Privacy Policy

Last updated: 15 October 2026

Who we are

drhunnykalra.com ("we", "us") is operated by RMCS Academy of Behavioral Sciences, a sole proprietorship that trades under the brand Dr. Hunny Kalra (proprietor: Dr. Hunny Kalra). You can contact us at connect@drhunnykalra.com. Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules), we are the Data Fiduciary for the personal data described in this policy.

What personal data we collect

  • Identity and contact details: name, email address, phone or WhatsApp number, city and country.
  • Booking details: the service you choose, preferred times, and messages you send through the contact page or by email.
  • Payment details: the UPI transaction reference, the payer name and the amount. We do not collect or store your UPI PIN or bank login details.
  • Session information: notes you share and notes we make during coaching or consulting sessions, goals, and progress records. You decide what you share. Please share health information only if it is relevant and you choose to.
  • Organisational details for corporate or institutional clients: organisation name, role and billing details.
  • Technical data: basic website logs and, where used, cookies or analytics (see Cookies below).

Why we use it (purposes)

  • To reply to enquiries, and to schedule, deliver and follow up on sessions.
  • To confirm bookings, collect payments, issue receipts and keep accounting and tax records.
  • To send essential service messages such as confirmations, reschedules and policy changes.
  • To send occasional updates or newsletters, only if you opt in separately.
  • To meet legal obligations and to establish or defend legal claims.

We do not sell your personal data, and we do not use it for any other purpose without fresh notice and consent.

Legal basis and consent

We process your data on the basis of your consent, which you give when you submit the contact form, email us or book a session, and on the basis of the legitimate uses allowed by Section 7 of the DPDP Act, such as complying with law. Consent is free, specific, informed and unambiguous, and it is limited to the purposes above.

Withdrawing consent

You can withdraw consent at any time by emailing connect@drhunnykalra.com. Withdrawing is as easy as giving consent. Once you withdraw, we will stop processing your data and erase it, except where the law requires us to keep it (for example, payment and tax records). Withdrawal does not affect processing that took place before it. If you withdraw consent, we may not be able to continue providing services to you.

Your rights as a Data Principal

You have the right to:

  • obtain a summary of your personal data and of how we process it;
  • know the identities of other Data Fiduciaries and Data Processors with whom we have shared it;
  • have your data corrected, completed, updated or erased;
  • have your grievances addressed; and
  • nominate another person to exercise your rights if you die or become incapacitated.

To use any of these rights, email connect@drhunnykalra.com with the subject "Data Request". We may ask you to verify your identity.

Children (under 18)

Our services are meant for adults. If someone under 18 needs a service, for example sports performance or academic mentoring, we will process the child's data only after obtaining verifiable consent from a parent or lawful guardian, as Rule 10 of the DPDP Rules requires. This means confirming that the parent or guardian is an identifiable adult, using reliable identity details or a government-issued or DigiLocker-based token. We do not track or behaviourally monitor children, and we do not direct targeted advertising at them. A parent or guardian may withdraw consent at any time.

Data Processors and sharing

We use trusted service providers who process data on our behalf, only for the purposes above:

  • UPI apps, banks and payment service providers, to process payments;
  • Google (Gmail), for email;
  • Google Meet, for video calls;
  • Hostinger, for website hosting and for storing the details you submit through our website forms and booking pages;
  • Google (Google Analytics, through the Google Site Kit plugin), for website analytics (see Cookies below).

We may also disclose data where the law, a court or a government authority requires it.

Cross-border transfer

Some providers, such as Google (email, Google Meet and analytics) and Hostinger (hosting), may store data on servers outside India. We transfer data only to countries that the Government of India has not restricted under Section 16 of the DPDP Act.

Retention

We keep personal data only as long as we need it for the purposes above. Our retention periods are:

  • client records and session notes: 3 years after your last session;
  • enquiries that did not lead to a booking: 12 months;
  • payment, invoice and tax records: as long as tax law requires (generally 8 years);
  • processing logs: at least one year, as the DPDP Rules require.

After that, we erase the data securely. Where the DPDP Rules require it, we will tell you at least 48 hours before erasing data because of inactivity.

Security

We use reasonable safeguards to protect your data: password-protected and two-factor-protected accounts, encryption where available, access limited to Dr. Hunny Kalra and any authorised assistant bound by confidentiality, access logs, and backups. No online system is completely secure.

Personal data breach

If a personal data breach occurs, we will inform affected individuals without delay, explaining what happened, the likely impact, the steps we are taking and what you can do. We will also report the breach to the Data Protection Board of India, as the DPDP Rules require (including a detailed report within 72 hours).

Cookies

Our website uses essential cookies, which the site needs to work, for example for the booking pages.

We also use Google Analytics, set up through the Google Site Kit plugin, to understand how visitors use the site, for example which pages are viewed and how visitors reach us. Google Analytics uses cookies and similar technologies to collect information such as your approximate location, device and browser type, and the pages you visit. This information is used in aggregate to improve the site. Google processes this data on our behalf under its own privacy policy. We do not use this data to identify you personally, and we do not use advertising or retargeting pixels on the site.

The site also loads fonts from Google Fonts, which means your browser connects to Google servers and your IP address is shared with Google.

You can block or delete cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on from Google. If you block cookies, some parts of the site, such as booking, may not work properly.

Grievance redressal

Grievance Officer: Dr. Hunny Kalra

Email: connect@drhunnykalra.com

We will acknowledge your grievance promptly and resolve it within 90 days, or sooner. Under the DPDP Act, you must first use this grievance process before complaining to the Board.

Complaint to the Data Protection Board

If our response does not satisfy you, you may file a complaint with the Data Protection Board of India through its official digital platform.

Changes to this policy

We may update this policy. We will post significant changes on this page and, where appropriate, notify you by email.