PRIVACY POLICY

Effective from: 15 August 2026  |  Last updated: 15 August 2026 (Version 01.150826)

This Privacy Policy (“Policy”) governs the manner in which we, M/s. NutriClinics Private Limited, a company incorporated under the provisions of the Companies Act, 2013 (“NutriClinics”, “we”, “us” or “our”), collect, store, use, process, disclose, transfer, retain and erase information relating to you in the course of your use of the NutriClinics website at https://www.nutriclinicsglobal.com (currently marked as the “Platform”) and of the nutrition consultation, allied and related patient services made available thereon (the “Patient Services/Services”).

We process Personal Data in accordance with applicable Indian law, and this Policy constitutes an electronic record which does not require any physical or digital signature. By registering on the Platform, procuring or attending a consultation, accepting any consent request presented to you, or otherwise furnishing information to us, you signify that you have read, understood and consented to the Processing described herein. If you do not agree with any part hereof, you must refrain from using the Platform. Capitalised terms not defined herein bear the meanings ascribed to them in our Terms and Conditions.

1. TERMS

1. “Personal Data” means any data about an individual who is identifiable by or in relation to such data, including data which, though not identifying you in isolation, is capable of identifying you when read with other information available to us. “Processing”, “Data Principal”, “Data Fiduciary” and “Data Processor” bear the meanings ascribed to them under the Digital Personal Data Protection Act, 2023 and the rules framed thereunder (the “DPDP Act”), and NutriClinics acts as the Data Fiduciary in respect of the Personal Data governed by this Policy.
2. “Sensitive Personal Data or Information” bears the meaning ascribed under Rule 3 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “SPDI Rules”), and includes passwords, financial and payment instrument details, information relating to your physical, physiological and mental health condition, your medical records and history, and biometric information.
3. “Health Data” means Personal Data relating to your physical or mental health, nutritional status, clinical history and the Services rendered to you, and includes the whole of the Consultation Record.
4. “Consultation Record” means your pre-consultation health assessment, the documents furnished by you, the clinical notes recorded by the Consultant, the Diet Plan and any revision thereto, follow-up entries, and messages exchanged with the Consultant on the Platform. “Diet Plan” means the nutrition plan prepared by a Consultant and transmitted to you under that Consultant’s digital signature, affixed in confirmation that the plan is complete, accurate and reflective of their professional clinical assessment.
5. “You” and “Your” mean the patient, being the individual to whom the Patient Services are rendered and in respect of whom Personal Data is processed hereunder, and shall, where the context so admits, include a Caregiver, parent or lawful guardian acting on such patient's behalf. In any provision expressed to apply to a Consultant, the said expressions shall mean that Consultant.
6. “Patient Services” or “Services” mean the pre-consultation health assessment, nutrition consultation, diet planning, follow-up and allied services rendered to you through the Platform by the Consultant selected by you, together with the scheduling, hosting, record-keeping, payment facilitation and support functions made available by NutriClinics in relation thereto. The Patient Services constitute nutrition counselling and guidance and are rendered by the Consultant, not by NutriClinics.
7. “Consultant” means an independent consultant, independent nutritionist, licensed practitioners, dietitian or allied practitioner listed on the Platform, and may include an independent junior nutritionist or consultant assigned by us or by your Consultant to conduct your pre-consultation assessment, to assist in your care, and to prepare work for Consultant's review and your service. “Caregiver” means a person authorised by you to register, book, attend or receive the Services on your behalf.

