Privacy Policy

At CSTwithNarayani, we are committed to protecting your privacy and ensuring the security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (https://cstwithnarayani.com), book services, or receive Craniosacral Therapy from Ms. Narayani Mhetre.

1. Information We Collect

1.1 Personal Identification Information

We collect the following personal details when you book a session or contact us:

• Name: Full name as provided during booking
• Contact Information: Email address, phone number, and WhatsApp number
• Age and Date of Birth: For appropriate treatment planning
• Gender: For personalized care
• Address: For home visits and shipping (if applicable)
• Profession: To understand lifestyle factors affecting health

1.2 Health and Medical Information

As part of the Integrated CST Treatment Record, we collect:

• Current Issues: Primary health concerns and symptoms
• Major Life Events: Significant events that may impact health
• Birth Delivery Details: Birth history and complications (for children)
• Health Metrics: Overall health, energy level, pain intensity, sleep quality, stress level, exercise habits
• Medical History: Previous treatments, surgeries, medications, and conditions
• Client Resources: Personal strengths and support systems
• Impression of Client: Therapist's professional observations

1.3 Session and Treatment Information

• Session dates and times
• Holds and techniques used during treatment
• Therapist observations and feelings during session
• Client responses after each session
• Therapist reflections and recommendations
• Progress tracking across multiple sessions

1.4 Payment and Transaction Information

• Billing name and address
• Payment method information (processed securely through Razorpay)
• Transaction ID and payment status
• Invoice and receipt details

Note: We do not store complete credit/debit card details. Payment information is handled securely by our payment gateway provider, Razorpay.

1.5 Technical and Usage Information

When you visit our website, we automatically collect:

• IP address and geographic location
• Browser type and version
• Device type (mobile, tablet, desktop)
• Operating system
• Pages visited and time spent on each page
• Referring website or search engine
• Date and time of visits
• Cookies and similar tracking technologies (see Cookie Policy section)

1.6 Communication Records

• Emails sent to and received from connect@cstwithnarayani.com
• WhatsApp message history related to bookings and inquiries
• Phone call records (dates and general topics, not recordings)
• Form submissions through our website

2. How We Collect Information

2.1 Direct Collection

• Booking Forms: When you book a session online
• Treatment Forms: Integrated CST Treatment Record completed before/during sessions
• Contact Forms: Inquiries submitted through website
• Email Communications: Direct correspondence with us
• Phone/WhatsApp: Conversations for booking or support

2.2 Automatic Collection

• Website Analytics: Google Analytics or similar tools
• Cookies: Small data files stored on your device
• Log Files: Server logs recording website activity

2.3 Third-Party Sources

• Payment Gateway: Transaction confirmation from Razorpay
• Referral Partners: Information from referring doctors or wellness centers (with your consent)

3. How We Use Your Information

3.1 Primary Uses

3.2 Secondary Uses

• Service Improvement: Analyzing treatment outcomes to enhance CST techniques and client care
• Research and Education: Using anonymized data for professional development and educational purposes
• Quality Assurance: Reviewing treatment records to maintain high standards
• Marketing: Sending newsletters, promotions, and wellness tips (with opt-in consent only)
• Legal Compliance: Maintaining records as required by professional and legal regulations

4. Legal Basis for Processing (India)

We process your personal data under the following legal grounds:

• Consent: You have given explicit consent for us to process your health information for treatment purposes
• Contract Performance: Processing is necessary to fulfill our service agreement with you
• Legal Obligation: We must retain certain records to comply with professional healthcare regulations
• Legitimate Interests: Improving our services and ensuring quality care, provided your rights are not overridden

5. Information Sharing and Disclosure

5.1 We DO NOT Sell Your Data

5.2 Limited Sharing Circumstances

We may share your information only in these specific situations:

5.2.1 Service Providers

• Payment Gateway (Razorpay): To process payments securely
• Website Hosting: To maintain our online presence
• Email Services: To send confirmations and communications
• Analytics Providers: To understand website usage (anonymized data only)

Protection: All service providers are bound by strict confidentiality agreements and data protection requirements.

5.2.2 Healthcare Collaborations

• Partner Hospitals: Dr. Mulay Super Speciality Hospital (only for patients receiving treatment there)
• Referring Physicians: With your explicit written consent, we may share treatment progress
• Wellness Centers: Partner centers in Sangli and Satara (limited information for scheduling only)

5.2.3 Legal Requirements

We may disclose information if required by:

• Court orders or legal processes
• Government authorities as mandated by Indian law
• Protection of our legal rights or safety of individuals
• Compliance with professional healthcare regulations

5.2.4 With Your Consent

• Testimonials: Only shared publicly with your explicit written consent
• Case Studies: Anonymized and used for educational purposes with permission
• Referrals: Sharing information with other practitioners you choose

6. Data Security Measures

6.1 Technical Safeguards

• Encryption: SSL/TLS encryption for data transmitted via website
• Secure Servers: Treatment records stored on password-protected, encrypted systems
• Access Controls: Multi-factor authentication for sensitive systems
• Regular Backups: Secure, encrypted backups to prevent data loss
• Firewall Protection: Network security to prevent unauthorized access

6.2 Administrative Safeguards

• Limited Access: Only Ms. Narayani Mhetre and essential staff have access to health records
• Confidentiality Agreements: All staff sign comprehensive non-disclosure agreements
• Training: Regular privacy and security training for personnel
• Data Minimization: We collect only necessary information

