Welcome to Narayana Clinics (“we”, “us”, or “our”). We are a naturopathy and Ayurvedic wellness clinic committed to healing naturally. Your privacy and the confidentiality of your health information are matters we take extremely seriously. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, book an appointment, receive treatment, or interact with us through our digital advertising campaigns on Google, Meta (Facebook & Instagram), and LinkedIn.

By accessing our website or submitting your details through any of our online channels, you consent to the practices described in this Policy.

1

Who We Are

Narayana Clinics is a naturopathy and Ayurvedic health clinic based in Hyderabad, Telangana, India. We offer holistic health treatments including Hydrotherapy, Herbal Medicine, Panchakarma, Shatkarma, Diet Therapy, Acupressure, Acupuncture, Physiotherapy, Lifestyle Counselling, and Dental care — all focused on natural healing without surgery, steroids, or synthetic drugs.

We are the Data Fiduciary as defined under the Digital Personal Data Protection (DPDP) Act, 2023 (India), responsible for determining the purposes and means of processing personal data collected through our website and digital campaigns.

  • Business Name: Narayana Clinics (Narayana Cure)
  • Website: narayanaclinics.com / narayanacure.narayanaclinics.com
  • Address: #121, 1st Floor, Manjeera Majestic Commercial Mall, JNTU Road, KPHB Colony, Hyderabad – 500085, Telangana, India
  • Phone: +91 – 8143731350 / +91 – 8247466951
  • Clinic Hours: Monday – Saturday, 9:30 AM – 7:00 PM

2

Information We Collect

We collect information in three primary ways: directly from you, automatically through your use of our website, and through third-party advertising and analytics platforms.

A. Information You Provide DirectlyWhen you fill out an appointment booking form, contact form, WhatsApp inquiry, phone call, or any other consultation request, we may collect:

  • Full Name — First and last name for identification
  • Phone Number — For appointment confirmation and follow-up
  • Email Address — For digital communication and newsletters
  • Health Conditions & Symptoms — To provide relevant treatment recommendations
  • Age & Gender — For demographic context in treatment planning
  • City / Location — To determine accessibility to our clinic
  • Message / Comments — Additional details you share with us voluntarily

B. Information Collected AutomaticallyWhen you visit our website, we and our third-party partners may automatically collect:

  • IP Address — For security and geographic analytics
  • Browser Type & Version — For website compatibility
  • Pages Visited & Time Spent — To understand user behaviour
  • Referring URL — To understand how you arrived at our site
  • Device Type — Desktop, mobile, or tablet
  • Click Events & Scroll Depth — Via advertising pixels and analytics tags
  • Conversion Events — Form submissions, phone call clicks, button interactions

3

Sensitive Health Data

⚠ Important Notice Regarding Health Information
Information about your health conditions, medical history, treatments sought, and wellness goals constitutes Sensitive Personal Data under the DPDP Act, 2023, and special category data under applicable international frameworks (including GDPR where relevant). We handle this data with the highest level of care and legal compliance.

When you contact us about specific health conditions — such as diabetes, blood pressure, PCOD, thyroid disorders, cancer, sexual health, weight issues, joint pain, skin diseases, or any other ailment — the information you share is treated as sensitive health data. We will:

  • Use such data solely for the purpose of providing you relevant consultation, treatment plans, and follow-up care
  • Never sell, rent, or share your health information with third-party marketers
  • Not use your health condition details to retarget you in digital ad campaigns without your explicit consent
  • Store health information securely and access it only by authorised clinic staff and treating doctors
  • Obtain your explicit consent before collecting sensitive health data through any online form or interaction

Please note that when you provide health-related information via our website contact forms, WhatsApp, or phone, you are giving us informed consent to use that data for consultation and care purposes.