2. CATEGORIES OF DATA COLLECTED

1. Identification, contact and account data: name, date of birth, gender, email address, mobile number, City and State of residence, current physical location voluntarily declared during a teleconsultation, billing address, Caregiver, parent, legal guardian and emergency contact and relationship to you, identity, age and authority-verification details where required, account identifier, password in encrypted form, one-time passwords, login and session records, authentication records and communication preferences.
2. Health Data: presenting concern and goals; height, weight, body composition and other measurements; medical and clinical history; subsisting diagnoses; medications and supplements; allergies and intolerances; dietary recall and meal patterns; symptoms; sleep, activity and lifestyle information; menstrual, fertility, pregnancy and lactation status where disclosed; paediatric growth and feeding information where the Services are availed for a child under supervision; and clinical documents uploaded by you or your Caregiver.
3. Consultation, Medical and Clinical Records, Nutritional Assessments, Care Plans and Diet Plans: pre-consultation questionnaires and health assessments; medical, clinical, dietary and nutritional histories; referral letters, prescriptions, laboratory and diagnostic reports, discharge summaries and other clinical documents uploaded by you or your Caregiver; appointment and consultation details; notes, observations, evaluations, nutritional diagnoses, recommendations and session summaries recorded by the Consultant; anthropometric and dietary assessments; treatment objectives and nutritional goals; Diet Plans, meal plans, supplement recommendations and revisions thereto; follow-up, progress, adherence and outcome records; referrals; communications, messages, images and files exchanged in connection with your care; consent and acknowledgement records; and relevant practitioner details, timestamps and digital signatures. Where enabled and separately notified to you, this may also include consultation recordings or transcripts. This may also include summaries, trends, insights, flags, recommendations and other outputs derived or generated from the foregoing information through the Platform or authorised technological tools, including AI-assisted tools, where implemented and notified to you.
4. Transaction data: appointment history, Consultant selected, appointment status, amounts paid, transaction references, invoices and refund records. We do not directly collect or store your complete card number, card verification value (CVV), card PIN, UPI PIN, UPI credentials, net-banking credentials, digital-wallet credentials, Pay Later account credentials or other sensitive payment authentication information. Payments will be processed through relevant third-party payment gateway of payment aggregator which may support the options. Such information is provided directly by you to the relevant third-party payment gateway or payment aggregator, which may collect, process, transmit and retain payment, transaction, device, authentication, fraud-prevention and related information in accordance with its applicable terms, privacy policy and legal obligations. By initiating a payment, you acknowledge that you have read and agreed to our Payment and Refund Policy, which is incorporated into this Privacy Policy by reference.
5. Technical and communications data: Internet Protocol address, device and browser type, platform version, device, application and session identifiers, date and time of access, diagnostic, security and crash logs, referring URL, records of pages, searches and features accessed, clicks and interactions, cookie and analytics identifiers, correspondence with our support personnel, chat transcripts, grievance records, feedback, ratings and reviews.
6. Consultant data: qualifications, registrations and certifications, professional profile and photograph, fees and availability, identity documents, Permanent Account Number and other tax identification or compliance details where applicable, bank particulars for remittance, and the record of consultations conducted, ratings received and complaints, if any. No financial, tax, banking or identity particular furnished by a Consultant, nor any other particular in respect of which the Consultant has requested non-publication, shall be displayed upon the Platform or disclosed to any patient or third party, save where required by law.
7. Connected services and integrations data: where enabled and authorised by you, connected Google or other third-party account identifiers, authentication tokens, calendar availability, appointment or event details, and other data specifically authorised by you to provide the selected integration. This may include calendars and event data required to display and synchronise such information within the Platform and to create or modify calendars and events in the connected account. We do not receive or store your connected-account password.
8. We do not knowingly collect precise GPS or satellite-derived location data from your device or procure Personal Data from data brokers, data aggregators or list vendors. This does not include the City, State or physical location voluntarily declared by you, or an approximate location derived from your Internet Protocol address for security and technical purposes.

3. SOURCES OF COLLECTION

1. Directly from you, at registration, on completion of the pre-consultation assessment, during a consultation, on upload of any document, at the time of payment, when you provide, manage or withdraw any consent, permission, authorisation or acknowledgement, and in any correspondence with us.
2. From your Caregiver, or any person who registers, books or attends on your behalf, who thereby represents that they are duly authorised by you and have apprised you of this Policy, upon which representation we are entitled to act without independent enquiry. However, we may require evidence of the person’s identity and authority before granting access to or disclosing Health Data, and shall do so wherever required by law, including in relation to children and persons represented by a lawful guardian.
3. From our personnel, where an account is created for you on an assisted basis, in which event your consent to the Processing of your Health Data for clinical nutrition services under the DPDP Act is recorded at registration and this Policy is made available to you prior to your first consultation.
4. From the Consultant, being the assessments, clinical notes, Diet Plans and follow-up entries generated in rendering the Services to you; automatically from your device, as described in this Policy; from our service providers, including payment status, message-delivery status, and technical, error and security logs; and from connected Google or other third-party accounts, where the relevant integration is enabled and authorised.

