Privacy Policy
Aananda Sundari (Aanandasundari)
Last updated: [FILL: publish date for 'Last updated']
1. Who we are
Aanandasundari ("we", "us") is an online women's health practice that offers private Ayurveda consultations at aanandasundari.com (the "Site"). The practice is run by Dr Anish M Kurias. Consultations are online only, by video. We have no clinic and there are no in-person visits. Our registered address, used for official correspondence only, is GF-5, A-23, Green Park, New Delhi, Delhi 110016. Consultations are given by the Ayurveda doctors named on the Site, including Dr Pratiksha Prabhudessai; Dr Anish M Kurias also joins some consultations.
For personal data collected through this Site and our WhatsApp and appointment channels, we are the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 and the rules made under it (the "DPDP Act"). This policy is our notice under that Act. It also follows the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the "SPDI Rules"), as far as each applies.
2. What personal data we collect, and why
| When | Data | Purpose |
|---|---|---|
| You fill in the consultation request form | Name, WhatsApp number, age group, preferred language and best time to reach you. The form does not ask about your health concern. | To contact you on WhatsApp and arrange your consultation |
| You message us on WhatsApp (including through the button on the Site) | Your number, your WhatsApp profile name, the name, language and time you chose, and anything you choose to write | To confirm a time and answer your questions |
| You have your consultation | What you tell your doctor about your health, your medical history, notes, any prescription and your care plan. This is health information and becomes part of your medical record | To give you your consultation, care plan and follow-up, and to keep the records the law requires |
| You pay online | Payment confirmation from our payment provider (we never see or store card or bank details). [FILL: confirm online payments are taken through Razorpay, or delete the payment sections] | To confirm your consultation and issue a receipt |
| You come to the Site from an advertisement or link | Campaign codes in the link you clicked (for example the ad or source) and the page you came from. [FILL: confirm whether these are stored with the enquiry once lead storage is live] | To understand which information reaches the women it is meant for, and to improve the Site |
| You visit the Site | Technical data our host records automatically: IP address, browser and device type, pages requested, date and time | To serve and secure the Site |
3. Health information is sensitive
Information about your physical, physiological or mental health, medical records and medical history is "sensitive personal data or information" under the SPDI Rules. We collect it only with your consent and only for your consultation and related administration. We keep it confidential, give access only to the doctors who take your consultation and the care team, and share it only as set out in section 6. We never use your health information for advertising.
Please share only what you are comfortable with and what is needed. The request form does not ask about your health concern. Tell your doctor in the consultation.
4. Notice, purpose and consent
We use your data only for the purposes in this policy. You give consent by a clear action: ticking the consent box on the form after reading the notice next to it. The consent text is in the form consent section of these pages. Consent for marketing messages is separate, optional and unticked by default. Consent to use health information is asked for specifically, and not bundled with marketing.
Withdrawing consent. You can withdraw consent at any time, as easily as you gave it: reply STOP to any WhatsApp, RCS or SMS message from us, or email drpratiksha@aanandasundari.com. We stop messaging you as soon as we receive it. Withdrawal does not undo what we have already done, and we keep medical records and billing records that the law requires us to keep.
We may also use personal data without consent where the DPDP Act allows it, for example to meet a legal duty or in a medical emergency.
5. How we use your data
- To respond to your request, confirm and schedule your appointment and send reminders.
- To give your consultation, care plan and follow-up.
- To keep medical records as the law and professional rules require.
- To take payment and issue receipts.
- To keep the Site secure.
We do not sell your data. We do not publish anything that identifies you, including photos, case details or feedback, without your separate, specific, written consent.
6. Who we share it with
We share personal data only as needed. Each provider below is listed because we use it or plan to use it. Items marked for confirmation will be corrected before publishing.
| Provider | What for |
|---|---|
| Website host and content network [FILL: confirm hosting providers, currently Amazon Web Services S3 and CloudFront] | Hosting the Site |
| Google Fonts (Google) | Fonts load from Google's servers when you open a page, so Google can see your IP address |
| WhatsApp (Meta) [FILL: confirm which WhatsApp provider is used] | WhatsApp messages and consultations arrangement |
| A secured spreadsheet or record system [FILL: confirm where form enquiries will be stored, e.g. a Google Sheet, and who can open it] | Storing your enquiry so it is not lost |
| Jio Platforms (Jio Business Messenger) [FILL: confirm Jio RCS will be used] | RCS messages |
| [FILL: SMS provider name, or delete if SMS is not used] | SMS messages |
| Razorpay [FILL: confirm online payments are taken through Razorpay, or delete the payment sections] | Payments |
| Meta and Google measurement tools [FILL: confirm whether the Meta Pixel and Google tag will be installed before launch, or delete this row and section 8's tool paragraph] | Counting visits and enquiries. They are never sent your name, number or any health information |
| GrowthFusion (Happi Global Ventures LLP) [FILL: confirm whether GrowthFusion (Happi Global Ventures LLP) runs the website, advertising or messaging tools for this practice] | Website, advertising and messaging services, acting on our instructions |
We also share data with the doctors who take your consultation and the care team, bound by confidentiality; with laboratories, hospitals or specialists you are referred to, with your agreement; and with authorities, courts or regulators when the law requires. Some providers store data outside India. Where they do, we follow the DPDP Act's rules on transfers outside India.
