Privacy Policy

1. Introduction and Scope

Catalyxcare Services ("Catalyx Care", "Company", "we", "us", "our") is committed to protecting the privacy of individuals who visit www.catalyxcare.com or interact with us via WhatsApp, phone, or our enquiry forms (collectively, the "Services"). This Privacy Policy explains what personal data we collect, why, how we use and share it, and the rights available to you under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law. By using the Services, you consent to the practices described in this Policy.

2. Who We Are (Data Fiduciary)

For the purposes of the DPDP Act, Catalyxcare Services is the "Data Fiduciary" responsible for your personal data collected through the Services.

Registered Office: 502, Harmony Residency, Plot 37, Karanjade, Navi Mumbai, Panvel, Raigad District, Maharashtra – 410206
Contact: catalyxcare@gmail.com

3. Personal Data We Collect

• Identity and contact data: full name, phone number, email address, preferred language.
• Health-related data (sensitive): the health condition or goal you select (e.g., Pregnancy, PCOS/PCOD, Preconception, Postpartum, Weight Management), and any details you voluntarily share in your notes or during WhatsApp/phone conversations, such as diagnosis, medications, symptoms, or lifestyle information. We collect this only with your explicit, informed consent.
• Communication data: your messages, call notes, and interactions with our care team and Experts.
• Payment data: transaction and billing details for paid packages, processed through our third-party payment gateway; we do not store complete card or bank account details on our own systems.
• Technical and usage data: IP address, browser/device type, and cookies collected when you visit the Website (see Section 11).

4. How We Collect Your Data

We collect personal data when you: (a) submit the enquiry/contact form on the Website; (b) message us or an Expert on WhatsApp; (c) speak with our care team or an Expert on a call; (d) make a payment for a paid package; or (e) browse the Website (via cookies).

5. Purpose of Processing

We use your personal data to:

• respond to your enquiry and schedule a consultation;
• connect you with the appropriate Expert(s) and deliver personalised care and coaching;
• facilitate doctor consultations and, where applicable, prescriptions;
• process payments for paid packages;
• send service updates, appointment reminders, and, with your consent, promotional communications;
• improve and personalise our Services; and
• comply with legal, regulatory, or law-enforcement requirements.

We do not use your health data for any purpose beyond delivering and improving the Services unless you separately consent.

6. Consent

Where required under the DPDP Act, we rely on your free, specific, informed, and unambiguous consent to process your personal data, particularly your health-related data. You may withdraw consent at any time by writing to catalyxcare@gmail.com. Withdrawal will not affect processing already carried out and may limit our ability to continue providing the Services to you.

7. Disclosure of Your Data

We may share your personal data with:

• empanelled Experts (doctors, dietitians, fitness coaches, mental health professionals), strictly to deliver the Services you have requested;
• payment gateway providers, to process payments;
• WhatsApp/Meta, as the platform used for messaging (also governed by WhatsApp's own privacy policy);
• IT, hosting, and email service providers who process data on our behalf under confidentiality obligations;
• regulators, courts, or law-enforcement authorities, where required by law; and
• a successor entity in the event of a merger, acquisition, or sale of business assets.

We do not sell your personal data to any third party.

8. Cross-Border Data Transfer

Some of our service providers (for example, WhatsApp/Meta, cloud email/hosting providers) may process data on servers located outside India. We take reasonable steps to ensure such transfers comply with the DPDP Act and will observe any country-specific restrictions notified by the Government of India from time to time.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy or to comply with legal or regulatory requirements, after which it is securely deleted or anonymised.

10. Data Security

We implement reasonable security practices and procedures, including access controls, restricted staff access, and secure handling of health data, in line with the DPDP Act and Section 43A of the Information Technology Act, 2000. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Cookies and Tracking Technologies

The Website may use cookies and similar technologies to remember your preferences and understand how visitors use the Website. You can disable cookies through your browser settings; some features of the Website may not function properly if you do so.

12. Children's Data

Our Services are intended for individuals aged 18 and above and are not directed at children. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected such data without verifiable parental/guardian consent, we will delete it promptly.

13. Your Rights

Under the DPDP Act, you have the right to:

• access a summary of the personal data we hold about you and how it is processed;
• correct, complete, or update your personal data;
• erase your personal data where it is no longer necessary for the purpose collected, subject to any legal retention requirement;
• withdraw your consent at any time (Section 6);
• nominate another individual to exercise these rights on your behalf in the event of your death or incapacity; and
• register a grievance regarding our handling of your data (Section 15).

To exercise any of these rights, write to catalyxcare@gmail.com. We will respond within a reasonable time and in accordance with applicable timelines under the DPDP Act and Rules.

14. Data Breach Notification

In the event of a personal data breach that may affect you, we will take prompt remedial action and notify you and the Data Protection Board of India as required under the DPDP Act and Rules.

15. Grievance Officer / Data Protection Contact

If you have a complaint about how we handle your personal data, please contact our Grievance Officer:

Name: Pramod Navnath Kamble
Email: support@catalyxcare.com
Address: 502, Harmony Residency, Plot 37, Karanjade, Navi Mumbai, Panvel, Raigad District, Maharashtra – 410206

We will acknowledge your complaint within 24 hours and aim to resolve it within 15 days, or such other period prescribed under applicable law. If unresolved, you may approach the Data Protection Board of India.

16. Third-Party Websites

The Website or our WhatsApp communications may contain links to third-party websites or services (for example, payment gateways or WhatsApp itself). This Policy does not apply to such third parties, and we encourage you to review their respective privacy policies.

17. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated version will be posted on the Website with a revised "Last Updated" date. Material changes affecting how we use your health data will be notified to you directly, where feasible.

18. Contact Us

Email: catalyxcare@gmail.com
WhatsApp: +91 77386 54164