Privacy Policy for Dr E Heal (dreheal.com)
Last Updated: 20-04-2025
1. Introduction
Dr E Heal (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your personal and health-related information when you use our website (dreheal.com) or enroll in our 40-day Ayurvedic programs. By using our services, you consent to the practices described herein.
2. Information We Collect
a) Personal Information
- Purpose: To create your account, deliver programs, and communicate.
- Examples: Name, email, phone number, billing address, age, gender.
b) Health Information
- Purpose: To personalize your health program.
- Examples: Medical history, symptoms, medications, lifestyle habits, health goals.
c) Technical Data
- Purpose: To improve website functionality and analyze traffic.
- Examples: IP address, browser type, device information, cookies (see Cookie Policy).
d) Payment Information
- Purpose: To process program fees securely.
- Examples: Credit/debit card details (processed via third-party gateways like Razorpay/Stripe).
3. How We Use Your Information
- Deliver Programs: Create personalized diet, yoga, and lifestyle plans.
- Communication: Send program updates, reminders, and support.
- Improve Services: Analyze aggregated data to enhance user experience.
- Legal Compliance: Fulfill tax, regulatory, or law enforcement requirements.
4. Sharing Your Information
a) With Experts
- Doctors, Dietitians & Yoga Therapists: Access your health data to provide tailored guidance.
b) Third-Party Services
- Payment Processors: Razorpay, Stripe (transaction security only).
- Analytics Tools: Google Analytics (anonymous usage data).
c) Legal Obligations
- Disclose data if required by law (e.g., court orders, fraud prevention).
We do not sell your data to advertisers or third-party marketers.
5. Your Rights
- Access & Correction: Request a copy of your data or update inaccuracies.
- Deletion: Ask us to erase your data (exceptions apply for legal/medical records).
- Opt-Out: Unsubscribe from marketing emails (via link in emails).
- Portability: Receive your data in a machine-readable format.
To exercise these rights, email [[email protected]]. We respond within 30 days.
6. Data Security
- Encryption: SSL/TLS for data transmission.
- Access Controls: Restricted to authorized personnel only.
- Audits: Regular security assessments to protect against breaches.
Note: While we take rigorous measures, no online platform is 100% secure.
7. Data Retention
We retain your data:
- Active Users: Until account deletion or program completion.
- Inactive Users: Up to [X years] post-program for legal/medical compliance.
8. Children’s Privacy
Our services are not intended for users under 18. If we inadvertently collect minor data, contact us immediately for deletion.
9. International Data Transfers
Data may be stored/processed in [India/Other Countries] with safeguards compliant with [GDPR/Applicable Laws].
10. Updates to This Policy
We may update this policy. Changes take effect upon posting. Check this page periodically for updates.