Privacy Policy

1. Legal Compliance

This policy complies with:

• 🇮🇳 Information Technology Act, 2000
• 🇮🇳 SPDI Rules, 2011
• 🇪🇺 GDPR

2. Data Collected

Personal Data:

• Name, phone, email
• Address

Sensitive Data:

• Hair sample analysis data

3. Legal Basis (GDPR)

We process data based on:

• Consent
• Contractual necessity
• Legitimate interest

4. Purpose

• Order processing
• Sample analysis
• Report delivery
• Customer communication

5. Data Sharing

We may share data with:

• External laboratories
• Courier/logistics providers
• Payment gateways

6. Data Security

We use:

• Secure storage
• Access control
• Confidential handling

7. Data Retention

Data retained only as long as necessary or legally required.

8. User Rights

Users can:

• Access data
• Correct data
• Request deletion
• Withdraw consent

9. International Transfers

Data may be processed outside the user’s country with safeguards.

10. Consent

By using our services, users consent to data processing.