Gurh Chai Privacy Policy

Who is responsible for your personal data

Gurh Chai is responsible for the personal data described in this policy.

This policy applies to people who visit the Gurh Chai website, submit a contact form, make an online booking, or have a customer or patient record with Gurh Chai.

Personal data we collect

Depending on how you interact with Gurh Chai, we may collect:

• For an online booking: your name, phone number, email address, chosen service, and selected date and time.
• For a customer or patient record: your contact details and notes.
• When you use the website contact form: your name, phone number, email address, and message.

Please provide personal data about another person only if you are authorised to do so.

Why we use personal data

Gurh Chai uses personal data only where there is an appropriate purpose and basis under applicable law. We may use it to:

• Receive, arrange and manage online bookings.
• Provide the chosen service and communicate about it.
• Create and maintain customer or patient records.
• Respond to contact form messages and other enquiries.
• Meet applicable legal obligations.
• Handle grievances and requests concerning personal data.

Where processing is based on consent, you may withdraw that consent as explained below.

Customer or patient notes and health information

Customer or patient records may include notes. If those notes contain health information, Gurh Chai will handle that information with extra care.

Health information will be shared only as needed for the person’s care or where required by law.

How long we keep personal data

Gurh Chai keeps personal data only for as long as it is needed for the purpose for which it was collected and as required by applicable law.

When personal data is no longer needed, Gurh Chai will delete it or otherwise handle it in accordance with applicable law.

Who we share personal data with

The Gurh Chai website and back office run on Kadibi. Data is stored using Amazon Web Services in the Mumbai, India (ap-south-1) region.

Gurh Chai shares personal data with these providers only as needed to operate the website, back office and data storage. Personal data may also be disclosed where required by law.

Cookies and analytics

The Gurh Chai website does not have analytics code.

The website provider may use technology necessary to run the website and back office. Gurh Chai does not use website analytics as part of the website described in this policy.

Your rights and choices

Subject to the Digital Personal Data Protection Act, 2023 and other applicable law, you may ask Gurh Chai to:

• Provide access to information about your personal data and its processing.
• Correct inaccurate or misleading personal data.
• Complete incomplete personal data.
• Update your personal data.
• Erase personal data that is no longer required, subject to applicable legal requirements.
• Address a grievance about how your personal data is handled.

Where Gurh Chai relies on your consent, you may withdraw it. Withdrawing consent will not affect processing already carried out before withdrawal. It may mean Gurh Chai can no longer provide a service that requires the relevant data.

You may also nominate another person to exercise your rights in the event of your death or incapacity, as permitted by applicable law.

Gurh Chai may need to verify your identity before acting on a request.

How to contact Gurh Chai or raise a grievance

To ask a privacy question, exercise your rights, withdraw consent or raise a grievance, contact Gurh Chai using:

• Email: [Add privacy contact email]
• Phone: [Add privacy contact phone number]
• Address: [Add business postal address]
• Grievance contact: [Add grievance officer email]

Please describe your request clearly and provide the information reasonably needed to locate the relevant personal data. If you are not satisfied with Gurh Chai’s response, you may use remedies available under applicable law.

Changes to this policy

Gurh Chai may update this policy when its practices, website or legal obligations change. The updated policy will be posted on the website.

Effective date: [Add effective date]