4

How We Use Your Information

We use the information we collect for the following purposes, each grounded in a lawful basis under applicable law:

  • Appointment Booking & Consultation: To schedule, confirm, and manage your clinic visits or teleconsultations
  • Treatment Communication: To share treatment plans, medicine instructions, follow-up care, or health tips relevant to your condition
  • Customer Support: To respond to your inquiries made via phone, WhatsApp, email, or website contact forms
  • Advertising & Remarketing: To show you relevant ads on Google Search, YouTube, Facebook, Instagram, and LinkedIn based on your website interactions — such as pages you visited or forms you started but did not complete. This uses anonymised or hashed data only
  • Campaign Performance Measurement: To track which of our advertisements led to appointments, calls, or form submissions, helping us optimise our ad spend and reach people who genuinely need our services
  • Analytics & Improvement: To understand how users navigate our website so we can improve content, user experience, and the booking process
  • Email / SMS Newsletters: To send health tips, new treatment announcements, and promotional offers if you have subscribed or consented to such communications
  • Legal Compliance: To meet obligations under applicable Indian law, respond to lawful government requests, or resolve disputes

We will not use your personal information to make fully automated decisions that produce legal or similarly significant effects without appropriate human involvement.

5

Digital Advertising Platforms

Narayana Clinics runs paid digital advertising campaigns to reach individuals who may benefit from our treatments. We use the following platforms, each of which has its own data practices:

Google Ads & Google Analytics

We use Google Tag Manager, Google Analytics 4, and Google Ads conversion tracking. These tools place cookies on your browser to measure ad performance, build remarketing audiences, and run Performance Max (PMax) campaigns. Google may use this data per its own privacy policy.Google Privacy Policy →

Opt out of Google Analytics →

Meta Pixel (Facebook & Instagram Ads)

We use the Meta Pixel on our website to track conversions (form submissions, call clicks), build custom audiences, and run retargeting ads on Facebook and Instagram. Meta may match your pixel activity with your Facebook/Instagram account. Health-related custom audiences are created using hashed data only.Meta Privacy Policy →

Manage Meta Ad Preferences →

LinkedIn Insight Tag & LinkedIn Ads

We use the LinkedIn Insight Tag to measure campaign performance, understand the professional demographics of our website visitors, and retarget users on LinkedIn. LinkedIn may associate your visit with your LinkedIn profile if you are logged in. This is used for B2B and professional outreach campaigns only.LinkedIn Privacy Policy →

Opt out of LinkedIn retargeting →

⚠ Sensitive Category Advertising Compliance
As a healthcare provider, we are aware that Google Ads, Meta, and LinkedIn prohibit targeting users based on sensitive health conditions or implying knowledge of a user’s personal health status in ad copy. Our digital campaigns are designed to target broad interest categories (wellness, natural health, Ayurveda) and geographic areas — not to target people based on diagnosed medical conditions. We do not upload patient lists to advertising platforms. Any custom audiences created use anonymised or hashed data only.

You can opt out of personalised advertising across platforms via the Your Online Choices portal or by visiting Digital Advertising Alliance Opt-Out.

6

Cookies & Tracking Technologies

Our website uses cookies, pixels, and similar tracking technologies. A cookie is a small text file stored on your device. Below is a summary of the types of cookies we use:

Cookie TypePurposeProviderRetention
Strictly NecessaryCore website functionality (session management, shopping basket)Narayana Clinics / WordPressSession
AnalyticsTrack pageviews, user sessions, and website behaviourGoogle Analytics 4Up to 2 years
Advertising / ConversionMeasure ad clicks, form submissions, and call conversionsGoogle Ads, Meta Pixel, LinkedInUp to 90–180 days
RemarketingBuild audiences to show personalised ads to past visitorsGoogle, Meta, LinkedInUp to 180 days
FunctionalRemember user preferences (language, form data)Narayana Clinics / WordPress30 days
Tag ManagementManage and fire all tracking scripts from one placeGoogle Tag ManagerSession

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete cookies, or alert you when a cookie is set. Note that disabling certain cookies may affect the functionality of our website. Where required by applicable law, we will seek your consent before placing non-essential cookies.

7

Sharing of Your Information

We do not sell, rent, or trade your personal data to third parties. We share information only in the following limited circumstances:

  • Advertising Platforms (Google, Meta, LinkedIn): Anonymised and aggregated conversion data, or hashed identifiers, shared solely to measure campaign performance and build lookalike audiences. No sensitive health data is shared
  • Our Doctors & Clinical Staff: Health information you share is accessible to treating practitioners at Narayana Clinics for the sole purpose of delivering care
  • CRM & Communication Tools: We may use third-party tools (such as email marketing platforms or WhatsApp Business API) to manage patient communications. These providers are contractually bound to handle your data securely and only as instructed by us
  • Legal & Regulatory Requirements: We may disclose information if required by a court order, government authority, or applicable Indian law
  • Business Transfers: In the event of a merger, acquisition, or sale of business assets, user data may be transferred to the acquiring entity, who will be bound by this Privacy Policy

We do not share your name, phone number, email address, or any identifiable health data with any advertiser, data broker, or marketing company.

