Last Updated: 12.08.2026

Dheerghayush, a sole proprietorship (“Dheerghayush,” “we,” “us,” or “our”), operates the wellness brand “Dheerghayush,” offering personalised nutrition consultations, Ayurveda-informed lifestyle coaching and holistic wellness services through its website at [Website URL] (the “Website”) and through consultations delivered online and in person (together, the “Services”).

This Privacy Policy explains how we collect, use, disclose, store and otherwise process personal information, including health-related information, in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and other applicable rules and guidelines.

This Policy applies to the visitors to our website, clients who book or attend nutrition/wellness consultations, whether online or in person, parents or guardians providing information on behalf of a child or teen availing our child & teen nutrition service, members of the Dheerghayush community and anyone who otherwise contacts us or subscribes to our communications.

1 Definitions

 1.1 Personal Data: Any data about an individual who is identifiable by or in relation to such data, whether recorded in digital or physical form, and includes Health Information as defined above. Personal Data collected under this Policy may include, without limitation, identity and contact information, health and wellness information, payment information, and information collected automatically through the website.

 1.2 Client / Data Principal: The individual to whom the Personal Data relates, including a Client, prospective Client, or Website visitor.

 1.3 Data Fiduciary: Dheerghayush, being the entity that determines the purpose and means of Processing Personal Data collected through the Website and Services.

 1.4 Processing: Any operation or set of operations performed on Personal Data, whether or not by automated means, and includes collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission or dissemination, restriction, erasure or destruction of Personal Data.

 1.5 Health Information: Any Personal Data relating to a Client’s physical or mental health, medical history, dietary habits, lifestyle, menstrual or reproductive health, hormonal conditions, chronic illness, allergies, body measurements, or similar information provided for the purpose of a nutrition or wellness consultation.

 1.6 Website: The website at [Website URL] and any associated microsites, landing pages or booking pages operated by Dheerghayush.

 1.7 Services: Personalised nutrition consultations, women’s health consultations, child & teen nutrition guidance, lifestyle disorder management, gut health consultations, community membership and any other wellness service offered by Dheerghayush from time to time.

2. Data Collection

 2.1 Notice & Consent

  2.1.1 We collect and Process Personal Data, including Health Information, only with the free, specific, informed and unambiguous consent of the Client (or, for a minor, the minor’s parent/legal guardian), or where otherwise permitted under the Act.

  2.1.2 Where consent is the basis of Processing, we provide clear notice of the data collected, the purpose of collection, and how consent may be withdrawn, before or at the time of collection.

  2.1.3 Consent for Processing Health Information for one Service (for example, Gut Health) is sought separately from consent for other purposes (for example, marketing communications) and is not bundled.

 2.2 Purpose Limitation: Personal Data is used strictly for delivering the Services, related administration, and the legitimate business purposes described in this Policy.

 2.3 Data Minimisation: We collect only the Personal Data reasonably necessary to provide the Service requested.

 2.4 Data Principal Rights: Clients may exercise their rights of access, correction, erasure, grievance redressal and consent withdrawal.

 2.5 Processing Without Consent: Personal Data may be processed without consent only to the extent permitted under the DPDP Act, including compliance with a court order, a medical emergency threatening life, or a legal or regulatory obligation.

3. Information We Collect

 3.1 Information You Provide Directly

  3.1.1 Basic Information: Name, age, gender, phone number, email address, and city/location.

  3.1.2 Health & Wellness Information: Medical history, current health conditions (e.g., PCOS, thyroid, diabetes, hypertension, fatty liver, obesity), dietary habits, allergies, medications, menstrual / reproductive health information, body measurements (height, weight, BMI), and lifestyle habits (sleep, physical activity, stress levels).

  3.1.3 Family Health Information: Family medical or hereditary history voluntarily shared where relevant to a nutrition or wellness assessment.

  3.1.4 Parent / Guardian Information: Where the Service relates to Child & Teen Nutrition, the parent/guardian’s name, contact details and consent, along with the child’s health and dietary information.

  3.1.5 Payment Information: Billing name, contact details and transaction details Processed through our third-party payment gateway. We do not store full card, UPI or bank account credentials, which are Processed directly by our payment gateway partner.

  3.1.6 Communication Information: Information shared through the Website’s contact/booking form, WhatsApp, email, or social media (Facebook/Instagram) messages.

 3.2 Information Collected Automatically

  3.2.1 IP address, browser type, device information, pages visited, referring website, and usage patterns collected through cookies and analytics tools when you visit the Website.

  3.2.2 Where a consultation is conducted in person, the same categories of Health & Wellness Information listed above may be recorded in physical or digital form by our nutrition/wellness team.

 3.3 Information from In-person consultations

  3.3.1 Where a consultation is conducted in person, the same categories of Health & Wellness Information listed above may be recorded in physical or digital form by our nutrition / wellness team.

