Privacy Policy

1. Introduction

Herbal Hills Center ("we", "us", "our") operates herbalhillscenter.com and Ayurvedic wellness centers across Mumbai, Maharashtra ("Centers"). This Privacy Policy explains how we collect, use, store, share and protect the personal information of individuals who interact with us through our website, enquiry forms, phone calls, WhatsApp, our Centers, or any AI-enabled communication tools we use to follow up on your enquiry.

We are committed to handling your personal information in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and its Rules, the Information Technology Act, 2000 and rules made thereunder, and other applicable Indian laws and telecom regulations governing calls, messages and automated communication.

By submitting your details to us through any channel — our website enquiry form, a phone call to or from us, or WhatsApp — you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

3. Information We Collect

3.1 Information You Provide to Us

• Name, phone number and email address
• Health concerns, symptoms or wellness goals you share with us so our doctors can recommend suitable treatments
• Preferred Center location and appointment date/time preferences
• Any other information you choose to share during a consultation, call, WhatsApp chat, or form submission

3.2 Information Collected Through Calls

• Recordings and transcripts of inbound calls you make to us
• Recordings and transcripts of outbound calls made to you, including calls placed or assisted by our AI voice calling system
• Details of the enquiry or appointment discussed on the call

3.3 Information Collected Through WhatsApp

• Messages, your phone number, and any details you share with us over WhatsApp
• Please note your use of WhatsApp is also governed by WhatsApp/Meta's own privacy policy, over which we have no control

3.4 Information Collected Automatically

• IP address, browser type, device information, pages visited, and cookies when you use our website

4. How We Use Your Information

We use your information to:

• Respond to your enquiry and understand your wellness requirements
• Schedule, confirm, reschedule or remind you about consultations and appointments
• Help our doctors recommend suitable Ayurvedic therapies based on the information you share (this does not replace an in-person Nadi Parikshan or medical assessment)
• Follow up on enquiries submitted via our website, inbound calls, or WhatsApp — including through automated or AI-assisted outbound calls
• Improve our services, call quality and website experience
• Send appointment reminders, offers or wellness information, where you have consented to receive such communication
• Comply with legal, regulatory and contractual obligations

5. AI-Enabled Voice Calling & Automated Communication

When you share your contact number with us — by filling a form on our website, messaging us on WhatsApp, or calling one of our Centers — we, or service providers acting on our behalf, may contact you using an AI-enabled voice calling system to follow up on your enquiry, confirm appointment details, or share relevant information about our treatments.

6. WhatsApp Communications

We use WhatsApp Business messaging to respond to enquiries, share appointment confirmations, and answer questions. Messages exchanged over WhatsApp are processed in accordance with this Privacy Policy, as well as WhatsApp's own terms and privacy policy.

7. Legal Basis for Processing

We process your personal information on the basis of:

• Your consent, given when you submit a form, initiate or receive a call, or message us on WhatsApp
• Performance of the service you have requested (e.g., booking a consultation)
• Our legitimate interest in following up on enquiries and improving our services
• Compliance with applicable law

You may withdraw your consent at any time as described in Section 11. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

8. Sharing of Your Information

We do not sell your personal information. We may share it with:

• Our doctors and consulting staff, to recommend and provide suitable treatments
• Telephony, calling and AI voice service providers who help us manage inbound/outbound calls and follow-ups
• WhatsApp Business Platform / Meta, to enable messaging
• IT, hosting, cloud storage and website service providers
• Regulators, courts or government authorities, where required by law

All third parties are expected to protect your information and use it only for the purpose for which it was shared.

9. Data Storage, Security & Retention

We use reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure or destruction. We retain your information only for as long as necessary to fulfil the purposes described in this Policy, or as required under applicable law, after which it is securely deleted or anonymised.

10. Cross-Border Data Transfer

Some of our service providers — including cloud hosting, telephony or AI voice platforms — may store or process data outside India. Where this occurs, we take reasonable steps to ensure such transfers comply with the DPDP Act and other applicable law.

11. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you
• Correct or update inaccurate or incomplete information
• Request erasure of your personal information, where applicable
• Withdraw consent to processing at any time
• Opt out of promotional or automated/AI-assisted calls and messages
• Nominate another individual to exercise your rights in the event of death or incapacity
• Lodge a grievance with us, and escalate it to the Data Protection Board of India if unresolved

To exercise any of these rights, please contact us using the details in Section 16.

12. Cookies

Our website may use cookies to remember your preferences, understand website usage and improve your experience. You can control or disable cookies through your browser settings; doing so may affect certain website features.

13. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal information from children without the involvement of a parent or guardian. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

14. Grievance Redressal

If you have any questions, concerns, or complaints about how your personal information is handled, please contact our Grievance Officer:

We will acknowledge and address your grievance within the timelines prescribed under applicable law. If you are not satisfied with our response, you may approach the Data Protection Board of India or other competent authority.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this Policy periodically.

16. Contact Us