google-site-verification=R6I4DtCdzlIaQFcAUQaHcR5g09o2vZbyBLamA7Wz12U
top of page

Privacy Policy

Writer: thaduru sumanth reddy
thaduru sumanth reddy
Apr 19
3 min read
Last Updated: April 2026 | Effective Date: April 19, 2026 | Jurisdiction: India

This Privacy Policy describes how Aranya Bloom, operated by Raksha Sindhunoori ("we", "us", "our"), collects, processes, stores, and protects your personal data. It is written in compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA), the Mental Healthcare Act, 2017, the Information Technology Act, 2000, and applicable guidelines of the Rehabilitation Council of India (RCI).

1. Who We Are

Aranya Bloom is a mental wellness and therapy practice based in Pune, Maharashtra, India. Services are provided by Raksha Sindhunoori, a qualified mental health professional. As the service provider, Raksha Sindhunoori acts as the Data Fiduciary under the DPDPA, 2023.

Contact: aranyabloom@gmail.com | Phone: +91 95024 42727

2. What Personal Data We Collect

When you use our website, booking system, or contact us directly, we may collect the following categories of data:

  • Identity data: name, email address, phone number

  • Booking data: session date, time, service selected, and intake form responses

  • Sensitive Personal Data (SPD): health information, mental health history, therapeutic disclosures shared during sessions or in intake forms

  • Technical data: IP address, browser type, cookies (collected automatically via our website platform)

3. Legal Basis for Processing (DPDPA, 2023)

Under Section 7 of the DPDPA, 2023, we process your personal data on the basis of:

  • Consent: You provide explicit consent when you submit your booking or intake form.

  • Legitimate use: Processing necessary to provide the therapeutic service you have contracted with us.

  • Legal obligation: Where required by law, such as under the Mental Healthcare Act, 2017.

You may withdraw your consent at any time by writing to aranyabloom@gmail.com. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

4. How We Use Your Data

  • To schedule, confirm, and manage your therapy appointments

  • To send session reminders and follow-up communications

  • To maintain confidential clinical notes and session records

  • To comply with professional, legal, or regulatory obligations

  • To improve the quality of services offered

We do not sell, rent, or share your personal data with third parties for commercial purposes.

5. Confidentiality of Therapy Information

All information disclosed during therapy sessions is strictly confidential and protected under the Mental Healthcare Act, 2017 (Section 23) and professional ethics guidelines. We will not disclose your therapeutic information without your written consent, except in the following limited circumstances:

  • Where there is a serious and imminent risk of harm to you or another person

  • Where required by a court order or applicable law

  • Where required under mandatory reporting laws

6. Data Retention

  • Booking and contact information: Retained for 5 years from the date of last interaction.

  • Therapy records and clinical notes: Retained for a minimum of 7 years in accordance with the Mental Healthcare Act, 2017 and professional guidelines.

  • Data is securely deleted upon expiry of the retention period.

7. Your Rights as a Data Principal (DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

  • Right to Information (Section 11): Request a summary of personal data held about you and how it has been processed.

  • Right to Correction and Erasure (Section 12): Request correction of inaccurate data or erasure of data no longer necessary, subject to legal retention requirements.

  • Right to Grievance Redressal (Section 13): Lodge a complaint with us. If unresolved, you may approach the Data Protection Board of India.

  • Right to Nominate (Section 14): Nominate a person to exercise your rights in case of death or incapacity.

8. Third-Party Services

We use the following third-party platforms which may process your data under their own privacy policies. We recommend reviewing these policies:

  • Wix.com (website and booking platform) — privacy policy at wix.com/about/privacy

  • Google Calendar & Gmail (appointment scheduling and communication) — privacy policy at policies.google.com/privacy

  • Payment processors (if applicable) — data is processed under their own PCI-DSS compliant privacy policies

9. Data Security

We implement reasonable technical and organisational measures to safeguard your personal data against unauthorised access, disclosure, alteration, or destruction. Session notes and sensitive data are stored in password-protected systems accessible only to Raksha Sindhunoori.

10. Grievance Officer & Contact

In accordance with the DPDPA, 2023 and the Information Technology Act, 2000, the Grievance Officer for Aranya Bloom is:

Raksha Sindhunoori

Email: aranyabloom@gmail.com | Website: www.aranyabloom.com

We will acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days. If your grievance remains unresolved, you may escalate to the Data Protection Board of India once constituted under the DPDPA, 2023.

11. Changes to This Policy

We may update this Privacy Policy periodically. The updated policy will be posted on this page with a revised effective date. Continued use of our services following the update constitutes acceptance of the revised policy.

 
 
 

Recent Posts

See All

Comments


bottom of page