4. CONSENT AND ITS WITHDRAWAL

1. Processing hereunder is founded upon your consent, which is sought at or prior to collection, accompanied by a notice in clear and plain language, confined to the purpose specified, and capable of withdrawal by writing to us. Consent is separately captured and retained in the systems of the Platform at each of the following points: upon registration, being acceptance of the Terms, this Policy and the accompanying data consent; upon registration effected by our personnel on an assisted basis, being your confirmation that you have read this Policy and consent to the Processing of your Health Data for clinical nutrition services under the DPDP Act; upon booking and payment; and prior to each video consultation, being your consent to a teleconsultation, your acknowledgement that the same constitutes nutrition guidance and not a medical prescription, and your separate consent to the session being conducted over video conferencing.
2. Where a Caregiver joins a session, the Caregiver is required to confirm their authority to attend on your behalf, to furnish the acknowledgements aforesaid, and to undertake to hold in confidence the health information disclosed during the session. Prior to each session the Consultant is required to undertake that your health information shall be kept confidential and used solely for the purpose of that consultation, and upon issuing a Diet Plan the Consultant affixes their digital signature in confirmation of the matters set out in Clause 1.
3. Consent to promotional communications, to the publication of a testimonial, to the deployment of any AI-assisted or automated tool upon your Health Data or Consultation Record, and to any other optional feature is sought separately in each case, is optional, and the withholding thereof shall not affect your ability to avail the Services.
4. You may withdraw consent at any time, wholly or in respect of a specified purpose, by writing to support@nutriclinicsglobal.com. Withdrawal shall be as easy as the giving of consent, shall operate prospectively, and shall not affect the legality of Processing already carried out. Where the consent withdrawn is necessary for the rendering of the Services, your account shall be suspended and the Services discontinued in whole or in part, of which you shall be notified, and the Services may be resumed only upon fresh consent. Erasure and retention of your Personal Data upon such withdrawal are governed by Clause 11(c).
5. Notwithstanding the foregoing, we may process Personal Data without consent to the extent permitted under the DPDP Act, including for compliance with any judgment, decree, order or legal obligation, and for responding to a medical emergency involving a threat to your life or immediate health.

5. PURPOSES OF PROCESSING

1. General: to register and authenticate you and administer your account; to schedule, confirm, reschedule, cancel and host consultations; to despatch confirmations, reminders, session summaries and other service communications; to process payments and effect refunds; to respond to queries and redress grievances; to secure the Platform and to detect and investigate fraud, impersonation and misuse; and to comply with applicable law and to establish, exercise or defend any legal claim.
2. In relation to patients: to enable the Consultant selected by you to review your assessment and clinical history, conduct the consultation, and prepare, digitally sign and transmit the Diet Plan; to maintain the Consultation Record so that subsequent advice is informed by that which precedes it; and to furnish your records to you or, upon your written request, to any practitioner nominated by you.
3. In relation to Consultants: to verify qualifications, registration and representations made to us; to onboard and list you; to route and administer bookings; to compute and remit fees and comply with taxation obligations; to monitor service quality; and to investigate complaints.
4. Analytics and marketing: to evaluate the use, performance and reliability of the Platform and to study nutrition outcomes, in each case upon de-identified or aggregated data from which no individual is identifiable; and to communicate new services, features and offers, solely where you have opted in, such communications never being founded upon your Health Data, diagnosis, measurements or the content of any consultation.

