Legal
Privacy Policy
Last updated · 1 February 2026
1. Introduction
Welcome to Sparsh Wellness (“we,” “our,” “us”), a professional therapeutic wellness studio. We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and therapeutic wellness services. By using Sparsh Wellness, you agree to the practices described in this Privacy Policy.
2. Information We Collect
Personal information you provide when registering for our services: - Full Name — for identification and personalization - Email Address — for account login and communication - Password — encrypted using bcrypt hashing - Age — to verify eligibility (18+ only) - Sex/Gender — for appropriate therapist matching - Aadhaar Card Number — for mandatory identity verification (12-digit format) - Aadhaar Card Image — encrypted upload for KYC verification - Mobile Number (optional) — for appointment notifications Session and booking information: - Service bookings (date, time, type) - Therapist preferences - Session feedback and ratings - Payment transaction records - Session history We do NOT collect: biometric data, location tracking outside studio visits, contact lists or social media data, or photos from your device gallery (except for Aadhaar upload).
3. How We Use Your Information
We use your information solely for: - Identity Verification — Aadhaar verification for client safety - Service Delivery — booking sessions, assigning therapists - Payment Processing — secure transaction handling via Razorpay - Communication — booking confirmations, reminders, feedback requests - Service Improvement — aggregated, anonymized analytics - Legal Compliance — meeting Indian regulatory requirements - Safety and Security — protecting against fraud and abuse We will NEVER sell your personal data to third parties, use your data for marketing without consent, share your Aadhaar information except as legally required, track your location, or send spam.
4. Data Storage & Security
Data is stored on secure servers within India in encrypted databases with industry-standard protection. Aadhaar images are stored as encrypted base64 with restricted access. Security measures include AES-256 encryption for sensitive data at rest, TLS/SSL for all data in transit, bcrypt password hashing, JWT tokens with expiration, role-based access control, regular security audits, and no unauthorized employee access to Aadhaar data. We do NOT store your payment card details. All transactions are processed by Razorpay, a PCI-DSS compliant payment gateway.
5. Data Sharing & Disclosure
With therapists: limited information (your first name, age, sex, booking details) is shared with your assigned therapist for service delivery only. Therapists do NOT have access to your Aadhaar details. With service providers: Razorpay (payment processing), MongoDB Atlas (encrypted database hosting) and cloud hosting providers — all bound by strict data protection agreements. We may disclose information if required by Indian law enforcement with a valid legal request, court orders, government regulatory authorities, or to protect rights, property, or safety.
6. Aadhaar Card Information — Special Provisions
Why we collect Aadhaar: mandatory identity verification for client safety, prevention of fraud and duplicate registrations, compliance with Indian KYC regulations, and therapist safety. How Aadhaar is protected: - Encrypted storage with restricted access - Aadhaar number is masked when displayed (showing only last 4 digits) - Aadhaar image accessible only to verified admins - Duplicate prevention checks - Never shared with therapists or other customers, never used in marketing We currently perform format validation (12-digit check) and duplicate detection. We do NOT verify Aadhaar with the UIDAI government database.
7. Your Rights
You have the right to: - Access your data — view all personal information we hold about you - Update your information — correct inaccurate information at any time - Delete your account — request complete deletion via privacy@sparshwellness.in (Aadhaar data permanently deleted within 30 days) - Data portability — request a copy of your data in machine-readable format - Withdraw consent — at any time, though this may limit service availability - Opt out — disable notifications and marketing communications anytime
8. Children's Privacy
Sparsh Wellness services are strictly for adults 18 years and older. We do not knowingly collect information from minors. If we discover a minor has registered, the account will be immediately terminated and data deleted.
9. Data Retention
- Active account data — while the account is active - Aadhaar information — account lifetime + 7 years (legal requirement) - Payment records — 7 years (tax compliance) - Session history — 5 years - Feedback and reviews — indefinite, anonymized after account deletion - Inactive accounts — auto-deleted after 3 years of inactivity
10. Changes to This Policy
We may update this Privacy Policy. Significant changes will be notified via notification, posted on this page with an updated date, and emailed to registered users. Continued use after changes constitutes acceptance.
11. Contact & Grievance Officer
For privacy concerns, data requests, or questions: Email: privacy@sparshwellness.in Support: support@sparshwellness.in Address: 14 Lotus Lane, Indiranagar, Bengaluru 560038 Phone: +91 99201 13798 Grievance Officer (as per the Information Technology Act, 2000): grievance@sparshwellness.in — response within 30 days. This policy complies with the Information Technology Act 2000, the Digital Personal Data Protection Act 2023, Reasonable Security Practices (SPDI Rules) and Aadhaar Act 2016 guidelines.