Privacy Policy for the Users of Our Website 

https://india.healy.shop/ 

Welcome to our website. We prioritize your privacy and the security of your personal data in compliance with the Information Technology Act, 2000, specifically the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules), and the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), as amended from time to time. This Privacy Policy outlines how DHC Medical Services Private Limited (referred to as “Healy,” “we,” or “us”) collects, processes, and protects your data when you interact with our website. 

Please find below information on what data are collected during your visit and/or use of our website at https://india.healy.shop/ and how that data is used, processed, and/or disclosed. 

The data controller for data protection purposes is: 

Company: DHC Medical Services Private Limited
General Manager Training and Sales: Sachin Gupta
Address: B-38, First Floor, Shivalik, New Delhi – 110017
Phone number: +91 08062235101
Support Email: healy.sales.in@healyworld.net

The Data Protection Officer of the controller can be reached at dpo@healy.world and shall act as the grievance officer, acknowledging, tracking, and resolving grievances within timelines prescribed under the DPDP Act and DPDP Rules, and maintaining records of such grievances.

You may contact the Data Protection Officer at the above email address for any questions regarding the use, collection, and processing of personal data or to exercise the rights set forth in this Privacy Policy. Your email will not be forwarded to the Customer Support. Please contact directly the Customer Support for any help related to your device.

Controller Responsibility

As the data controller under applicable Indian data protection laws including the Digital Personal Data Protection Act, 2023 HEALY undertakes to protect customers’ personal data and privacy, handling it with strict confidentiality. We collect, store, process, and use personal data in line with applicable statutory provisions, particularly the Information Technology Act, 2000, the IT Rules and the Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025.

HEALY employs technical and organizational protection measures including encryption, access controls, monitoring systems, secure infrastructure, and periodic security reviews, to safeguard customer data against unauthorized access, accidental or intentional manipulation, destruction, or loss.

Legal Basis for Data Processing 

Under the Digital Personal Data Protection Act, 2023, personal data shall only be processed:

1. Based on the consent of the Data Principal; or
2. For legitimate uses as permitted under applicable law.

Consent shall be free, specific, informed, unconditional, and unambiguous, obtained through clear affirmative action, recorded for compliance purposes, and capable of being withdrawn at any time.

At or before obtaining consent, HEALY provides a clear and itemised notice specifying the personal data collected, the purposes of processing, the manner of exercising rights, and the grievance redressal mechanism in accordance with the DPDP Rules, 2025.

Effect of Withdrawal of Consent:

Withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal, and certain services may no longer be available where such processing is necessary.

Information on the Collection of Personal Data 

This section explains how personal data is collected when using our website. Personal data includes, for example, name, address, email addresses, and user behavior. 

HEALY takes reasonable steps to ensure that personal data processed is accurate and up to date, and users are encouraged to update their information where necessary. Personal data shall not be processed for purposes incompatible with those specified at the time of collection.

1. Collection of Personal Data When Visiting Our Website

For those accessing the website purely to obtain information, HEALY collects only the data necessary for technical purposes, enabling website functionality and ensuring stability and security. The following data are collected: 

• Location of inquiry
• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Data volume transmitted in each case
• Referring website
• Browser and operating system, including their interface
• Language and version of the browser software 

This data is deleted immediately after technical evaluation and processed strictly for specified purposes, retained only as long as necessary, and not used beyond such purposes in accordance with the DPDP Act.

2. Use of Cookies

Our website uses cookies or similar technologies (e.g., pixels). Cookies are small text files stored on your device to store certain information. When you revisit the website, cookies enable the website to remember prior visits and adjust the display to your preferences.

Cookie Types and Purposes: 

Our website uses the following types of cookies: 

• Essential Cookies: These cookies are required for the website’s core functionality, such as basic page navigation and access to secure areas. The website cannot function properly without these cookies, and they cannot be disabled individually.
• Functional and Performance Cookies: These cookies allow the website to remember choices you make, such as language preferences, and collect anonymized data on website performance to improve user experience. They do not track browsing on other websites and collect only anonymous data.
• Marketing Cookies: These cookies may be set through our site by our advertising partners to build a profile of your interests and show you relevant advertisements on other sites. Marketing cookies come from external providers, and you may withdraw your consent at any time.
• Non-essential Cookies Non-essential cookies, including marketing and analytics cookies, are deployed only upon obtaining consent through clear affirmative action, such consent being recorded and capable of withdrawal at any time, with mechanisms provided for granular preference management, in accordance with the DPDP Act and DPDP Rules, 2025. 

Consent for Non-Essential Cookies: 

When you first visit our website, you will be informed about the use of cookies and prompted to manage your cookie preferences. Essential cookies necessary for core website functionality cannot be disabled. Non-essential cookies, including marketing and analytics cookies, require your explicit consent, which you may manage or withdraw at any time through our cookie settings link or in your browser. 

Cookie Duration Information: 

Some cookies remain on your device only while you’re visiting our website (session cookies), while others remain after you leave (persistent cookies) to remember your preferences or provide analytics data. Persistent cookies will expire automatically after a set period, generally not exceeding 12 months unless otherwise specified. 

Managing Cookies and Opt-Out: 

You can manage your cookie settings directly in your browser or through our cookie settings link on the website. To opt-out of specific tracking from third-party providers, you may also use dedicated opt-out tools.

3. Contact Forms

When you contact HEALY via contact forms on our website, the information provided by you (such as your name, email address, and the details of your inquiry) is collected and stored solely for the purpose of responding to your request. Data collected via contact forms will not be used for any purpose other than to address your specific inquiry. 