6. TELECONSULTATION AND VIDEO CONFERENCING

1. The Services are rendered remotely by video conferencing, the Consultant and you not being present at the same location. The Services constitute nutrition counselling and guidance and do not constitute medical diagnosis, a medical prescription, treatment or emergency care.
2. You acknowledge the risks inherent in remote delivery, including insufficiency of audio or video quality, interruption of the connection, compromise of a security protocol notwithstanding the safeguards deployed, and the circumstance that the absence of physical examination renders the information available to the Consultant less complete than in person. Consent to teleconsultation may be withdrawn at any time in writing, without prejudice to any consultation already rendered.
3. Sessions shall not be recorded save where you have been informed at the commencement thereof and have consented, which may be declined without consequence. You shall not record, screenshot, transcribe or otherwise capture any session without the prior express consent of the Consultant and NutriClinics.
4. Where a Caregiver joins through a shared link without authenticating to the Platform, such access is confined to the session for which the link is issued, the link is of limited validity, and the Caregiver must furnish the confirmations set out in this policy. You are responsible for the persons with whom such a link is shared.
5. You may be required to confirm your identity and the place from which you are joining, so that the Consultant knows whom they are advising and assistance may be directed to you should you become unwell. A consultation is only as private as the location from which it is taken.

7. DISCLOSURE AND TRANSFER OF DATA

1. To your Consultant. Your assessment, uploaded documents and prior Consultation Records are made available to the Consultant selected by you and to any Consultant to whom your care is transferred with your knowledge. Every Consultant is bound, by contract and by the confidentiality undertaking furnished prior to each session, to maintain confidentiality, to use your data solely for that consultation, to store it only upon systems approved by us, and to refrain from any independent use, disclosure or publication.
2. To Data Processors. We engage providers of cloud hosting, video conferencing, messaging delivery, support tooling, analytics, security services and payment processing, and, if and where any AI-assisted tool is deployed, the provider of such tool, each under a written contract restricting Processing to our documented instructions, prohibiting use for its own purposes, imposing confidentiality and security obligations no less onerous than those undertaken by us, restricting onward sub-processing, and requiring deletion or return upon termination.
3. To affiliates, where the Services are delivered through any holding company, subsidiary or affiliate, upon the same terms as apply to a Data Processor and solely for a purpose enumerated herein, Health Data not being shared within the group for marketing or cross-selling; and to governmental and law enforcement authorities, pursuant to any lawful request, summons, subpoena, direction or order of any court, tribunal, statutory or regulatory authority, and otherwise as required under any law for the time being in force.
4. In connection with a business transfer, being any merger, amalgamation, acquisition, restructuring or insolvency, subject to the successor being bound by this Policy or one affording protection no less than that afforded hereunder; and upon your instruction, to any person you specifically authorise, including where your Consultation Record is to be transmitted to a practitioner nominated by you.

8. INTERNATIONAL ACCESS, HOSTING AND TRANSFERS

1. Personal Data is hosted primarily upon infrastructure situated in India. Certain Data Processors may, in the course of providing hosting, video conferencing, communication, support or security services, or, if and where any AI-assisted tool is deployed, in the course of providing such tool, store, replicate or access data from outside India, and by using the Platform you consent thereto, in each case subject to the safeguards set out below.
2. Every transfer of Personal Data outside India shall be effected in compliance with the DPDP Act, including any restriction notified by the Central Government in respect of any country or territory, and under contractual safeguards equivalent to those applicable to us, obliging the recipient to confine Processing to our documented instructions, to maintain confidentiality and security, to refrain from onward transfer without our written consent, and to make the data available to us and to the Indian authorities where so required under Indian law.
3. Where you access the Platform from outside India, your Personal Data shall be transferred to and processed in India, and the protections afforded hereunder shall continue to apply irrespective of your location. The Services are configured for and offered in India, and no representation is made that they comply with the requirements of any other jurisdiction.
4. We do not presently integrate with, or transmit Personal Data to, the systems of any hospital, insurer, employer or other institutional third party. Should any such integration be introduced, it shall be governed by a written agreement, notified to you in advance, and effected only upon such consent as the law requires.

