Privacy Policy

Last updated 8 August 2026

This Privacy Policy explains how Swanira Ventures Private Limited (CIN: U86901KA2025PTC211499), which operates the brand “Sanyom Ayurveda” (“Sanyom”, “we”, “us”, or “our”), collects, uses, shares, and protects your personal information — including health information — when you visit www.sanyom.in (the “Website”), book a consultation, purchase a membership, or otherwise interact with us (together, the “Services”).

Please read this policy carefully. We process your information for the purposes described below. Where consent is required — for example, when you book a consultation — we collect it separately through a clear affirmative action. If you do not agree with these practices, please do not use the Services.

1. Scope & who we are

Sanyom Ayurveda is an Ayurvedic clinic based in Bangalore, Karnataka, India. For the purposes of Indian data protection law, we act as the entity that determines how and why your personal data is processed.

We handle your information in accordance with applicable Indian law, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “SPDI Rules”), and the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) as and when its provisions come into force.

2. Information we collect

We collect the following categories of information, depending on how you interact with us:

a. Information you provide when booking a consultation

When you book a consultation, we may collect information about the person receiving the consultation, including:

• Full name;
• Phone / WhatsApp number, where required for consultation-related communication;
• Age and gender (optional);
• Primary health concern and a brief description of symptoms that the person receiving the consultation, or their parent or lawful guardian where applicable, chooses to share; and
• Preferred appointment date and time.

Where a consultation is booked on behalf of another person, we may also collect the name, contact details, and relationship of the person making the booking, where necessary to administer the consultation.

b. Information you provide when purchasing a membership

• Your full name, phone number, and address (used to route your sessions).
• Your email address (optional, used for confirmations).
• A one-time password (OTP) sent to your phone number to verify your identity.

c. Payment information

Membership payments are processed by our third-party payment gateway, Razorpay. Your card, UPI, netbanking, or other payment credentials are collected and processed directly by Razorpay under its own privacy policy and security standards. We do not collect or store your complete payment card details, CVV, UPI PIN, or online banking credentials. We receive and retain only the payment information necessary for membership administration, accounting, customer support, reconciliation, and compliance with applicable legal obligations, such as transaction reference, payment status, amount paid, and payment date.

d. Sensitive personal information

Some of the information above — in particular details about your health condition, symptoms, and reasons for seeking treatment — is treated as sensitive personal data or information (SPDI) under the SPDI Rules, and as personal data under the DPDP Act. We collect and process such information only with your consent and only for the purposes described in this policy.

Consent: Before submitting a consultation request or purchasing a membership, you will be asked to provide your explicit consent to the collection and processing of your personal data by selecting an unchecked consent checkbox linked to this Privacy Policy. You may withdraw your consent at any time as described in this Policy, subject to our legal obligations and any information that we are required to retain under applicable law.

e. Information collected automatically

When you visit the Website, our hosting and infrastructure providers may automatically collect limited technical information such as your IP address, device and browser type, and pages viewed, for security, diagnostics, and to keep the Website working correctly.

3. How we use your information

We use your information to:

• Schedule, confirm, and manage your consultation appointments.
• Understand your requirements before a session and provide appropriate Ayurvedic care and advice.
• Process and fulfil membership purchases, including payment and verification.
• Respond to your enquiries and provide customer support.
• Send you service-related communications, such as appointment confirmations and changes to our terms or policies.
• Keep our Services safe, and prevent fraud and misuse.
• Comply with our legal and regulatory obligations.

Purpose limitation. We use your health information only for the purpose for which you provided it — to deliver your care and related Services. We will not use your health information for marketing, or share it for any unrelated purpose, without your separate, specific consent.

4. Your health information

We understand that health information is deeply personal. Any information you share about your health is treated as confidential and is accessible only to the authorised personnel who require it to provide healthcare services, administer appointments, provide customer support where necessary, fulfil legal obligations, or maintain the operation and security of our Services. Access is provided on a need-to-know basis.

Not a substitute for professional advice. Information on the Website is provided for general awareness and is not a substitute for professional medical diagnosis, advice, or treatment. Submitting an enquiry or booking request does not by itself create a practitioner–patient relationship; that relationship begins when you attend a consultation with us.