6.3 Physical Safeguards

• Physical treatment forms stored in locked cabinets
• Secure treatment rooms ensuring client privacy
• Disposal of records through secure shredding when no longer needed

7. Data Retention

7.1 Retention Periods

7.2 Secure Disposal

After retention periods expire:

• Digital records are permanently deleted from all systems and backups
• Physical documents are securely shredded
• Deletion is documented and verified

8. Your Privacy Rights

Under Indian data protection laws, you have the following rights:

8.1 Right to Access

• Request a copy of all personal data we hold about you
• Receive information about how your data is processed
• First copy provided free of charge
• Response within 30 days of request

8.2 Right to Correction

• Request correction of inaccurate or incomplete data
• Update your personal details at any time
• We will verify corrections before updating records

8.3 Right to Deletion

• Request deletion of your personal data (subject to legal retention requirements)
• Treatment records may need to be retained for professional standards
• Marketing data can be deleted immediately upon request

8.4 Right to Data Portability

• Receive your data in a structured, commonly used format
• Transfer data to another healthcare provider
• Available in PDF or digital format

8.5 Right to Withdraw Consent

• Withdraw consent for marketing communications at any time
• Opt out of non-essential data processing
• Does not affect lawfulness of processing before withdrawal

8.6 Right to Object

• Object to processing of your data for specific purposes
• Request restriction of certain processing activities

8.7 How to Exercise Your Rights

To exercise any of these rights:

1. Email your request to connect@cstwithnarayani.com
2. Include your full name, contact information, and specific request
3. Provide identification verification for security
4. We will respond within 30 days

9. Cookie Policy

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us provide a better user experience.

9.2 Types of Cookies We Use

9.3 Managing Cookies

• Accept or reject cookies via our cookie banner
• Manage preferences through browser settings
• Note: Disabling essential cookies may affect website functionality

10. Third-Party Links and Services

Our website may contain links to third-party websites or services:

• Social Media: Links to Instagram, YouTube, LinkedIn
• Payment Gateway: Razorpay for transaction processing
• Maps: Google Maps for location information

11. Children's Privacy

• We provide CST services to children with parental/guardian consent
• Parents/guardians complete all forms and provide consent on behalf of minors
• We do not knowingly collect data directly from children under 18
• Enhanced privacy protections apply to pediatric treatment records

12. International Data Transfers

• We primarily operate within India and store data on Indian servers
• Some service providers (e.g., cloud hosting) may have servers outside India
• All international transfers comply with applicable data protection standards
• Adequate safeguards are in place to protect your data

13. Data Breach Notification

In the unlikely event of a data breach:

• We will investigate and assess the breach immediately
• Notify affected individuals within 72 hours (if required by law)
• Inform relevant authorities as mandated
• Provide information about the breach and steps taken
• Offer guidance on protective measures you can take

14. Marketing Communications

14.1 Opt-In Requirement

• We send marketing emails only to those who have opted in
• Opt-in options available during booking or via website
• Separate consent required for different communication types

14.2 Content of Marketing Communications

• Wellness tips and health information
• New service announcements
• Promotional offers and discounts
• Educational content about CST
• Event and workshop notifications

14.3 Opt-Out Process

• Click "Unsubscribe" link in any marketing email
• Email connect@cstwithnarayani.com with opt-out request
• WhatsApp +91 99708 62235 to update preferences
• Changes processed within 48 hours

15. Updates to Privacy Policy

• We may update this policy to reflect changes in practices or legal requirements
• Material changes will be communicated via email to registered clients
• "Last Updated" date at top of policy reflects most recent revision
• Continued use of services after updates constitutes acceptance
• Review this policy periodically for your awareness

16. Contact Information and Complaints

16.1 Privacy Officer

Ms. Narayani Mhetre serves as our Privacy Officer for all data protection matters.

16.2 Contact for Privacy Concerns

16.3 Filing a Complaint

If you believe your privacy rights have been violated:

1. Contact us directly to resolve the issue informally
2. If unresolved, escalate to Ms. Narayani Mhetre (Privacy Officer)
3. You have the right to file a complaint with Indian data protection authorities

17. Professional Standards

As a member of the Pacific Association of Craniosacral Therapists (PACT), Ms. Narayani Mhetre adheres to:

• Professional codes of conduct regarding client confidentiality
• Ethical guidelines for healthcare information management
• Best practices in data protection and privacy
• Continuing education on privacy and security standards

18. Consent Documentation

Your consent to this Privacy Policy is documented through:

• Checkbox acceptance during online booking
• Signature on the Integrated CST Treatment Record form
• Acknowledgment statement: "Client information is confidential but will be retained and utilized by Ms. Narayani Mhetre for improving CST treatments and cannot be used or duplicated by anyone else"
• Records of consent maintained securely

19. Testimonial Policy

Regarding client testimonials featured on our website:

• All testimonials shared with explicit written consent
• Names changed or hidden to protect privacy (as indicated)
• Clients can request removal of testimonials at any time
• No testimonials used for medical claims or guaranteed outcomes
• Testimonial usage complies with governmental and professional board regulations

Thank you for trusting CSTwithNarayani with your personal information and your wellness journey.