9. RESTRICTIONS UPON USE

1. We shall not sell, rent, licence or trade your Personal Data, nor disclose it to advertising networks, data brokers, data exchanges or marketing companies, nor share it for cross-context behavioural advertising.
2. We shall not use your Health Data, nor permit any third party to use Health Data obtained from us, to select, target, personalise or measure any advertisement, and shall not construct or share any audience segment derived from a health condition, diagnosis, symptom or measurement.
3. We shall not use your Personal Data to train, fine-tune or improve any large language model or comparable artificial intelligence system operated by a third party, and our vendor contracts prohibit the same. Should any such system be deployed by us, no Personal Data shall be used to train or fine-tune it save in de-identified or aggregated form from which no individual is identifiable, or upon your separate and express consent. Any automated tool deployed operates in aid of, and never in substitution for, human clinical judgment, and no decision producing a legal effect concerning you, or otherwise significantly affecting you, shall be taken solely on the basis of automated processing.

10. COOKIES, MESSAGING AND COMMUNICATIONS

1. We deploy cookies, pixels, tags and comparable technologies which are strictly necessary to authenticate you, maintain your session and protect against fraudulent access, and, subject to your acceptance through the consent banner, technologies which measure use and performance. Acceptance may be withdrawn through the cookie preferences facility, and cookies already placed may be removed through your browser.
2. No advertising or analytics technology is deployed upon any page or screen upon which Health Data is collected, displayed or discussed, including the health assessment, the consultation interface and the records section of your account.
3. Confirmations, reminders, cancellation notices, session summaries, payment intimations, security alerts and notices of amendment hereto may be sent by email, SMS, WhatsApp, in-app notification or other electronic means using the contact details registered upon your account. These constitute service communications, are integral to the Services, are despatched irrespective of your marketing preferences and may not be opted out of while your account subsists. You shall accordingly maintain a valid email address and/or mobile number upon your account.
4. Promotional communications by email, SMS, WhatsApp or other electronic means are despatched solely where you have opted in and may be discontinued, of any single channel, including WhatsApp, at any time, by using the unsubscribe facility or by replying STOP, where supported or writing to us. Message and data rates may apply. Your email address, mobile number and the message and delivery details necessary for transmission shall be shared only with the communication providers effecting such transmission on our behalf, and not for those providers' own marketing purposes.
5. Electronic mail and messaging are not secure channels and may be intercepted, misdirected or read by any person having access to your device or account. In order to route and respond to your communication, personnel other than your Consultant may read it, and a communication pertaining to your care may, at the Consultant’s discretion, be recorded within your Consultation Record. Such channels must not be used for any urgent or emergent matter.

11. RETENTION AND ERASURE

1. Personal Data shall be retained only for such period as the purpose of collection or applicable law requires, whichever is longer, and shall thereafter be erased or irreversibly anonymised.
2. Consultation Records and Diet Plans shall be retained for a minimum of seven (07) years from the last consultation, and thereafter for so long as any complaint, claim or proceeding remains pending or apprehended, consistent with clinical record-keeping practice and the applicable period of limitation. Transaction, invoice and taxation records shall be retained for eight (08) years from the end of the relevant financial year. Security, access and audit logs shall be retained for a minimum of three (03) years.
3. Upon withdrawal of consent or a request for erasure, we shall erase your Personal Data and cause our Data Processors to do likewise, save to the extent retention is necessitated by law, by the defence of a legal claim, or by the periods stipulated above, in which event only so much as is necessary shall be retained and you shall be informed of that which is retained and why.
4. You may delete your account at any time from your account settings or by writing to us from your registered email address. The request is recorded and given effect after a cooling-off period of thirty (30) days, during which it may be revoked. Post such period, deletion is permanent and irreversible, access to your Consultation Records shall cease, and any subsequent use of the Services shall require a fresh account bearing no prior history. Account closure does not require the erasure of records retained in accordance with Clauses 11(b) and 11(c). Any such records shall be maintained in a restricted archive and used only for the applicable legal, clinical-record or claim-defence purpose.

