1. Who we are

Maurya Center for Ayurveda Ortho & Neuro Rehabilitation (“Maurya Ayurveda”, “we”, “us”, “our”) operates the website mauryaayurveda.com and provides Ayurvedic, orthopaedic and neurological rehabilitation care from our centres in Kerala, India.

We are the data controller (and, under the Digital Personal Data Protection Act, 2023, the “Data Fiduciary”) responsible for the personal information described in this policy.

موقعMuvattupuzha, Ernakulam District, Kerala, India
هاتف+٩١ ٧٧ ٣٦٦٦ ٥٥٨٠
ال WhatsApp+٩١ ٧٧ ٣٦٦٦ ٥٥٨٠
البريد الإلكترونيinfo@mauryaayurveda.com
Hours8:00 A.M – 5:00 P.M (IST)
2. What this policy covers

This policy explains what personal information we collect through our website, our enquiry and booking forms, WhatsApp, phone, email and social media, why we collect it, who we share it with, and the choices and rights you have.

It applies to visitors and enquirers worldwide, including patients who contact us from outside India for treatment in Kerala.

3. Information we collect

3.1 Information you give us directly
When you submit an enquiry form, request a booking, subscribe to our newsletter, message us on WhatsApp, call us or email us, we collect:

  • Your full name
  • Your phone number, including the international dialling code
  • عنوان بريدك الإلكتروني
  • Your country of residence
  • A description of your symptoms, condition or reason for enquiry, where you choose to provide it
  • Preferred appointment or arrival dates, where you request a booking
  • Any other details you choose to include in your message, attachments or correspondence

3.2 Health information
Because we are a rehabilitation hospital, the information you send us often includes health information — your symptoms, diagnosis, medical history, scans, prescriptions, reports and treatment progress.

Health information is sensitive personal data. We collect it only where you volunteer it or where it is necessary to assess your suitability for treatment and to provide clinical care. We treat it as confidential, restrict access to the clinicians and coordinators involved in your care, and do not use it for advertising or profiling.

Please share only what is necessary for your enquiry. Do not send detailed medical records through unencrypted channels such as ordinary email or social media messages — we will tell you the appropriate way to send them.

3.3 Information about patients under our care
If you become a patient, we create and maintain clinical records covering your assessment, treatment plan, therapy sessions, medications, progress notes and discharge summary, together with billing and identification details required to admit you and to comply with Indian law.

3.4 Information collected automatically
When you browse our website, we and our service providers may collect:

  • Your IP address and approximate location (city or region level)
  • Device type, operating system, browser and screen size
  • Pages viewed, links clicked, time on page, scroll depth and referring website
  • Language preference
  • The date and time of your visit
  • This is collected through cookies and similar technologies, as described in section 4.
4. Cookies and tracking technologies

Our website uses cookies and similar technologies. Some are strictly necessary to make the site work; others are optional and are set only after you give consent through the cookie banner.

Strictly necessary — session, security and consent cookies set by WordPress and by our consent management tool (Complianz), including a cookie that remembers your cookie choices, and a language cookie set by TranslatePress to remember your selected language.

Analytics — Google Analytics, deployed through Google Site Kit and Google Tag Manager, to understand how visitors find and use the site, which pages are popular and where people drop off. This includes engagement events such as clicks, scrolls and form submissions.

Advertising and measurement — the Meta (Facebook) Pixel and Meta Conversions API, deployed through PixelYourSite, to measure the performance of our campaigns on Facebook and Instagram and to reach people who may be interested in our treatments.

Embedded content — YouTube video players and a Google Reviews widget. When these load, Google may set cookies and receive your IP address and details of the page you are on.

Chat and contact widgets — our click-to-chat widget (Chaty) loads WhatsApp and call links. No message is sent until you choose to start a conversation.

Optional analytics and advertising technologies are blocked until you accept them in the cookie banner. You can change or withdraw your choices at any time by reopening the cookie settings from the banner link on any page, and you can block or delete cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the site from working.

Our advertising and analytics tools are never used to target you on the basis of the health conditions you disclose to us in an enquiry.

5. Why we use your information, and our legal basis
PurposeLegal basis
Responding to your enquiry, answering questions and sending you treatment informationYour consent, and our legitimate interest in responding to a request you initiated
Assessing whether our treatments are suitable for your conditionYour consent; necessary for the provision of healthcare
Arranging appointments, admissions, accommodation and travel coordinationPerformance of our agreement with you
Providing clinical care and maintaining medical recordsNecessary for the provision of healthcare and to meet our legal obligations
Billing, invoicing, accounting and tax complianceCompliance with legal obligations
Sending newsletters and treatment updatesYour consent, which you may withdraw at any time
Measuring website performance and improving our contentYour consent (analytics cookies)
Advertising and measuring campaign resultsYour consent (advertising cookies)
Handling complaints, safeguarding patient safety and defending legal claimsOur legitimate interests and legal obligations
6. Who we share your information with

We do not sell your personal information, and we do not share your health information with advertisers.

