This Privacy Policy describes how Aura Roots & Radiance ("we," "our," or "us") collects, uses, stores, and protects your personal information when you visit auraroots.in, book an appointment, or use our wellness services. We are committed to safeguarding your privacy in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
1. Who We Are
Aura Roots & Radiance is a wellness clinic offering integrative Ayurveda and advanced aesthetic treatments, located in Mavelikkara, Kerala, India. For any privacy-related queries, you may reach us at info@auraroots.in.
2. Information We Collect
2.1 Information You Provide
- Booking & contact details: name, email, phone number, preferred appointment date, area of interest.
- Health information: during in-clinic consultations, we collect health history, current concerns, medications, allergies, and dosha-assessment details necessary for personalized treatment.
- Communication records: emails, messages, or notes from your consultations.
- Newsletter preferences: your email, if you subscribe to our newsletter.
2.2 Information Collected Automatically
- Usage data: pages visited, time spent, browser type, device information, IP address, and general location (city/region).
- Cookies and similar technologies: we use essential cookies to keep the site functional, and may use analytics cookies to understand usage patterns. See Section 6 for details.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To schedule and manage your consultations and treatments.
- To prepare personalized treatment protocols based on your Prakriti and health history.
- To respond to your enquiries and provide customer support.
- To send appointment reminders, treatment follow-ups, and post-care instructions.
- To send promotional communications and wellness newsletters (only with your consent).
- To comply with legal, regulatory, and healthcare record-keeping obligations.
- To improve our website, services, and overall client experience.
4. Legal Basis for Processing
Under the DPDP Act, we process your data based on one of the following lawful grounds:
- Consent: for newsletter subscriptions and promotional communications.
- Legitimate use: for booking appointments, providing treatments, and fulfilling clinic obligations.
- Legal obligation: for medical record retention and regulatory compliance.
5. How We Share Your Information
We do not sell your personal information. We may share limited information with:
- Our treating physicians and therapists as required for your care.
- Service providers (payment processors, appointment-management platforms, email service providers) who operate under strict confidentiality obligations.
- Regulatory authorities when required by Indian law.
- Legal advisors or courts if necessary to protect our rights or comply with legal process.
6. Cookies
Our website uses a minimal number of cookies to function properly and to understand how visitors interact with the site. You can disable cookies through your browser settings at any time; however, some site functions may not work as expected without them.
7. Data Retention
We retain your information only for as long as is reasonably necessary:
- Clinical records: retained as per Indian healthcare record-keeping standards.
- Booking / contact data: up to 3 years after your last interaction, unless a longer period is required by law.
- Newsletter data: retained until you unsubscribe.
8. Your Rights Under the DPDP Act
You have the right to:
- Access: request a summary of the personal data we hold about you.
- Correction: have inaccurate or incomplete data corrected.
- Erasure: request deletion of your data, subject to legal retention requirements.
- Withdraw consent: for any consent-based processing, at any time.
- Grievance redressal: raise concerns about how your data is handled.
To exercise any of these rights, email us at info@auraroots.in with your request. We will respond within a reasonable timeframe as required by law.
9. Data Security
We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, misuse, or alteration. These include encrypted storage for clinical records, limited staff access, secure communication channels, and regular review of our security practices. However, no system is completely immune, and we encourage you to take care when sharing sensitive information online.
10. Children's Privacy
Our services are intended for adults. We do not knowingly collect personal information from individuals under the age of 18 without verifiable parental consent. Minors may receive treatments only with a guardian present and accompanying documentation.
11. Third-Party Links
Our website may contain links to third-party websites (such as our social media profiles). This Privacy Policy does not apply to those sites; please review their privacy practices separately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. Material changes will be communicated via the website or, where appropriate, by email.
13. Contact & Grievance Officer
For any questions, requests, or complaints regarding your personal data or this policy, please contact our Grievance Officer:
Grievance Officer, Aura Roots & Radiance
Email: info@auraroots.in
Phone: +91 97455 07050 / +91 80756 97564
Address: Mavelikkara, Kerala, India , 690101