12. SECURITY SAFEGUARDS, COMPLIANCE AND DATA BREACH

1. We implement and maintain reasonable security practices and procedures within the meaning of Section 43A of the Information Technology Act, 2000 read with Rule 8 of the SPDI Rules, comprising encryption of data in transit and at rest, multi-factor authentication upon clinician and administrative accounts, role-based access control upon the principle of least privilege, logging and periodic review of access to Health Data, segregation of production from non-production environments, secure development and change management, periodic vulnerability assessment, tested backup and recovery, confidentiality undertakings and training of personnel, and due diligence prior to engaging any Data Processor.
2. Access to Health Data is restricted to the Consultant concerned, to such of our personnel whose role necessitates access, and to Data Processors under contract, every such access being authenticated and logged. You shall maintain the confidentiality of your password and one-time passwords, shall not permit any other person to use your account, and shall notify us forthwith upon becoming aware of any unauthorised access; we shall not be responsible for loss occasioned by your failure to do so or by unauthorised access to your own device or email account.
3. In the event of a personal data breach we shall intimate each affected individual without delay, in clear and plain language, setting out the nature and extent of the breach, its likely consequences and the measures taken, and shall report the breach to the Data Protection Board of India and, where applicable, to the Indian Computer Emergency Response Team, within the periods prescribed. Security constitutes the management of risk and not its elimination, and the occurrence of an incident shall not, of itself, constitute evidence of any failure to implement reasonable security practices.
4. Laws and standards considered. The controls and undertakings set out in this Policy have been framed by reference to the Information Technology Act, 2000 and the SPDI Rules to the extent applicable; the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as and when their respective provisions come into force; applicable consumer-protection and cyber-security requirements, including the directions issued by the Indian Computer Emergency Response Team; and any binding professional, clinical or healthcare rule applicable to the relevant Consultant or Service. We shall revise our operational notices and controls as further provisions commence or as regulatory guidance is issued, and nothing herein shall be construed to derogate from any obligation cast upon us by law.

13. RIGHTS AND DUTIES OF DATA PRINCIPALS

1. Subject to verification of identity and to the exceptions recognised in law, you are entitled: to obtain confirmation of whether and how your Personal Data is being processed, a summary thereof and the identities of the persons with whom it has been shared; to obtain a copy of your Personal Data, including Consultation Records and Diet Plans; to require correction, completion and updating of inaccurate data; to require erasure; to withdraw consent; to nominate another individual to exercise your rights upon your death or incapacity; and to a readily available means of grievance redressal.
2. Where the data sought to be corrected constitutes a clinical observation recorded by a Consultant, the original entry shall not be altered, a clinical record being required to evidence that which was recorded and when. Your correction shall be appended thereto and shall form part of the record, and any request for amendment shall be placed before the Consultant, whose determination and the reasons therefor shall be communicated to you.
3. Requests shall be addressed to support@nutriclinicsglobal.com from your registered email address, specifying the right sought to be exercised. We shall verify your identity prior to acting and may require confirmation of information already held by us or a one-time password sent to your registered mobile number. Every request shall be acknowledged within forty-eight (48) hours and answered within fifteen (15) days.
4. We may decline or limit a request, wholly or in part, only to the extent permitted or required by applicable law, including where identity cannot reasonably be verified; where retention or non-disclosure is required by applicable law; where compliance would prejudice or adversely affect the rights of another person; where the data constitutes opinion or evaluative material held for a professional purpose; where it pertains to a pending investigation or proceeding; or where the request is manifestly unfounded, excessive or repetitive. The refusal and the grounds therefor shall be communicated in writing. No person shall be denied the Services or afforded a lower standard of service by reason of having exercised any right hereunder.
5. Duties. In accordance with the DPDP Act you shall not impersonate any other person while furnishing Personal Data, shall not suppress material information while furnishing Personal Data for any document or benefit issued by the State, shall not register any false or frivolous grievance, and shall furnish only verifiably authentic information while exercising the right to correction or erasure; contravention may attract penalty. You shall further maintain your account information, and in particular your allergies, medications and subsisting conditions, in an accurate and current state, nutrition advice being rendered upon the basis of that which is disclosed.