7. Messages on WhatsApp, RCS, SMS and email
We contact you only about what you asked for, such as confirming a time, sending a payment link, reminders and follow-up. Reminders do not name any condition or treatment. [FILL: confirm reminders will not name any condition or treatment] We send general information or updates only if you tick the separate optional box. Every promotional message tells you how to stop: reply STOP, or email drpratiksha@aanandasundari.com. We keep a record of when and how you opted in.
8. Cookies, analytics and ad tools
The Site is built to use measurement tools from Meta and Google, which may set cookies, to count visits and enquiries and to show our information to women who may find it useful. [FILL: confirm the tools are installed, or replace this paragraph with 'We do not use analytics or ad tools'] We never send your name, phone number or any health information to these tools. They only learn that a visit or an enquiry took place. You can clear or block cookies in your browser settings at any time. If we use these tools we will ask for your consent where the law requires it.
9. Security and breaches
We use reasonable security practices, including restricted access, strong passwords with two-factor authentication on accounts, and encrypted (HTTPS) connections. No system is completely secure. If a personal data breach happens, we will tell the Data Protection Board of India and the people affected as the DPDP Act and its rules require.
10. How long we keep it
- Enquiries that do not lead to a consultation: [FILL: retention period for enquiries that do not lead to a consultation].
- Medical records: [FILL: minimum medical-record retention period under the rules that apply to the practice: counsel to confirm].
- Billing records: as long as tax law requires.
- Messaging opt-in and opt-out records: [FILL: retention period for consent records].
11. Your rights as a data principal
Under the DPDP Act you may:
- ask for a summary of the personal data we process, what we do with it, and who we have shared it with;
- ask us to correct, complete or update your data, and to erase it when it is no longer needed or you withdraw consent (medical records we must keep by law are kept for the period the law requires);
- withdraw consent at any time (section 4);
- nominate another person to exercise your rights if you die or cannot act; and
- have your grievance heard (section 13).
To use a right, email drpratiksha@aanandasundari.com. We may need to confirm who you are first. We respond within [FILL: time to answer rights requests: counsel to confirm against the DPDP Rules]. The Act also asks you not to impersonate anyone or file false or frivolous complaints.
12. Children and age 18+
The consultation service is for women aged 18 or over. The request form asks for an age group and the consent box confirms you are 18 or older. We do not knowingly collect personal data from anyone under 18, and we do not track or target children. If we learn that we have, we will delete it.
13. Grievance Officer
If you have a concern or complaint about how we handle your personal data, or any other matter about this Site, contact our Grievance Officer (named under the SPDI Rules and the DPDP Act):
Dr Pratiksha Prabhudessai[FILL: Grievance Officer designation]
Practice: Dr Anish M Kurias
Email: drpratiksha@aanandasundari.com
Phone: +91 93079 39542
Registered address: GF-5, A-23, Green Park, New Delhi, Delhi 110016
Hours: [FILL: support hours: days and times, IST]
We acknowledge every complaint within 24 hours and resolve it within [FILL: complaint resolution time: counsel to confirm. The 2021 IT Rules as amended in Feb 2026 say 7 days for intermediaries, and the SPDI Rules say never more than one month], and in any case within one month of receiving it.
14. Complaint to the Data Protection Board
If you are not satisfied after using our grievance process, you may complain to the Data Protection Board of India as the DPDP Act provides.
15. Changes to this policy
We may update this policy. We post the new version here with a new "Last updated" date and, for significant changes, take reasonable steps to tell the people affected.
16. Contact
Dr Anish M Kurias
Registered address: GF-5, A-23, Green Park, New Delhi, Delhi 110016
Phone / WhatsApp: +91 93079 39542
Email: drpratiksha@aanandasundari.com
Hours: [FILL: support hours: days and times, IST]
See also the Contact page.