Privacy Policy

Effective Date: September 2026
Last Updated: September 2026

Brahmkul Ayurveda respects the privacy of individuals who visit our website, communicate with us, register as patients, participate in our programs or events, use our online services, or access the Brahmkul Ayurveda Patient Portal.

This Privacy Policy explains how Brahmkul Ayurveda Trust (“Brahmkul Ayurveda”, “we”, “us” or “our”) may collect, use, store, process, share and protect personal information in connection with our website, consultations, patient services, digital platforms and related activities.

We are committed to handling personal information responsibly and in accordance with applicable laws in India, including, as applicable, the Information Technology Act, 2000, applicable rules made thereunder, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and Digital Personal Data Protection Rules, 2025, as their respective provisions are brought into force and become applicable from time to time.

By providing personal information to us or using a service that requires such information, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, appropriate consent will be sought for the relevant processing.

1. Who We Are

Brahmkul Ayurveda is an Ayurveda and holistic wellness initiative operated by Brahmkul Ayurveda Trust, a registered charitable trust in Uttar Pradesh, India.

Our services and activities may include:

• online Ayurveda consultation;

• patient registration and appointment management;

• diet and lifestyle guidance;

• health and wellness counselling;

• Yoga and meditation;

• preventive wellness;

• Special Programs;

• patient follow-up and support;

• Ayurvedic medicine coordination;

• health-awareness activities;

• camps, webinars, workshops and events;

• educational content and Arogya Tips; and

• the Brahmkul Ayurveda Patient Portal.

Certain services may require us to process personal information, including information relating to an individual's health.

2. Information We May Collect

The information collected depends upon how you interact with Brahmkul Ayurveda.

Personal Identification Information

We may collect information such as:

• name;

• date of birth or age;

• gender, where relevant;

• mobile/contact number;

• WhatsApp number;

• email address;

• postal address;

• patient identification number;

• parent or guardian details where applicable; and

• other information necessary to identify or communicate with a patient.

Health and Consultation Information

Where necessary for consultation or healthcare-related services, we may collect information concerning:

• symptoms and health concerns;

• medical and health history;

• existing diagnoses;

• allergies;

• current or previous medicines;

• Ayurveda-related assessment information;

• diet and lifestyle;

• sleep and daily routine;

• relevant physical observations;

• pregnancy or reproductive-health information where relevant;

• laboratory reports and investigations;

• prescriptions;

• consultation and follow-up information;

• images or documents voluntarily provided for consultation; and

• other health information reasonably required for the requested service.

The information requested will depend upon the nature of the consultation or service.

3. Patient Portal Information

Where the Brahmkul Ayurveda Patient Portal is available, we may process information required for:

• registration;

• identity verification;

• OTP verification;

• password creation and authentication;

• patient-account management;

• appointment booking;

• appointment rescheduling or cancellation;

• displaying selected prescriptions;

• displaying payment receipts;

• displaying selected care-plan services;

• callback requests; and

• other specifically enabled patient services.

The Patient Portal is designed to provide controlled access to selected patient-facing information.

It does not necessarily display every record maintained internally by Brahmkul Ayurveda.

4. Information Not Displayed Through the Patient Portal

Certain information may be restricted to authorized Brahmkul Ayurveda personnel and will not ordinarily be exposed through the patient-facing portal.

This may include:

• internal clinical working notes;

• doctors' internal notes;

• internal follow-up notes;

• internal referral information;

• medicine formulation or preparation details intended for internal professional use;

• internal care-plan notes;

• administrative records;

• audit and security logs; and

• other information designated for authorized professional or operational use.

Access to information is controlled according to role, purpose and operational requirements.

5. How We Collect Information

Personal information may be collected when you:

• visit or use our website;

• submit a contact or enquiry form;

• register as a patient;

• use the Patient Portal;

• request an OTP;

• book a consultation;

• communicate through telephone, email or WhatsApp;

• participate in a voice or video consultation;

• provide documents or health reports;

• make a payment;

• participate in a care plan or Special Program;

• register for a webinar, health camp or event;

• request a callback; or

• otherwise voluntarily provide information to Brahmkul Ayurveda.

We may also receive information from an authorized parent, guardian, caregiver or representative where appropriate.

6. Why We Process Personal Information

Personal information may be processed for legitimate and lawful purposes connected with the services requested or provided, including:

• identifying and registering patients;

• verifying patient identity;

• arranging consultations;

• providing consultation and wellness services;

• maintaining appropriate patient records;

• preparing and sharing prescriptions where applicable;

• managing appointments;

• providing follow-up support;

• coordinating requested services;

• managing care plans and Special Programs;

• processing payments and generating receipts;

• communicating service-related information;

• responding to enquiries;

• managing events and registrations;

• maintaining system security;

• detecting unauthorized access or misuse;

• complying with legal or regulatory requirements;

• maintaining records where required; and

• improving the safety and functioning of our services.