5. When and with whom we share information

We do not sell your personal information, and we do not use it for third-party targeted advertising. We share information only in the following situations:

• Service providers. With trusted vendors who help us operate the Services — for example, our payment gateway (Razorpay), our SMS / OTP provider, and our website hosting and IT providers — who are permitted to use your information only to perform services for us.
• Communication tools. If you choose to contact us via WhatsApp, telephone, or email, your message is handled through those respective platforms.
• Legal and regulatory. Where required to comply with applicable law, a lawful request from a public authority, or to establish, exercise, or defend legal claims.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

6. Cookies & tracking

Our Website uses only the cookies necessary for it to function. Our Contact page embeds an interactive Google Maps component to help you find our clinic; Google may set its own cookies when this map loads, subject to Google’s privacy policy.

Do-Not-Track. There is currently no uniform industry standard for responding to “Do-Not-Track” browser signals, so we do not respond to them at this time. If a standard is adopted in the future, we will update this policy accordingly.

7. How we keep your information safe

We implement appropriate technical and organisational safeguards designed to protect your personal information. These measures include secure transmission of data using HTTPS, encryption where appropriate, role-based access controls, authentication mechanisms, secure hosting infrastructure, regular security updates, and other measures designed to reduce the risk of unauthorised access, disclosure, alteration, or destruction of personal information. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. You share information with us at your own risk and should always use the Services within a secure environment.

8. How long we keep your information

We keep your personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by applicable law (including medical, tax, accounting, or company-law requirements).

• Consultation and health records are retained while we need them to provide care, follow up on your treatment, and meet applicable medical or legal requirements.
• Membership and transaction records are retained for the period required by applicable tax, accounting, and company-law requirements.
• Enquiry and contact information is retained only for as long as needed to address your request.

When we no longer have a legitimate need to retain your information, we securely delete or anonymise it.

9. Your rights & choices

Subject to applicable law, you have the right to:

• Access the personal information we hold about you and how we have used it.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Withdraw your consent at any time (see below).
• Nominate another individual to exercise your rights on your behalf, in the event of your death or incapacity, as provided under the DPDP Act.

Withdrawing consent. Where we rely on your consent, you may withdraw it at any time by contacting us using the details in section 13. This will not affect the lawfulness of any processing carried out before your withdrawal.

To exercise any of these rights, email us at contact@sanyom.in. We will respond to your request within a reasonable time and in accordance with applicable law.

10. Children’s privacy

Our Services may be provided to individuals of all age groups, including children. Under the Digital Personal Data Protection Act, 2023 (DPDP Act), a child means an individual who has not completed eighteen years of age.

When we provide consultation or healthcare services to a child, we may process the child’s personal information, including health-related information, where necessary to provide the requested healthcare services and protect the child’s health.

Where required under applicable law, we will obtain consent or other appropriate authorisation from the child’s parent or lawful guardian before processing the child’s personal information. We may take reasonable steps to verify that the person providing such consent or authorisation is the child’s parent or lawful guardian, where required.

We do not knowingly use children’s personal information for targeted advertising, behavioural monitoring, or other activities that are prohibited under applicable law. We limit the collection and use of children’s personal information to what is reasonably necessary for providing healthcare services, administering appointments, communicating with the child or their parent or lawful guardian, maintaining necessary records, and complying with applicable legal obligations.

Parents and lawful guardians may contact us through the details provided in section 11 (Grievance Officer) or section 13 (How to contact us) of this Privacy Policy regarding the personal information of a child, including requests to exercise applicable rights.

11. Grievance Officer

In accordance with the SPDI Rules, we have designated a Grievance Officer to address concerns about this policy or our handling of your personal information. You may contact the Grievance Officer at:

Swati Chugh
Swanira Ventures Private Limited (Sanyom Ayurveda)
1st Floor, SMR Annexe, 11, Valliyamma Layout,
Kasavanahalli, Sarjapur Road,
Bangalore, Karnataka 560035, India
Email: contact@sanyom.in
Phone: +91 72040 40434

We will acknowledge and redress grievances within one month of receiving them. If your grievance is not satisfactorily resolved, you may, once the relevant provisions are operational, escalate the matter to the Data Protection Board of India under the DPDP Act.

12. Changes to this notice

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The updated version will be indicated by a revised “Last updated” date at the top of this page. Where changes are material, we will take reasonable steps to notify you. We encourage you to review this policy periodically.

13. How to contact us

If you have questions about this policy or how we handle your information, you can also reach us at:

Swanira Ventures Private Limited
(Sanyom Ayurveda)
1st Floor, SMR Annexe, 11, Valliyamma Layout,
Kasavanahalli, Sarjapur Road,
Bangalore, Karnataka 560035, India
Email: contact@sanyom.in
Phone: +91 72040 40434