How we handle your information

Last updated: 24 September 2026

1. Who we are

Aayuchikitsa ("we", "us") helps patients with chronic spine, joint and nerve conditions access authentic Ayurvedic treatment at partner facilities in Kerala. This policy explains how we handle the personal information you share with us through this website, by phone, by email or on messaging apps.

This policy is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act). Under that law, we are the "Data Fiduciary" for the information you give us.

2. What we collect

Information you give us in the consultation form:

• Your name, age, phone number, email address and city
• Where your pain is, how long you have had it, and what treatments you have already tried
• Whether you have MRI or other imaging reports
• Any notes you choose to add, and when you prefer to be contacted

Information you share later: medical reports, scans, prescriptions and history that you send us during your consultation or treatment, along with travel and stay details needed to arrange your visit.

What we don't collect: this website does not use advertising or analytics cookies, and we do not track you across other websites. Like any website, our hosting provider may keep basic technical logs (such as IP address and browser type) for security and to keep the site running.

3. Why we use it

We use your information only to:

• Contact you about the consultation you requested
• Have a physician review your case and decide whether our program suits you
• Plan your treatment and arrange your travel, stay and meals
• Follow up on your recovery and prescribed medicines after you return home
• Meet legal, medical record-keeping and accounting requirements

We will not use your health information for marketing. If we ever want to send you general updates, we will ask you separately, and you can say no.

4. Your consent

We process your information based on the consent you give when you submit the form. You can withdraw that consent at any time by writing to us (see section 9). Withdrawing consent stops future processing. It does not affect anything done before you withdrew, and it may mean we can no longer arrange your treatment.

5. Who we share it with

We share your information only when it's needed for your care, and only with:

• Treating physicians and our partner treatment facility, so they can assess your case and treat you
• Service providers who help us operate, such as our website host, the secure cloud tools where consultation requests are stored, and our email provider. They may use your information only to provide their service to us.
• Authorities, if the law requires it

We never sell your information, and we never share it with advertisers or data brokers.

Some of our service providers may store data on servers outside India. Where this happens, we use reputable providers with strong security practices, and we follow any restrictions the Government of India places on such transfers.

6. How long we keep it

We keep your information only as long as we need it for the purposes above. That covers your consultation, treatment and follow-up, plus any period the law requires us to keep medical or financial records. After that, we delete it or make it anonymous.

If you submit a consultation request but don't go ahead with treatment, we delete your details within 12 months of our last contact, unless you ask us to delete them sooner.

7. How we protect it

We use reasonable technical and organisational measures to protect your information, including encrypted (HTTPS) connections on this website, access controls that limit your data to the people who need it, and secure, access-controlled storage. No system is completely secure, but if a breach ever affects your data, we will inform you and the Data Protection Board of India as the law requires.

8. Your rights

Under the DPDP Act, you have the right to:

• Ask what information we hold about you and how we use it
• Have inaccurate or incomplete information corrected or updated
• Have your information deleted when it's no longer needed
• Withdraw your consent
• Nominate someone to exercise these rights for you if you die or become unable to do so
• Raise a complaint with us, and then with the Data Protection Board of India if you're not satisfied with our response

To use any of these rights, write to us at the address below. We'll respond as quickly as we can, and in any case within the time the law requires.

9. Contact and grievances

For questions, requests or complaints about your personal information, email care@aayuchikitsa.com. Please include your name and the phone number you gave us, so we can find your records.

10. Patients under 18

Consultation requests for anyone under 18 must be submitted by a parent or legal guardian, who gives consent on the patient's behalf.

11. Changes to this policy

We may update this policy from time to time. When we do, we'll change the date at the top of this page. If a change affects how we use information you've already given us, we'll tell you directly.