Digital Personal Data Protection Notice
Last Updated & Effective: September 2025 • Version 1.0_2025
1. Identity of the Data Fiduciary
This Digital Personal Data Protection Notice is issued by Shri Manik Ayurveda Hub (“we”, “our”, or “the Clinic”), having our principal centres located at Near Tower, Dandia Bazaar Main Road, Vadodara, Gujarat 390001, and VIP Road, Karelibaug, Vadodara, Gujarat 390018. We function as a Data Fiduciary as defined under Section 2(i) of the Digital Personal Data Protection Act, 2023 (DPDP Act).
2. Categories of Personal Data Collected
In accordance with the principle of Data Minimization, we only collect personal data strictly necessary for clinical scheduling and formulation delivery:
- Identity & Contact Information: Full name, email address, telephone/WhatsApp number.
- Dispensary Shipping Information: Delivery address, city, state, postal PIN code.
- Appointment Preferences: Selected centre (Dandia Bazaar or Karelibaug), chosen consultation slot, and voluntary non-sensitive symptom descriptors.
- Transactional Data: Razorpay order ID, payment status, transaction amounts (we do NOT store credit/debit card numbers or CVVs).
- Technical Identifiers: IP hash, browser user-agent, essential session tokens.
3. Purposes of Processing & Legal Grounds
Processing contact information and appointment preferences to facilitate consultations at our Vadodara centres.
Retention: Retained for active clinical service duration and standard healthcare consultation record periods.Processing name, shipping address, phone, and payment confirmation to pack and deliver Ayurvedic formulations.
Retention: Retained in accordance with Indian tax, GST, and commercial accounting requirements (minimum 8 years).Sending seasonal health advice and clinic announcements with unbundled affirmative consent and one-click unsubscribe.
Retention: Until consent is withdrawn by the Data Principal.Aggregated analytics to improve user experience without storing identifiable medical inquiries in analytics streams.
Retention: Configurable by user choice via the Cookie Consent Banner.4. Protection of Children's Personal Data
Under the DPDP Act 2023, personal data of individuals under 18 years of age is not knowingly processed through unrestricted self-service channels. Ayurvedic pediatric consultations require the verifiable consent and active involvement of a lawful parent or guardian.
5. Your Statutory Rights as a Data Principal
Under Chapter III of the DPDP Act 2023, you possess enforceable rights:
- Right to Access: The right to obtain a summary of your personal data processed and identities of processors.
- Right to Correction & Updating: The right to rectify misleading or incomplete personal details.
- Right to Erasure: The right to delete your customer profile and addresses (unless retention is required under statutory tax or medical consultation norms).
- Right to Grievance Redressal: The right to register formal complaints with our designated Grievance Officer.
- Right to Nominate: The right to nominate an individual to exercise rights in the event of death or incapacity.
6. Grievance Officer Contact Information
If you have any questions or complaints regarding the processing of your personal data, you may contact our designated Grievance Officer:
Official Email: grievance@shrimanik.com
Telephone: +91 93762 31432
Physical Address: Dandia Bazaar Centre, Vadodara, Gujarat 390001
Statutory Turnaround: Acknowledged within 24 business hours; resolved within 30 days as prescribed by law