14. CHILDREN AND PERSONS WITH DISABILITY

1. No person below eighteen (18) years of age shall create an account, effect a payment or book a consultation upon the Platform. Services for a child may be availed solely by a parent or lawful guardian, who shall create the account, furnish the verifiable consent required under the DPDP Act, and confirm their identity and relationship to the child; the child's data shall be held within that account.
2. We shall not undertake tracking, behavioural monitoring or targeted advertising directed at children, and shall not process a child's Personal Data in any manner likely to occasion a detrimental effect upon the well-being of the child. Where a person with disability has a lawful guardian, consent may be furnished by such guardian upon production of evidence of appointment, and the rights hereunder may be exercised by such guardian.

15. THIRD-PARTY SERVICES AND AMENDMENT

1. The Platform may contain links to, or allow You to access, websites, applications, products, or services operated by third parties. Any use of such third-party services is at Your own risk. We do not exercise any control or endorse these services, and this Policy does not apply to their content, privacy practices, or handling of Personal Data. To the extent permitted by applicable law, the Company shall not be responsible for any loss, damage, or other consequence arising from Your use of any third-party service. You should carefully review the applicable terms and privacy policy of any third-party service before accessing or using it or furnishing any Personal Data or other information to it.
2. Where the Platform uses third-party browsers, tools, or APIs, including Google or Apple services, any information received through them will be processed in accordance with this Policy, applicable law, and the relevant provider’s data-use requirements.
3. We reserve the right to amend this Policy at any time. The version published upon the Platform shall govern from the date of its posting and shall bear a distinct version number and revised date. Where an amendment is material, including where it introduces a fresh purpose of Processing, a new category of recipient or a materially altered retention period, notice shall be given by a prominent notice upon the Platform, and we shall not Process your Personal Data for any purpose to which your subsisting consent does not extend until fresh consent has been obtained. Continued use following the posting of an amendment shall constitute acceptance thereof.

16. GRIEVANCE REDRESSAL AND CONTACT

1. Any query, request or concern in relation to this Policy or to the Processing of your data may be addressed to support@nutriclinicsglobal.com and shall be acknowledged within forty-eight (48) hours.
2. Where you are dissatisfied with the response received, or wish to prefer a formal complaint, the matter may be escalated to our Designated Officer, being the person nominated to answer questions concerning the Processing of Personal Data and to discharge the functions of Grievance Officer under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended from time to time:
   Name: Ardhendu Shekhar

   Designation: Designated Officer (Data Protection and Grievance Redressal)

   Email: grievances@nutriclinicsglobal.com

   Address: Maple Town Villa, Suncity Nagaram K V, Rangareddy, Hyderabad, Telangana, India – 500083.
3. Where your grievance relates to the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended, in specific to those brought before the Designated Officer, we shall acknowledge it within twenty-four (24) hours of its receipt and shall dispose of such a complaint within a period of seven (07) to fifteen (15) days from the date of its receipt, disposal comprising all such steps as we consider necessary to address the matter, and the outcome and the reasons therefor shall be communicated to you in writing. The same periods shall apply to grievances relating to the Processing of your Personal Data. If the grievance remains unresolved, you may pursue the remedies available under applicable law, including approaching the Data Protection Board of India, where applicable. Before pursuing any further remedy, you are encouraged to provide written notice at our business address and allow the Company to make a final attempt to resolve the matter directly. Disposal of complaint shall include all actions as considered necessary by the Company.

17. GENERAL AND COMPLIANCE

1. This Policy is governed by the laws of India and the courts at Hyderabad, Telangana shall have jurisdiction, subject to any statutory forum available to you. Any provision held invalid shall be severed, and this Policy is issued in English, which shall prevail over any translation.
2. Any changes to our Privacy Policy will be posted on the Website and will become effective as of the date of posting. Please review the Privacy Policy from time to time to make sure you are aware of any changes, and notifications shall be in line in accordance with Clause 15(c). If you do not agree with any such revised terms, please refrain from using our Services and contact us to close any account you may have created.