8

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law.

  • Appointment & Consultation Records: Retained for a minimum of 3 years, or as required under applicable health record regulations in India
  • Contact Form Submissions: Retained for up to 12 months unless a patient relationship develops
  • Marketing Communication Data (Email / SMS): Retained until you unsubscribe or withdraw consent
  • Analytics & Advertising Data: Retained per the retention policies of Google Analytics (up to 14 months), Meta Pixel, and LinkedIn (up to 180 days)
  • Financial Records: Retained for 7 years as required under Indian tax and accounting laws

When data is no longer required, it is securely deleted or anonymised such that it cannot be linked back to any individual.

9

Your Rights

Under the Digital Personal Data Protection (DPDP) Act, 2023 (India) and applicable international frameworks, you have the following rights regarding your personal data:

📋

Right to Access

Request a summary of the personal data we hold about you and the purposes for which it is processed.

✏️

Right to Correction

Request correction of inaccurate or incomplete personal information we hold about you.

🗑️

Right to Erasure

Request deletion of your personal data when it is no longer necessary for the purpose it was collected, subject to legal retention requirements.

🚫

Right to Withdraw Consent

Withdraw consent for marketing communications or data processing at any time without affecting the lawfulness of prior processing.

📣

Right to Grievance Redressal

Lodge a complaint with our Grievance Officer if you believe your personal data has been mishandled.

🏛️

Right to Lodge a Complaint

File a complaint with the Data Protection Board of India (once constituted) if your concerns are not resolved.

To exercise any of these rights, please contact us using the details in Section 13. We will respond within 30 days of receiving a verifiable request. We may need to verify your identity before processing your request.

For International Visitors (GDPR)If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland and interact with our digital campaigns served in those regions, you may have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to object to processing based on legitimate interests. Please contact us for more details.

10

Children’s Privacy

Our website and services are intended for adults (18 years and older) seeking healthcare consultations. We do not knowingly collect personal data from children under the age of 18 without verified parental or guardian consent.

Under the DPDP Act, 2023, if we knowingly process data of a child (person under 18), we will obtain verifiable consent from the child’s parent or legal guardian before collecting or processing such data, and we will not subject a child’s data to behavioural monitoring or targeted advertising.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at the details in Section 13 and we will take steps to delete such information.

11

Security

We implement appropriate technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

  • HTTPS / SSL Encryption: All data transmitted between your browser and our website is encrypted using SSL/TLS
  • Access Controls: Personal data is accessible only to authorised clinic personnel on a need-to-know basis
  • Secure Data Storage: Patient records and form submissions are stored on secured servers with access logging
  • Third-Party Security: We only work with advertising and technology partners who maintain industry-standard security certifications (SOC 2, ISO 27001)
  • Regular Reviews: We periodically review our data practices and update security measures as needed

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that is likely to harm you, we will notify you and relevant authorities as required by the DPDP Act, 2023.

12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, services, advertising activities, or applicable law. When we make material changes, we will:

  • Update the “Last Reviewed” date at the top of this page
  • Post a notice on our website homepage or send an email notification to registered users for significant changes
  • Obtain fresh consent where required by law

We encourage you to review this Policy periodically to stay informed about how we protect your information. Your continued use of our website or services after any changes constitutes acceptance of the updated Policy.

13

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Grievance Officer:

Narayana Clinics — Privacy & Grievance Contact

Clinic / Business NameNarayana Clinics (Narayana Cure)

Address#121, 1st Floor, Manjeera Majestic Commercial Mall, JNTU Road, KPHB Colony, Hyderabad – 500085, Telangana, India

Phone+91 – 8143731350
+91 – 8247466951

WhatsAppChat on WhatsApp

Websitenarayanaclinics.com

Clinic HoursMonday – Saturday
9:30 AM – 7:00 PM IST

We aim to respond to all privacy-related queries within 30 business days. For urgent concerns relating to sensitive health data, we prioritise a response within 7 business days.