We share information only as follows:

  • Our clinicians and staff — the doctors, therapists, nurses and patient coordinators involved in your enquiry or care, on a need-to-know basis.
  • Website and IT service providers — our web hosting provider, email provider and the plugin services that operate our forms, bookings and newsletter (including Forminator, LatePoint and Mailchimp), who process data on our instructions.
  • Analytics and advertising providers — Google and Meta, where you have consented to the corresponding cookies. These providers receive website usage data, not your medical enquiry details.
  • Partner accommodation and transport providers — only where you ask us to arrange your stay or transfers, and only the details needed to do so.
  • Payment and banking providers — to process payments you make to us.
  • Professional advisers, auditors and insurers — where necessary and under a duty of confidentiality.
  • Authorities and regulators — where we are required to disclose information by law, court order or a lawful request, or to protect someone’s life or safety.

    If our organisation is reorganised or transferred, personal information may pass to the new owner, subject to this policy.
7. International transfers

We are based in India, and your information is processed in India. If you contact us from outside India — including from the European Union, the United Kingdom or the Gulf countries — your personal information will be transferred to and stored in India.

Some of our service providers, such as Google, Meta and Mailchimp, process data on servers outside India, including in the United States and the European Union. Where the law requires it, such transfers are made under appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

By sending us an enquiry, you understand that your information will be handled in India in line with this policy.

8. How long we keep your information
  • Enquiries that do not lead to treatment — up to three years from your last contact with us, so we can follow up and answer repeat enquiries, unless you ask us to erase them sooner.
  • Patient and clinical records — for at least three years from the date of the last entry in the record, and longer where a longer period is required by law, a regulator, an insurer or an ongoing legal matter.
  • Billing and accounting records — for the period required by Indian tax and company law.
  • Newsletter subscriptions — until you unsubscribe, after which we keep a minimal record of your withdrawal so we do not contact you again.
  • Website analytics data — for the retention period set in the relevant tool, typically no more than 14 months for Google Analytics.

When information is no longer needed, we delete it or anonymise it securely.

9. How we protect your information

We use HTTPS encryption across our website, restrict access to patient information to authorised staff, keep our website software and plugins updated, use access controls and strong authentication on our systems, and hold physical records in secured storage.

No method of transmission or storage is completely secure. If a breach affects your personal data and creates a risk to you, we will notify you and the relevant authorities as required by law.

10. Your rights and choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you, and a summary of how it is processed
  • Correct information that is inaccurate, incomplete or out of date
  • Request erasure of your information where we no longer need it and no law requires us to keep it
  • Withdraw consent at any time, including consent to marketing and to optional cookies
  • Object to or restrict processing based on our legitimate interests
  • Request a copy of your data in a portable format
  • Nominate another person to exercise your rights on your behalf if you die or become incapacitated
  • Complain to us, and to a data protection authority
  • To exercise any of these rights, email info@mauryaayurveda.com or call +٩١ ٧٧ ٣٦٦٦ ٥٥٨٠. We may need to verify your identity before we act, particularly for requests involving medical records. We will respond within the time allowed by applicable law.

To stop receiving our newsletter, use the unsubscribe link in any email or contact us directly. Withdrawing consent does not affect processing that already took place, and it does not require us to delete clinical records we must keep by law.

11. Photographs, videos and testimonials

We sometimes publish patient recovery videos, photographs, written testimonials and progress records on our website and social media channels. We do this only with the explicit, separate, written consent of the patient or their legal guardian.

Consent is voluntary and is never a condition of treatment. You can withdraw it at any time by contacting us, and we will remove the content from channels we control. Copies already downloaded, shared or cached by third parties may remain outside our control.

12. Children

Our website is not directed at children. We treat any patient under 18 as a child and collect and process their information only with the consent of a parent or legal guardian. We do not knowingly use children’s data for tracking, behavioural advertising or profiling. If you believe a child’s information has been given to us without proper consent, contact us and we will address it.

13. Third-party websites

Our website links to third-party sites and platforms, including our Facebook, Instagram, X and YouTube pages, review platforms and partner accommodation providers. Those services have their own privacy policies, and we are not responsible for their practices. Please review their policies before sharing information with them.

14. Information on this website is not medical advice

The treatment descriptions, articles and condition pages on our website are general information only. They are not a diagnosis, a prescription or a substitute for a consultation. Submitting an enquiry form does not create a doctor–patient relationship and does not guarantee admission or a treatment outcome. Please consult a qualified physician before acting on anything you read here.

15. Changes to this policy

We may update this policy to reflect changes in our services, technology or the law. We will post the revised version on this page and update the “Last updated” date. Where a change materially affects your rights, we will give you clearer notice. Please review this page from time to time.

16. Contact us and grievance redressal

For any question, request or complaint about your personal information or this policy, contact our privacy and grievance contact:

We will acknowledge your complaint and work to resolve it promptly. If you are not satisfied with our response, you may escalate it to the Data Protection Board of India, or — if you are in the European Union or the United Kingdom — to your local supervisory authority.