Privacy Policy

Last updated: April 2026  ·  Effective: May 1, 2026

Who We Are

SJ's Spiritual Valley is a women-only Ayurvedic beauty spa and wellness centre operated by Shruthi P Jain, located at #425, SJ's Spiritual Valley, Ground Floor, 50ft Road, Naadaprabhu Kempegowda Circle, Basaveshwara Nagara, Kommaghatta BDA Flat Road, Kengeri, Bangalore, Karnataka 560060, India. This Privacy Policy applies to our website at https://sjsspiritualvalley.com and all communications with us via WhatsApp, phone, or email.

For any privacy-related queries, contact us at: sjspiritualvalley@gmail.com or +91 9535394827.

What Personal Data We Collect

We collect only the personal data that is necessary to provide our services:

• Contact information: Your name, phone number, and email address when you message us via WhatsApp or email.
• Health information: Information about your health concerns, skin type, or body conditions that you voluntarily share with Shruthi to receive appropriate treatment recommendations. This is considered sensitive personal data under DPDPA 2023 and is treated with the highest level of care.
• Communication content: Messages, questions, or feedback you send us through any channel.
• Website analytics: Anonymous usage data (pages visited, time spent) if analytics are enabled. No personally identifiable information is collected through analytics.

We do not collect payment card information. All payments are handled in person at our premises.

How We Use Your Data (Purpose Limitation)

Under DPDPA 2023, we process your data only for the specific purposes for which it was collected:

• To respond to your enquiry and schedule appointments
• To provide personalised Ayurvedic therapy recommendations based on your dosha and health information
• To send appointment reminders or follow-up care information you have requested
• To improve our services based on feedback
• To comply with legal obligations under applicable Indian law

We will never use your data for advertising profiling, sell it to third parties, or use it for any purpose beyond what is listed above without your explicit consent.

Legal Basis for Processing (Consent)

Under DPDPA 2023, we process your personal data based on:

• Your consent: When you message us on WhatsApp or email us, you are giving consent for us to respond and engage with your enquiry.
• Legitimate interest: To provide the healthcare/wellness service you have requested from us.
• Legal obligation: When required by Indian law or court order.

You have the right to withdraw consent at any time by sending a message to sjspiritualvalley@gmail.com.

Data Sharing — We Do Not Sell Your Data

We do not sell, rent, trade, or share your personal data with any third party for commercial purposes. Your data is shared only in these limited circumstances:

• WhatsApp (Meta): When you contact us on WhatsApp, your messages are processed by WhatsApp/Meta under their own privacy policy. We recommend reviewing WhatsApp's privacy policy at whatsapp.com/legal.
• Google: Our website uses Google Fonts and Google Maps (contact page only). Google's privacy policy applies to these services.
• Legal compliance: If required by Indian law, court order, or government authority.

Data Retention

We retain your personal data only as long as necessary:

• WhatsApp messages: Retained on WhatsApp's servers per their policy. Our chat history is deleted when no longer needed for service delivery, typically within 2 years of your last interaction.
• Email correspondence: Retained for up to 3 years for service continuity and legal compliance, then deleted.
• Health information shared for therapy sessions: Retained only as long as you are an active client. Deleted within 6 months of your last appointment.

You may request deletion of your data at any time (see Your Rights below).

Cookies and Tracking

Our website uses session cookies that are strictly necessary for the website to function (for example, to maintain secure sessions in the admin area). These are temporary and deleted when you close your browser.

We also use the following third-party services that may set cookies or make requests to their servers when you visit our site:

• Google Fonts — We load fonts from Google's servers (fonts.googleapis.com). Google may log font requests per their privacy policy. No personal data is shared by us.
• Google Maps — Our contact page embeds a Google Maps iframe which loads from Google's servers. Google's privacy policy governs data collected via this embed.
• Google Analytics / Google Tag Manager — If configured, we use Google Analytics 4 to understand how visitors use our site (pages visited, session duration, general geographic region). This data is anonymised and does not identify you personally. You can opt out using Google's opt-out browser add-on.

We do not use advertising cookies, retargeting pixels, or third-party marketing trackers to profile you across the web.

If we enable analytics in future, we will update this policy and only use anonymised, aggregated data.

Your Rights Under DPDPA 2023

As a data principal under India's Digital Personal Data Protection Act 2023, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data (subject to legal retention obligations).
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (details below).
• Right to Nominate: Nominate another individual to exercise your rights in case of death or incapacity.

To exercise any of these rights, email us at sjspiritualvalley@gmail.com with the subject line "Data Rights Request". We will respond within 30 days as required under DPDPA 2023.

Data Security

We implement appropriate technical and organisational measures to protect your personal data including:

• HTTPS encryption on all web communications
• Password-protected admin area with secure session management
• Limited access to personal data (only Shruthi P Jain has access)
• No storage of payment information on our systems

In the event of a data breach that affects your personal data, we will notify you within 72 hours as required by applicable Indian law.

Children's Privacy

Our services are intended for women aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected data from a minor, please contact us immediately for deletion.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised date. If changes are significant, we will notify active clients via WhatsApp or email. Your continued use of our services after any change constitutes acceptance of the updated policy.

Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Bangalore, Karnataka, India.