Yogyaahar

Privacy Policy

Last updated: 2026-10-25

1. Who We Are

Yogyaahar is operated by Dt. Trishala Goswami, a clinical nutrition consultancy based in Mumbai, India. We are the Data Fiduciary for the purposes of India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

Contact: programs@yogyaahar.com

2. What We Collect

  • Contact data - name, email, phone - when you submit forms or book consultations.
  • Health data - medical history, lab reports, food diaries, body measurements - only when you become a client and choose to share these for your program.
  • DNA reports - when you opt for nutrigenomics. We analyze, never store.
  • Payment data - handled entirely by Razorpay for consultations, and by Payhip and PayPal for self-guided plans. We never see your card, UPI or PayPal details.
  • Analytics data - anonymous, cookieless visit data via Vercel Web Analytics.

3. How We Use Your Data

  • Deliver consultations and personalized programs.
  • Send program-related communications (emails, WhatsApp).
  • Process payments via Razorpay, Payhip and PayPal.
  • Send free resources you’ve requested.
  • Improve the website (anonymous analytics).

We never sell your data. We never share with third parties for marketing.

4. Where Your Data Lives

Health and contact data is stored on encrypted, India-based servers. Email service is Resend (US, GDPR-compliant). Payment processing is Razorpay (India) for consultations, and Payhip (UK) with PayPal for self-guided plans, which also deliver the plan download. CMS content is Sanity (US, GDPR-compliant).

5. Your Rights (DPDP Act)

  • Access - request a copy of all data we hold on you.
  • Correction - ask us to fix any inaccurate data.
  • Erasure - request full deletion of your data within 30 days.
  • Withdraw consent - at any time, with no penalty.
  • Grievance redressal - escalate concerns to our Grievance Officer.

To exercise any of these rights, email programs@yogyaahar.com.

6. Cookies

We do not use tracking cookies. Analytics is cookieless via Vercel Web Analytics, which uses only anonymous, aggregated visit metrics.

7. Children

We do not knowingly collect data from children under 18 without a parent or guardian’s consent. Pediatric clients are managed under parental contract.

8. Changes

We may update this policy as the business evolves. Material changes will be notified to existing clients via email.