Privacy Policy

01Who We Are

Samarpan is a holistic wellbeing practice founded and operated by Harsh Ranjan, based in New Delhi, India. We offer Ayurvedic consultations, Yoga therapy, integrative psychology sessions, and wellness education through our website and in-person or online sessions.

We are the data controller for all personal information collected through this website and our services.

Detail	Information
Business Name	Samarpan — Holistic Wellbeing
Founder	Harsh Ranjan
Location	New Delhi, India
Website	www.thesamarpan.co.in
Email	info@thesamarpan.co.in
WhatsApp	+91 96614 86740

02Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third-party services.

A. Information You Provide Directly

• Contact & Booking Forms: Name, email address, phone number, and health concern details when you fill out our consultation request, booking, or contact forms.
• Newsletter Subscription: Name (optional) and email address when you subscribe to our Inner Circle newsletter.
• Session Information: Health history, dosha-related details, and wellness goals shared during consultations. This is sensitive health information and is handled with the highest care.
• Community Applications: Name, credentials, area of practice, and professional background when applying to join the Samarpan Community.
• Communications: Messages, emails, or WhatsApp conversations you initiate with us.

B. Information Collected Automatically

• Usage Data: Pages visited, time spent, referring URLs, and navigation patterns via Google Analytics (GA4).
• Device & Technical Data: IP address, browser type, operating system, screen resolution, and language settings.
• Cookies & Local Storage: Session preferences such as dark/light mode settings stored locally in your browser.

C. Information from Third Parties

• Google Analytics: Aggregated, anonymised website usage statistics.
• Firebase / Firestore: Form submission data stored securely in Google's Firebase infrastructure.
• Social Media: If you interact with us on Instagram or YouTube, those platforms may share basic engagement data per their own privacy policies.

03How We Use Your Information

We use the information we collect only for legitimate purposes directly related to the services we provide:

Purpose	Data Used
Respond to consultation enquiries	Name, email, phone, health concern
Schedule & conduct healing sessions	Name, contact, health history
Send the Inner Circle newsletter	Name (opt.), email address
Improve website performance	Analytics & usage data
Process community applications	Professional credentials & bio
Respond to your messages	Communication content
Comply with legal obligations	As required by applicable law

04Legal Basis for Processing

We process your personal information under the following legal bases, consistent with applicable Indian data protection law (the Digital Personal Data Protection Act, 2023) and, where applicable, GDPR principles:

• Consent: For newsletter subscriptions and non-essential cookies. You may withdraw consent at any time.
• Contractual Necessity: For processing enquiries and delivering consultation services you have requested.
• Legitimate Interests: For website analytics, security monitoring, and improving our services — where these interests do not override your fundamental rights.
• Legal Obligation: Where required to comply with applicable laws, regulations, or court orders.

05Sharing & Disclosure

We share your data only in the following limited circumstances:

• Service Providers: Google Firebase (database & hosting), Google Analytics (website analytics), and Google Workspace (email). These providers are bound by data processing agreements and may not use your data for their own purposes.
• WhatsApp (Meta): When you choose to contact us via WhatsApp, your messages are processed by Meta under their own privacy policy.
• Legal Requirements: If required by law, court order, or governmental authority, we may disclose your information to the extent legally required.
• Business Transfer: In the unlikely event of a business sale or merger, personal data may be transferred to the acquiring party, subject to equivalent privacy protections.

We never sell, rent, or share your personal data with marketers, advertisers, or data brokers.

06Cookies & Tracking Technologies

We use the following types of cookies and local storage on our website:

Type	Purpose	Duration
Preference (Local Storage)	Remember dark/light mode setting	Persistent (until cleared)
Analytics (Google Analytics)	Understand how visitors use the site	Up to 2 years
Performance	Page load & session data	Session

You can control or disable cookies through your browser settings at any time. Disabling analytics cookies will not affect your ability to use the website. Our dark/light mode preference is stored in your browser's local storage and is not transmitted to any server.

07Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected:

• Consultation & Session Records: Retained for a minimum of 5 years after your last session, as required for health records and potential follow-up care.
• Newsletter Subscriptions: Retained until you unsubscribe. You can unsubscribe at any time by clicking the link in any newsletter email or contacting us directly.
• General Enquiries: Retained for 2 years from the date of last contact.
• Analytics Data: Google Analytics retains anonymised data per their own retention settings (typically 14 months for standard properties).
• Community Applications: Retained for 1 year if not accepted; indefinitely for accepted members (as part of the community directory).

When data is no longer required, we securely delete or anonymise it.

08Your Rights

Depending on your jurisdiction, you have some or all of the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to Restrict Processing: Ask us to limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Object: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at info@thesamarpan.co.in. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

09Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• HTTPS encryption on all website pages and form submissions.
• Google Firebase Firestore with security rules restricting access to authorised systems only.
• Limited internal access to personal data on a need-to-know basis.
• Regular review of our data handling practices and third-party service configurations.

While we take all reasonable precautions, no system is 100% secure. If you become aware of any security concern related to our website, please contact us immediately at info@thesamarpan.co.in.

10Children's Privacy

Our website and services are not directed to children under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will promptly delete such data.

Wellness consultations for minors are only conducted with the explicit written consent of a parent or guardian who must be present during the session.

11Third-Party Links

Our website may contain links to external websites including Instagram, YouTube, and WhatsApp. These links are provided for your convenience. We have no control over the content or privacy practices of these third-party sites and are not responsible for their policies. We encourage you to review the privacy policy of every website you visit.

Embedded content (such as Google Fonts, Tailwind CDN, and Lucide icons) may result in your browser making requests to third-party servers. This is standard for modern web pages and involves minimal data exchange (typically only your IP address and browser type).

12Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify newsletter subscribers via email for material changes.
• Post a notice on the website for a reasonable period.

We encourage you to review this page periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

13Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us through any of the following channels. We are committed to responding thoughtfully and promptly.