We aim to collect and process information reasonably necessary for the relevant purpose.

7. Consent

Where processing is based upon consent, we aim to provide appropriate information regarding the purpose for which personal data is requested.

Consent may be obtained through appropriate electronic or other lawful means depending upon the service.

Where applicable law permits withdrawal of consent, a person may request withdrawal through the communication methods provided by Brahmkul Ayurveda.

Withdrawal of consent does not necessarily require deletion of information that must lawfully be retained or is otherwise permitted to be processed under applicable law.

Withdrawal may also affect our ability to continue providing a service where processing of particular information is necessary to provide that service.

8. Online Consultation and Health Information

Online healthcare services inherently require the communication of health-related information.

Patients should provide information that is accurate and relevant to the consultation.

Brahmkul Ayurveda will seek to limit access to health information to authorized individuals who require access for legitimate professional, patient-support, administrative, technical or legal purposes.

Patients should avoid sending unnecessary health or identity information through unsecured or unrelated communication channels.

9. Communication Through Email, Telephone and WhatsApp

Depending upon the services requested and contact information provided, Brahmkul Ayurveda may communicate through:

• telephone;

• email;

• WhatsApp; or

• other available communication channels.

Such communications may include:

• OTPs;

• appointment information;

• booking confirmations;

• consultation coordination;

• requested follow-up communication;

• prescriptions;

• receipts;

• patient-support messages;

• callback information;

• event information; and

• other service-related communication.

Third-party communication services have their own privacy and security practices, which are outside our complete control.

Patients should take appropriate care when using shared devices, email accounts or messaging applications.

10. OTPs and Account Security

OTPs and passwords are intended to protect patient accounts and verify identity.

Users should never voluntarily disclose their portal password or OTP to unauthorized persons.

Brahmkul Ayurveda personnel should not require users to disclose their complete banking password, card PIN or payment OTP.

We may maintain authentication and security logs where reasonably necessary to protect patient information and digital systems.

11. Payments

Where payments are processed electronically, payment processing may involve an authorized bank, payment gateway or other payment-service provider.

Brahmkul Ayurveda may receive transaction-related information necessary to confirm payment and generate records or receipts.

Sensitive payment credentials handled directly by the payment provider may not be stored by Brahmkul Ayurveda.

Users should also review the privacy and security practices of the applicable payment provider.

12. Cookies and Website Information

Our website may use cookies or similar technologies necessary for website operation, security, user sessions, performance measurement or other legitimate website functions.

Technical information may include:

• browser type;

• device information;

• IP-related information;

• session information;

• website activity;

• referring pages; and

• security or technical logs.

Where legally required, appropriate information or choices concerning non-essential cookies will be provided.

13. How We May Share Information

Brahmkul Ayurveda does not sell patient health information as a commercial product.

Personal information may be shared only where reasonably necessary and lawful, including with:

• authorized healthcare professionals;

• authorized Brahmkul Ayurveda personnel;

• technical or hosting providers;

• communication-service providers;

• payment-service providers;

• medicine or logistics providers where required for a requested service;

• professional advisers;

• governmental or regulatory authorities where legally required; or

• other service providers necessary for delivering an authorized service.

Where appropriate, third parties handling information on our behalf are expected to process it for the relevant purpose and subject to applicable contractual and legal requirements.

14. Data Security

Brahmkul Ayurveda seeks to use reasonable administrative, technical and organizational safeguards appropriate to the nature of the information being handled.

Measures may include, as appropriate:

• authenticated user accounts;

• password protection;

• OTP verification;

• role-based access;

• restricted clinical access;

• secure website connections;

• access logging;

• audit logging;

• backups;

• database protections;

• staff access controls; and

• other reasonable security measures.

However, no electronic transmission, internet service or digital storage system can be guaranteed to be completely secure.

Users should also protect their own devices, passwords, email accounts and messaging applications.

15. Access Within Brahmkul Ayurveda

Access to patient information is not automatically available to every staff member.

Access may depend upon the person's role and responsibilities.

For example, doctors, counsellors, Yoga professionals, pharmacy personnel, reception personnel and administrators may have different levels of access according to their legitimate functions.

Brahmkul Ayurveda may use role-based permissions and audit mechanisms to help protect patient information from inappropriate access.

16. Data Retention

Personal information and patient records may be retained for as long as reasonably necessary for the purpose for which they were collected, continuity of services, professional record-keeping, legal obligations, dispute resolution, security, accounting or other legitimate requirements.

Different categories of information may have different retention periods.

Information will not necessarily be deleted immediately when a patient stops using a service where retention remains necessary or permitted under applicable law.

