Privacy Policy — HEAL Ayurveda Wellness

Last updated: 4 June 2026

HEAL Ayurveda Wellness (“HEAL”, “we”, “us”, “our”), operated by Dr. Ravi P. Apte (sole proprietor), trading as HEAL Ayurveda Wellness, Kharghar, Navi Mumbai – 410210, India, is committed to protecting your privacy. This policy explains what data we collect, why, and your rights, in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and rules thereunder.

1. Data we collect

Identity & contact: name, age, gender, phone number, email, city/address.
Health data (sensitive personal data): symptoms, dosha/Prakriti responses, diagnosis, prescriptions, diet/lifestyle inputs, and medical history you or your physician enter.
Booking & payment: appointment details, order details, and payment status. Card/UPI details are processed directly by our payment gateway (Razorpay) — we do not store your full card or bank details.
Technical: log data, device/browser information, and cookies strictly necessary to operate the service.

2. Why we use it (purpose)

To provide the service you requested (wellness reports, diagnosis, teleconsultation, prescriptions, pharmacy orders, insurance pre-auth).
To maintain your medical record (EMR) for continuity of care.
To process payments and send receipts/confirmations.
To improve our clinical engine using de-identified data (no personal identifiers).
To meet legal, accounting and regulatory obligations.

3. Legal basis & consent

We process your personal and health data based on the consent you provide when you use the service. You may withdraw consent at any time (see §8); this will not affect processing already carried out.

4. Sharing & disclosure

We do not sell your data. We share it only with:

The treating physician / clinic you engage with on HEAL.
Service providers acting on our instructions — payment gateway (Razorpay), email/SMS, hosting, and backup providers — under confidentiality obligations.
Your insurer/TPA, only when you request insurance pre-authorisation.
Authorities where required by law.

5. Multi-clinic isolation

Where the platform serves multiple clinics, each clinic’s patient data is logically isolated; one clinic cannot access another clinic’s records.

6. Security

We use access controls, role-based permissions, encrypted transport (HTTPS), and regular off-site backups. No system is perfectly secure, but we take reasonable measures to protect your data and will notify you and the Data Protection Board of breaches as required by law.

7. Data retention

We retain medical records for the period required by applicable medical- record and tax laws, and delete or anonymise data when no longer required.

8. Your rights

You have the right to access, correct, and erase your personal data, to withdraw consent, and to grievance redressal. To exercise these, contact our Grievance Officer below.

9. Children

For users below 18, a parent/guardian must provide consent and use the service on the child’s behalf.

10. Grievance Officer (as required under the DPDP Act & IT Rules)

Dr. Ravi P. Apte (Grievance Officer)
HEAL Ayurveda Wellness, Kharghar, Navi Mumbai – 410210
Email: appointments@heal.software · Phone: +91-86556 38135
We acknowledge grievances within 24 hours and resolve them within the timelines prescribed by law.

11. Changes

We may update this policy; the “Last updated” date will change accordingly.