Privacy Policy

1. About This Policy

Bare Recovery Studio (“we,” “us,” or “our”) operates the recovery studio located at 3rd Floor, Raichandani Orion, NH44, Bashirabad, Kompally, Secunderabad, Telangana 500067, India, and the website at barerecovery.studio.

This Privacy Policy describes how we collect, use, store, and disclose personal information. It is governed by the Information Technology Act, 2000, the IT (Amendment) Act, 2008, the IT (SPDI) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Information We Collect

We collect the following categories of personal information:

• Identity & Contact Information: Your name, mobile number, and email address when you contact us or make a booking enquiry via WhatsApp, email, or our website contact form.
• Health & Medical Information: Health-related disclosures you voluntarily provide before or during your first session (e.g., pre-existing conditions, medications) for your safety. This is classified as Sensitive Personal Data or Information (SPDI) under the IT Rules, 2011.
• Usage Data: Anonymous analytics data including device type, browser, pages visited, and session duration when you use our website. This data cannot be used to personally identify you.
• Communication Records: Messages, enquiries, and feedback you send us via WhatsApp, email, or Instagram.

3. How We Use Your Information

We use your personal information only for the following lawful purposes:

• To respond to your booking enquiries and service-related communications.
• To send booking confirmations and session reminders via WhatsApp or SMS.
• To ensure your health and safety during recovery sessions.
• To comply with applicable legal and regulatory obligations under Indian law.
• To improve the quality and scope of our services.
• To send you promotional communications about services or offers — only with your express consent.

4. Sharing of Personal Information

We do not sell, rent, or trade your personal information to any third party for commercial or marketing purposes.

We may share your information only in these limited circumstances:

• With technology service providers (e.g., WhatsApp/Meta, Google Analytics) who assist us in operating our business, under strict confidentiality obligations.
• When required by applicable Indian law, court order, or a request from a government authority.
• In the event of a merger, acquisition, or transfer of our business assets, your data may be transferred — with prior notice to you.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Health disclosures are retained for a minimum of 3 years from your last session. Contact information is retained until you request deletion or withdraw consent.

6. Your Rights Under Indian Law

Under the DPDP Act 2023 and IT Rules 2011, you have the right to:

• Access a summary of your personal data held by us.
• Correct or update inaccurate personal information.
• Request the erasure of your personal data (subject to applicable legal retention obligations).
• Withdraw consent for processing at any time (this does not affect lawfulness of prior processing).
• Nominate a representative to exercise these rights on your behalf.

To exercise any of these rights, contact our Grievance Officer (Section 8 below).

7. Security of Personal Data

We implement reasonable security practices and procedures as required under Rule 8 of the IT (SPDI) Rules, 2011, including access controls, encrypted communication channels, and limited access to personal data. However, no method of data transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Grievance Officer

As required under Rule 5(9) of the IT (SPDI) Rules, 2011, we have designated a Grievance Officer for handling complaints and questions related to your personal data:

9. Governing Law & Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Hyderabad, Telangana.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The revised policy will be posted on this page with an updated “Last updated” date. Continued use of our services after such changes constitutes your acceptance of the revised policy.