Privacy Policy | Kushala Health

Please note. This document is a good-faith working draft prepared for the site. It has not been reviewed by a lawyer. Have it checked by counsel familiar with the Digital Personal Data Protection Act 2023 and the NMC Telemedicine Practice Guidelines before you rely on it.

Last updated: 2026-09-21

Who we are

Kushala Health Pvt Ltd (“Kushala Health”, “we”) provides physician-led online chronic care in India. For the purposes of the Digital Personal Data Protection Act 2023 we are the Data Fiduciary for the personal data described below. You can reach us at contact@kushalahealth.com.

What we collect

Identity and contact data: name, age, gender, phone number, email address.
Health data: medical history, symptoms, laboratory reports, current medicines, measurements such as weight, blood pressure and HbA1c, and the clinical notes made during your consultations.
Booking and payment data: appointment times and payment confirmation. Card and bank details are handled by our payment processor and are not stored by us.
Website data: standard analytics about page visits, collected through Google Analytics.

Why we use it

To provide clinical care to you, to issue prescriptions where appropriate, to allow your care coach to follow up, to maintain the medical records a registered practitioner is required to keep, to take payment, and to improve the website. We do not sell your data and we do not use your health information for advertising.

Your consent

We process your health data on the basis of the consent you give when you book and attend a consultation. You may withdraw consent at any time by writing to us, though we may be required to retain clinical records for the period prescribed by professional regulation even after you withdraw.

Who we share it with

Only where necessary: with the clinicians and care coaches involved in your care; with the laboratory or pharmacy you choose, at your direction; with technology providers who host our records under contract; and where the law requires disclosure. We do not share your health data with your employer, and where an employer sponsors a program they receive only aggregate, de-identified reporting.

Your rights

Under the DPDP Act 2023 you may ask us for a summary of the personal data we hold about you, ask us to correct or complete inaccurate data, ask us to erase data where we are not required to keep it, nominate another person to exercise your rights, and raise a grievance. Write to contact@kushalahealth.com and we will respond within a reasonable period.

Security and retention

We apply reasonable technical and organizational safeguards, including access control and encryption in transit, to protect your information. Clinical records are retained for the period required of a registered medical practitioner; other data is kept only as long as it is needed for the purpose it was collected for.

Cookies and analytics

This website uses Google Analytics to understand how visitors use the site. This collects usage data such as pages viewed and approximate location. It does not collect your health information. You can block these cookies in your browser settings.

Changes

We will update this page when our practices change, and the date at the top will reflect the most recent revision.