4. How We Use Information

 4.1 Personal Data, including Health Information, is used only to:

  4.1.1 Assess a Client’s nutrition and wellness need and provide personalised recommendations.

  4.1.2 Schedule, conduct and follow up on consultations, whether online or in person.

  4.1.3 Track progress across a wellness or coaching programme, where the Client has enrolled in one.

  4.1.4 Process payments for Services availed.

  4.1.5 Respond to enquiries and provide customer support.

  4.1.6 Send appointment reminders, programme updates, and, with consent, newsletters or promotional communications.

  4.1.7 Manage community membership and related engagement activities.

  4.1.8 Maintain internal records, improve our Services, and comply with applicable law.

 4.2 We do not use Health Information for any purpose other than delivering and improving the Services, unless we obtain the Client’s separate, explicit consent — for example, to publish an anonymised case study or testimonial.

5. Testimonials

 5.1 Where a Client’s testimonial (including a success story or before/after information) is published on the Website or on social media, this is done only with the Client’s separate, explicit, written consent, which may be withdrawn at any time by contacting us.

6. Data Sharing and Disclosure

 6.1 With Our Team: Health Information is shared only with the nutritionists, dietitians, coaches, and administrative staff of Dheerghayush who are directly involved in delivering the Client’s Service.

 6.2 Service Providers: We may share Personal Data with trusted third-party service providers who support our operations, including our website hosting provider (Namecheap), payment gateway providers, appointment scheduling/CRM tools (such as Google Workspace), communication tools, and cloud storage providers, subject to confidentiality and data protection obligations.

 6.3 Legal Compliance: We may disclose Personal Data where required to comply with a court order, regulatory obligation, or lawful government request.

 6.4 No Sale of Data: We do not sell, rent or trade Client Personal Data, including Health Information, to any third party.

 6.5 Business Transfers: If Dheerghayush is involved in a merger, acquisition, or sale of assets, Personal Data may be transferred as part of that transaction, subject to this Policy continuing to apply.

7. Cookies and Website Analytics

 7.1 Our Website may use essential cookies necessary for its functioning, as well as non-essential cookies (for example, analytics or marketing cookies) that are placed only with your consent through our cookie preference mechanism. A cookie banner is displayed on the homepage of our Website, allowing you to Accept or Decline non-essential cookies before they are placed. You may change your cookie preferences at any time by revisiting the cookie banner or through your browser settings.

8. Data Storage and Security

 8.1 We implement reasonable technical and organisational safeguards, including access controls, secure storage and restricted, need-to-know access to Health Information, to protect Personal Data against unauthorised access, loss, misuse or disclosure.

 8.2 Personal Data collected through the Website and Services is stored and Processed on servers provided by our hosting provider, Namecheap, located at [Hosting Location].

9. Data Retention

 9.1 We retain Personal Data, including Health Information, only for as long as necessary to provide the Services, maintain Client records for continuity of care, and comply with applicable legal, tax and regulatory requirements.

 9.2 Consultation records and Health Information are retained for a period of six (6) months from the date of the Client's last consultation, after which they are securely deleted or anonymised, unless a longer period is required by law or requested by the Client.

 9.3 Upon expiry of the applicable retention period, or upon a valid deletion request, personal data will be securely deleted or anonymised, unless continued retention is necessary for legal or regulatory purposes.

10. Your Rights under the DPDP Act

 10.1 Subject to applicable law, you (or, for a minor, the parent/guardian) may exercise the following rights:

  10.1.1 Right to Access: Request a copy of the Personal Data we hold about you.

  10.1.2 Right to Correction: Request correction of inaccurate or incomplete data.

  10.1.3 Right to Erasure: Request deletion of your Personal Data, subject to any legal or record-keeping requirement.

  10.1.4 Right to Withdraw Consent: Withdraw consent for any Processing based on consent, without affecting the lawfulness of Processing carried out before withdrawal.

  10.1.5 Right to Grievance Redressal: Raise a grievance regarding the Processing of your Personal Data, as set out in Clause 12 below.

  10.1.6 Right to Nominate: Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, in accordance with the DPDP Act.

 10.2 We may request information to verify your identity before acting on a request.

11. Children’s Privacy

 11.1 Our Child & Teen Nutrition service is intended to be availed by, or on behalf of, individuals below 18 years of age only with the verifiable consent of a parent or legal guardian.

 11.2 We do not knowingly collect Personal Data of a child otherwise than through, or with the consent of, a parent or guardian. If we become aware that we have inadvertently collected a child’s data without such consent, we will delete it promptly.

12. Grievance Redressal

 12.1 If you have any concerns regarding the Processing of your Personal Data or this Privacy Policy, you may contact our Grievance Officer using the details provided below. We will endeavour to acknowledge and resolve grievances within the prescribed timelines.

 12.2 We will acknowledge receipt of your grievance within seventy-two (72) hours of receipt. We will investigate and resolve your grievance within a maximum period of ninety (90) days from the date of receipt.

 12.3 Where the matter is complex and requires further time, we will notify you of the extended timeline and provide periodic status updates.

13. Third-Party Links

 13.1 Our Website and social media pages (Facebook, Instagram) may link to third-party websites and platforms. We are not responsible for the privacy practices of such third parties, and we encourage you to review their privacy policies before providing them with any information.

14. Changes to this Privacy Policy

 14.1 We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on the Website with a revised “Last Updated” date. Continued use of the Website or Services after such changes constitutes acceptance of the revised Policy.

15. Contact Us