When information is no longer required and no lawful reason for continued retention applies, appropriate deletion, anonymisation or other disposal measures may be used.

17. Your Privacy Rights

Depending upon the law applicable at the relevant time, individuals may have rights relating to their personal data.

These may include rights to:

• obtain information about the processing of personal data;

• request correction of inaccurate or incomplete information;

• request updating of personal information;

• request erasure where legally applicable;

• withdraw consent where processing is based upon consent;

• raise a grievance regarding the handling of personal information; and

• exercise other rights available under applicable data-protection law.

Some requests may require identity verification before they can be processed.

Certain requests may also be limited where information must be retained or processed for healthcare, legal, regulatory, security, contractual or other lawful purposes.

18. Correction of Patient Information

For security and record-integrity reasons, certain information within the Patient Portal — including name, registered email address, contact number or WhatsApp number — may not be directly editable by the patient.

Patients requiring correction of such information may contact Brahmkul Ayurveda.

Appropriate identity verification may be required before changes are made.

19. Children's and Minors' Information

Services involving individuals under 18 years of age may require the involvement of a parent or lawful guardian according to the nature of the service and applicable law.

Where legally required, verifiable consent of a parent or lawful guardian will be obtained before processing a child's personal data.

Parents and guardians should provide accurate information and should not permit minors to independently provide information where parental involvement is legally required.

20. Data Breach and Security Incidents

If Brahmkul Ayurveda becomes aware of a personal-data breach or security incident, we will assess the nature and potential impact of the incident and take reasonable measures to contain, investigate and address it.

Where notification to affected individuals, the Data Protection Board of India or another competent authority is required under applicable law, such notification will be undertaken in accordance with the requirements applicable at that time.

21. Third-Party Websites and Platforms

Our website may contain links to third-party websites or services, including social-media platforms, video platforms, payment providers and communication services.

Their privacy practices are governed by their own policies.

Brahmkul Ayurveda is not responsible for the independent privacy practices of third-party websites or platforms that we do not control.

22. International Access

Brahmkul Ayurveda's online services may be accessible to individuals outside India.

Where personal data is processed or transferred across jurisdictions, we will seek to handle such information in accordance with applicable Indian law and any applicable restrictions or requirements relating to cross-border processing.

Individuals accessing services from another country should understand that their information may be processed in India.

23. Marketing and Health-Awareness Communication

Where permitted, Brahmkul Ayurveda may communicate information concerning health-awareness initiatives, camps, webinars, events, educational activities or services.

Where consent or an opt-out mechanism is required, communication preferences will be respected in accordance with applicable requirements.

Service-related communication necessary for an active appointment, requested service, transaction or account may be treated differently from optional promotional communication.

24. No Sale of Patient Records

Brahmkul Ayurveda does not sell individual patient clinical records, prescriptions or consultation information to advertisers or data brokers.

Any future use of information for analytics, research or service improvement should be undertaken with appropriate safeguards and in accordance with applicable legal requirements.

25. Grievance and Privacy Requests

Individuals who have questions, concerns or requests concerning their personal information may contact Brahmkul Ayurveda through the designated privacy/grievance communication channel.

Requests should provide sufficient information to identify the individual and understand the concern.

For security reasons, identity verification may be required before information is disclosed, corrected or otherwise acted upon.

Privacy / Grievance Contact:
Brahmkul Ayurveda Trust

Email: admin@brahmkulayurveda.in

Registered Address:
Basantpur Bangar, Dadri
Greater Noida, Gautam Budh Nagar
Uttar Pradesh, India – 201310

Office & Correspondence Address:
D-129, Sector 9
New Vijay Nagar, Ghaziabad
Uttar Pradesh, India – 201009

26. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in our services, Patient Portal, technology, security practices, legal requirements or data-protection obligations.

The latest version will be published on this page together with an updated Last Updated date.

Where a change materially affects the processing of personal information and additional notice or consent is required by applicable law, appropriate steps will be taken.

27. Applicable Law

This Privacy Policy is intended to operate in accordance with applicable Indian law, including, where applicable and as brought into force from time to time:

The Information Technology Act, 2000;

applicable rules, regulations and requirements made under the Information Technology Act;

The Digital Personal Data Protection Act, 2023;

The Digital Personal Data Protection Rules, 2025;

and other applicable legal or regulatory requirements relating to personal information, electronic records, healthcare services and digital communications.

If applicable law changes or additional provisions of the DPDP framework become effective, Brahmkul Ayurveda may update this Privacy Policy and its internal practices accordingly.

Your Privacy Matters

Brahmkul Ayurveda recognizes that health information is personal and deserves responsible handling.

Our objective is simple:

Collect What Is Needed • Use It Responsibly • Protect It Appropriately • Respect the Individual