Privacy policy

1. Who runs this site and how to contact us

This website is operated by Therapy with Dr. Adya. If you have questions about how your information is handled or wish to exercise any of your rights regarding your personal data, you can contact us by email at adyavats13@gmail.com.

2. What information is collected when you book

When you schedule a session through our booking system, we collect the following details:

• Contact and session details: Your full name, email address, telephone number, selected session type, date, time, and timezone.
• Optional note: A brief note you may choose to provide about your session. Please do not include sensitive medical or clinical details.
• Payment identifiers: The transaction identifier, order identifier, and payment amount. Payment card details and UPI credentials are processed directly by our payment provider (Razorpay) and never reach or get stored by our server.
• Confirmation link token: When your booking is created, a secure link token is generated. Only a cryptographic hash (SHA-256) of this token is stored in our database.
• Technical logs and rate limiting: Standard server request logs are recorded by our website host. To prevent automated abuse of the booking and availability system, rate limiting uses a one-way hashed key rather than storing raw IP addresses.

3. Why your information is used

We use the information collected exclusively for the following purposes:

• To create, schedule, and administer your session booking.
• To verify and confirm your session fee payment.
• To add the scheduled appointment to the practitioner's working calendar.
• To respond to your direct enquiries and booking questions.

4. Practitioner calendar and event details

Once your payment is verified, an event entry is created in the practitioner's Google Calendar to reserve the time slot. The calendar entry includes the session title, start and end times, and your optional booking note in the event description so the practitioner can review it. Depending on the final calendar configuration, your email address may be included as a calendar attendee so you receive an automatic calendar invite.

5. Third-party service providers

We do not sell or rent your personal information. Information is shared only with the trusted service providers required to deliver this website and booking flow:

• Razorpay: Payment processing and transaction verification.
• Google: Calendar synchronization for confirmed appointments.
• Supabase: Database hosting and data storage.
• Vercel: Website hosting and infrastructure delivery.

6. Cookies and analytics

This website sets no analytics cookies, tracking beacons, or advertising cookies. When you initiate payment, the Razorpay Checkout modal may use its own necessary cookies or local storage in your browser while the payment window is open to process the transaction securely.

7. Data retention

Booking records and transaction references are retained for up to 7 years in accordance with standard legal and accounting compliance, after which records that are no longer required for accounting or legal obligations are removed or anonymized.

8. Your choices and data rights

You may request access to, correction of, or deletion of the personal data we hold about you. To submit a request, please contact us by email at adyavats13@gmail.com. We will respond to your request within 30 days.

9. Sensitive health information

Please do not include sensitive medical, psychiatric, or personal health details in the booking note field. The booking note is intended only for brief scheduling context. Any personal or therapeutic discussions should take place privately during your session.

10. Under-18s policy

Clients under 18 years of age require parental or guardian consent before commencing therapy sessions.