Privacy Policy

Devbhoomi Sanjeevani Ayurveda & Yoga Wellness Centre operates this website and the wellness centre at 592, Tapkeshwar Road, Garhi Cantonment, Dehradun, Uttarakhand 248003, India. In this policy, "we" and "us" mean that organisation.

For any question about your data, or to exercise any of the rights described below, write to care@devbhoomisanjeevani.com with "Privacy" in the subject line. A named person handles these and we aim to reply within seven working days.

Through this website we collect only what you type into a form: your name, email address, telephone number, country, the service or program you are interested in, your preferred dates, and whatever you choose to tell us in the message field. Nothing else on the site collects personal data.

If you become a guest, we additionally hold clinical information: your medical history, current medication, examination findings, the protocol prescribed for you, and progress notes. This is health data and we treat it as the most sensitive category we hold.

Our server logs record the usual technical information — IP address, browser and referring page — for security and error diagnosis. These logs are rotated and deleted after 30 days.

Our wellness tools (BMI calculator and dosha assessment) run entirely in your browser. The numbers and answers you enter are never transmitted to us and are lost when you close the page, unless you deliberately include your result in an enquiry.

To answer your enquiry and, if you book, to plan and deliver your treatment safely. Clinical information exists so that a physician can prescribe appropriately and avoid interactions with your existing medication.

To send you the wellness letter, if and only if you asked for it. Every edition carries a one-click unsubscribe link and we do not use a separate list for anything else.

To meet our record-keeping obligations as a health establishment, and to issue invoices and insurance documentation when you request them.

We do not build advertising profiles, we do not run behavioural tracking, and we do not sell, rent or trade your information to anybody. Ever.

Your enquiry is read by our reception coordinator and by the physician who will reply to it. Clinical records are visible to the physicians and therapists directly involved in your care, and to nobody else.

Our email is hosted with a commercial provider under a data-processing agreement; the website is hosted on servers in India. Where we use an interpreter, they are bound by the same confidentiality obligations as our clinical staff.

We disclose information to a third party only with your written consent — for example when you ask us to send records to your doctor at home or to an insurer — or where Indian law requires it of us.

This site sets no tracking cookies of its own. We do not use Google Analytics or any other analytics package, and we do not use advertising, remarketing or social media pixels.

Two Google services are embedded, and both are optional to use. Google Translate powers the "Translate this page" control in the header: the script loads on every page, and if you choose a language, the text of that page is sent to Google to be translated and Google stores your choice in a cookie named googtrans. Until you pick a language, no translation request is made — but the script itself is loaded from Google, which means Google can see your IP address and the page you are on.

Google Maps is embedded on our contact page. When that map loads, Google receives your IP address and sets its own cookies. If you would rather avoid it, the full address and directions are given in plain text alongside the map.

Both are governed by Google's own privacy policy rather than ours. If you would prefer to avoid Google entirely, a browser extension that blocks third-party scripts will stop both from loading and the site will continue to work normally in English.

We consider machine translation a convenience, not a substitute for our own words. Where accuracy matters — a treatment plan, a quotation, anything clinical — ask us and we will reply in English, or arrange one of our interpreters.

Enquiries that do not lead to a booking are deleted after 24 months.

Clinical records are retained for eight years from your last visit, as expected of a health establishment, after which they are securely destroyed. Records relating to a minor are kept until three years after they reach eighteen.

Newsletter subscriptions are kept until you unsubscribe, and your address is then removed within 30 days.

Financial records are kept for eight years, as tax law requires.

The site is served over HTTPS with a strict content security policy, and forms are protected against automated abuse and cross-site request forgery. Email accounts require two-factor authentication.

Paper clinical records are held in a locked cabinet in the consultation block with access limited to clinical staff. Digital records sit on an encrypted drive with role-based access and daily encrypted backups.

If a breach ever affected your data in a way likely to cause you harm, we would tell you directly and promptly, and describe plainly what happened and what we were doing about it.

You may ask us for a copy of everything we hold about you, and we will provide it within 30 days at no charge.

You may ask us to correct anything inaccurate; tell us and we will amend it, noting the correction in the clinical record as good practice requires.

You may ask us to delete your data. We will do so unless we are legally obliged to retain a clinical record, in which case we will explain exactly what must be kept and for how long.

You may withdraw consent to marketing at any time, without giving a reason and without it affecting your care in any way.

If you are unhappy with how we have handled your data, tell us first — we would rather fix it. You also have the right to complain to the relevant data protection authority in your jurisdiction.

We do not knowingly collect information from anyone under sixteen through this website. Clinical programs are not offered to under-sixteens. Children over twelve may attend yoga classes with a parent or guardian, whose consent and contact details we hold rather than the child's.

When we change this policy we update the date at the top and, if the change is material, we say so on this page for at least 60 days. We do not make retrospective changes that reduce the protection already given to information we hold.