• Legal Basis: Processing is based on your consent in accordance with the DPDP Act, and such consent is recorded and maintained for compliance purposes.
• Retention Period: Information collected through contact forms is deleted once the inquiry has been resolved unless further retention is required by law.

4. Server Log Files

Each time you access our website, certain data is transmitted and stored as server log files. These include data on page access, date and time, IP address, data volume, and requesting provider. This is necessary for website functionality and security, such data shall be retained only as long as necessary for such purposes and protected through appropriate safeguards in accordance with applicable law.

5. Collection of Personal Data for Contact Requests

If you contact HEALY by email or contact form, we store the provided data (e.g., email, name) to answer your inquiry. This data is deleted once your request is resolved unless further retention is required by law.

6. Collection of Personal Data at Contract and Payment

When ordering products, certain personal data is collected to fulfill the contract. This data may include: 

• Title
• Name
• Address
• Phone number
• Email
• Delivery address (if different)
• Payment details, such as credit card or bank information 

By providing your personal and payment details, you consent to processing strictly for order fulfilment and related lawful purposes in accordance with the DPDP Act.

HEALY collects only such personal data as is necessary for the specified purpose (data minimisation) and implements appropriate technical and organisational measures, including encryption, secure payment processing, and access restrictions, in accordance with the DPDP Rules, 2025.

Data Retention: Personal data related to orders and payments will be retained for a minimum of three years or as required by applicable tax and financial regulations, whichever is longer.
Financial Data Security Standards: Payment information is processed in compliance with applicable financial data protection standards, including the Payment Card Industry Data Security Standard (PCI-DSS), to ensure secure payment handling.

7.Data Breach Notification

In the event of a personal data breach, HEALY shall take appropriate remedial measures and notify affected users and relevant authorities where required, in accordance with applicable law.

8. Data Transfer

HEALY only discloses personal data to fulfill contractual obligations or legitimate interests. Trusted third-party service providers (processors) are engaged for order processing, payment transactions, and shipping services, and they adhere to data protection agreements to safeguard your data.

Cross-Border Data Sharing: Personal data may be transferred to and processed by our partners and service providers outside India. Such transfers shall be carried out only to jurisdictions permitted under applicable law and subject to contractual safeguards, confidentiality obligations, and security requirements as prescribed under the DPDP Act and DPDP Rules, 2025.

9. Marketing Communications and Newsletters

HEALY will only send marketing communications, such as newsletters, if customers provide explicit consent. The only required information for the newsletter is an email address, though additional details may be provided for personalized communication. Consent may be revoked at any time by contacting healy.sales.in@healyworld.net or using the unsubscribe link provided in the newsletter.

10. External Tools

Healy World uses external tools and platforms for analytics, performance monitoring, and social media engagement, including Meta (Facebook, Instagram, and WhatsApp), LinkedIn, and Google Analytics. Where such tools involve the processing of personal data, Healy World ensures that appropriate data processing agreements are in place with these third-party providers. Such agreements impose contractual safeguards, including data protection obligations, purpose limitations, confidentiality requirements, and appropriate technical and organisational security measures, in compliance with the Digital Personal Data Protection Act, 2023 and applicable rules thereunder.

Healy World may also use automated processing tools, including analytics and marketing platforms, to analyse user behaviour, preferences, and engagement patterns for the purposes of improving its services, enhancing user experience, and delivering relevant content and advertisements. Such processing shall be carried out based on valid consent where required under applicable law.

In particular:

• Google Analytics is used to track and analyse website usage in an aggregated manner to improve service offerings. IP addresses are anonymised where technically feasible.
• Meta platforms (including Facebook, Instagram, and WhatsApp) are used to measure user engagement and deliver customised advertising and content based on user interactions.

All such processing activities are conducted in a manner that is proportionate, limited to specified purposes, and aligned with applicable data protection laws

11. Social Media and Third-Party Content

HEALY operates Meta and LinkedlIn. Meta and LinkedlIn and HEALY are joint controllers for data collected on this page. Meta’s and LinkedlIn’s policies apply to personal data processed on this platform, including insights about page activities, likes, and followers. To the extent HEALY acts as a Data Fiduciary, it ensures compliance with obligations under the DPDP Act, including lawful processing, consent management, and data protection safeguards.

12. Children’s Privacy

Personal data of children (below 18 years) shall only be processed with verifiable parental consent, and HEALY shall not undertake tracking, behavioural monitoring, or targeted advertising directed at children, and shall implement appropriate age verification and consent mechanisms in accordance with the DPDP Rules, 2025.

13. Rights of Data Subjects

Under the Digital Personal Data Protection Act, 2023, you have the right to: 

• Access or confirm processing details
• Request data rectification or erasure
• Restrict processing
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

You may approach the Data Protection Board of India if unsatisfied, and all requests shall be acknowledged and responded to within timelines prescribed under the DPDP Rules, 2025.

14. Data Principal Responsibilities

Users shall ensure that personal data provided is accurate, complete, and not misleading. Users shall not impersonate another person while providing personal data and shall comply with applicable law while exercising their rights under this Privacy Policy.

15. Grievance Redressal Mechanism

Users may raise grievances by contacting dpo@healy.world, and such grievances shall be acknowledged, tracked, and resolved within prescribed timelines, with proper records maintained in accordance with the DPDP Act and DPDP Rules, 2025.

If the grievance is not satisfactorily resolved, the user may escalate the complaint to the Data Protection Board of India.

16. Changes to this Privacy Policy

HEALY reserves the right to update this Privacy Policy from time to time. Any material changes shall be communicated through the website or other appropriate means.

We hope this Privacy Policy helps you understand and exercise your rights. Please contact us for any further information on data protection.

Status : 06.07.2026
Last Updated: In accordance with the Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025