Privacy Policy

We collect only what a service like ours genuinely needs: the details you type into our forms (name, phone, optional email, your selected concerns and preferences), basic technical logs required to keep the service secure, and — if you pay us — the transaction record described under Payments below.

We deliberately avoid collecting sensitive clinical detail through this website. Booking an intro consultation never requires you to describe symptoms or history — the "what would you like help with?" box accepts as little as you care to share.

This website sets no third-party advertising trackers. If analytics are enabled in future, they will be disclosed here and gated behind consent.

Every form submits only after an explicit consent checkbox. Consent can be withdrawn at any time by writing to us; we will erase your data unless a legal duty requires retention.

Under the DPDP Act you may request access to, correction of, or erasure of your personal data, and may nominate a person to exercise these rights. Contact details are in the footer.

Data is stored on access-controlled infrastructure with encryption in transit and at rest. Access is limited to the small team that needs it to respond to you.

Matching and contact requests are retained only as long as needed to serve you, and are purged after 12 months.

Payments are processed by our payment gateway partner, an RBI-regulated payment aggregator. When you pay, you are handed to the gateway's own secure checkout and your card, UPI or netbanking credentials are entered there — not on our website and not into any form we control.

We never see, receive or store your full card number, CVV, UPI PIN, netbanking password or any other payment credential. Our gateway partner is a PCI-DSS compliant payment processor and handles that data under its own certification and its own privacy policy.

What comes back to us from a payment is limited to what we need to run the service: whether the payment succeeded or failed, the amount, the date, a transaction reference, and the name, email or phone you supplied so we can match the payment to your enquiry. We use that only to provide the service, to answer questions about a charge, and to meet tax and accounting duties.

Payment records are retained for the period Indian tax and accounting law requires of company books of account — currently eight years — which is longer than we keep enquiry data. Asking us to erase your personal data does not remove a financial record we are legally required to keep.

Please also read our Refund & Cancellation Policy before paying. Payments to Keptilon Wellness are non-refundable.

We do not sell personal data. We do not share form submissions with advertisers. We do not disclose that you sought counselling to family or employers.

The only third parties involved are the ones needed to operate the service: our payment gateway, described above; our hosting and email providers, which carry the data in transit and at rest; and nobody else. Each is used as a processor, to deliver the service you asked for, and none is permitted to use your data for its own marketing.

Beyond that, disclosures happen only where law requires them or where there is imminent risk to life — mirrored in our Confidentiality Policy.

For anything about your personal data — access, correction, erasure, withdrawing consent, or a complaint about how it has been handled — write to [email protected]. Please put "Privacy" in the subject line so it reaches the right person quickly.

You can also call +91 70484 80888 during Mon–Sat, 10 am – 8 pm IST.

We aim to acknowledge within one working day and to resolve within thirty days, as the DPDP Act contemplates. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

Complaints about a payment or a transaction can be sent to the same address with the payment reference, and are handled as described in our Refund & Cancellation Policy.