Privacy
Protocol

1. Data Fiduciary & Identity

This platform is owned and operated by PRACHYAM AYURVEDA PVT LTD, a registered corporate entity under Indian law, hereinafter referred to as the "Data Fiduciary".

Registered Address: 106/1 , Vaidya Laxmi Shankar Trivedi Marg , P.Road , Kanpur , Uttar Pradesh - 208012.
GSTIN: 09ABCFP3225D1ZK
Contact: prachyamayurveda@gmail.com

Under the **Digital Personal Data Protection (DPDP) Act, 2023 (India)**, we acknowledge our role as the custodian of your digital personal coordinates and pledge total compliance concerning ingestion, processing, and erasure protocols.

2. Scope of Data Ingestion

We ingest only the minimum essential elements necessary to fulfill your wellness purchases, teleconsultations, and custom botanical recommendations:

• Personal Coordinates: Full Name, Billing Address, Shipping Address, Contact Numbers, and Email Addresses.
• Biometric Quiz Output: Voluntary answers provided during the Dosha Quiz to analyze constitutional synergy (Vata, Pitta, Kapha).
• Clinical Logs: Secure appointment history, consulting doctor names, and prescriptions generated during telemedicine calls.
• Digital Fingerprints: Pincode details, IP address logs, transaction tokens, and basic cookie profiles to authenticate sessions and secure Razorpay payment handshakes.

3. Legal Basis & Processing Protocol

In accordance with Section 6 of the DPDP Act 2023, personal data is processed solely under the following conditions:

1. Consent: Explicit, specific, unconditional, and informed consent given at the time of account creation, quiz submission, or checkout.
2. Legitimate Uses: Invoicing, taxation, order processing, and facilitating drug tracking under the Drugs and Cosmetics Rules 1945.

4. Third-Party Synchronisation

We coordinate with specialized partners to maintain storefront operations. We do *not* lease or sell biological data for non-consensual advertising:

• Logistics Systems: Delhivery, BlueDart, and Xpressbees for weight calculation, dispatch routing, and dynamic SMS/pincode rate syncing.
• Payment Network: Razorpay for fully encrypted, PCI-DSS compliant financial transmissions.
• Regulatory Bodies: Licensing authorities under AYUSH and FSSAI for batch tracing records where required by law.

5. Data Retention & Secure Vaulting

All digital assets are stored in high-security, encrypted cloud infrastructure nodes with robust SSL handshakes.

Under statutory Indian tax regulations and the Drugs and Cosmetics Act 1940, invoice ledgers and prescription tracings are retained for a mandatory period of **7 years** to maintain product compliance and trace batch distributions. Non-mandatory cookies and cart parameters are cleared within 30 days.

6. Right to Erasure, Portability & Consent Withdrawal

Section 12 of the DPDP Act 2023 grants you full autonomy over your data:

• Consent Withdrawal: Toggle email marketing and tracking scripts inside the **Data Privacy** tab in your Account.
• Right to Portability: Export your unified JSON Identity Matrix from your dashboard at any time.
• Right to Erasure: You can submit a deletion request directly through your dashboard. Accounts, saved addresses, and active quiz profiles will be scrubbed from production nodes within 72 hours.

7. Grievance Redressal Officer

For any questions regarding DPDP compliance, data security, or to report a data breach, please contact our designated **Data Protection Officer**:

Designated Officer: Karan Sharma
Corporate Entity: PRACHYAM AYURVEDA PVT LTD
Email Address: prachyamayurveda@gmail.com
Corporate SLA: Breach notification within 72 hours; full query resolution within 15 calendar days.