Privacy Policy & Data Protection Agreement

Last Updated: 2026-03-20

1. Introduction

This Privacy Policy describes how the Consultant collects, uses, and protects your personal and sensitive data. By engaging in our services, you consent to the practices described herein.

2. Data We Collect

We collect information necessary to provide high-quality psychological consultation, including:

• Identity Data: Name, age, and contact information.
• Sensitive Personal Data: Health history, psychological notes, and session recordings.
• Technical Data: IP address and metadata related to your Microsoft Teams connection.

3. Online Consultations & Recording Policy

All sessions are conducted via Microsoft Teams. To ensure the highest standard of care and professional development, sessions are recorded.

• Purpose of Recording: Recordings are used exclusively for internal clinical review by senior consultants to ensure quality of care and professional supervision.
• Consent: By proceeding with a session, you provide explicit consent to be recorded. You may withdraw this consent at any time, though this may affect the nature of the consultation provided.
• Storage: Recordings are stored in an encrypted, password-protected environment within our professional Microsoft 365 Business ecosystem.

4. Data Storage and Location (India & International)

As we are located in Bangalore, India, your data is processed in accordance with the Digital Personal Data Protection Act (DPDPA) 2023.

• International Clients: For clients located in the EU/UK or other regions, we implement “Standard Contractual Clauses” to ensure your data receives the same level of protection as it would under GDPR.
• Data Residency: While we are based in India, Microsoft Teams data may be processed on servers globally as per Microsoft’s enterprise privacy standards.

5. Access and Confidentiality

Confidentiality is the cornerstone of our practice. Access to your recordings and notes is strictly limited to:

1. Your primary consultant.
2. Designated senior clinical supervisors (for internal review purposes only).
3. Legal authorities only when mandated by a court order or to prevent immediate physical harm to yourself or others.

Your recordings are never sold, shared with third-party advertisers, or used for public marketing.

6. Data Retention

We do not keep your data longer than necessary:

• Session Recordings: Kept for a period of [e.g., 6 months / 1 year] before being permanently deleted, unless a legal requirement dictates otherwise.
• Clinical Notes: Retained for [e.g., 7 years] in accordance with Indian medical record-keeping guidelines.

7. Your Rights

Under the DPDPA (India) and GDPR (International), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we fix inaccurate information.
• Erasure: Request that we delete your data (subject to legal record-keeping requirements).
• Withdraw Consent: Stop future recordings or data processing.

8. Contact Information

For any questions regarding your data or to exercise your rights, please contact support@krutagyancounsellor.com