Provide support to affected individuals

15.1 Updates

We may update this Privacy Policy periodically to reflect:

• Changes in our practices
• New legal requirements
• Technological advancements
• Feedback from clients

15.2 Notification

When we make significant changes:

• Website Notice: We will post the updated policy on our website with a new “Last Updated” date
• Email Notification: We may notify you via email if changes are substantial
• Continued Use: Your continued use of our services after changes indicates acceptance

15.3 Review

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

17.1 Complaint Process

• Contact us using the information above
• Provide details of your concern
• We will investigate and respond within 30 days
• If unresolved, you may escalate to the appropriate data protection authority

19.1 India

• We comply with the Information Technology Act, 2000 and IT Rules, 2011
• Digital Personal Data Protection Act (DPDPA) compliance (when enacted)

19.2 European Union (GDPR)

• Lawful basis for processing: Consent, Contractual necessity, Legitimate interests
• Right to lodge a complaint with supervisory authority
• Data Protection Impact Assessments conducted for high-risk processing

19.3 United States (HIPAA - If Applicable)

While we are not typically a covered entity under HIPAA, we maintain HIPAA-level security standards for health information.

19.4 California (CCPA/CPRA)

• California residents have additional rights including the right to know, delete, and opt-out of sale (we do not sell personal information)