PRIVACY POLICY

This Privacy Policy (“Policy”) describes how MOHI LIFESTILE SOLUTIONS PRIVATE LIMITED, having its registered office at First Floor A-279, A-Block, New Amritsar, Amritsar, Punjab – 143001, operating under the brand name WellnessZ (“WellnessZ”, “Company”, “we”, “our”, or “us”), collects, uses, stores, shares, transfers, and otherwise processes personal data through the WellnessZ Experts platform, including the website, mobile applications, dashboards, consultations, booking tools, software, communication tools, payment flows, digital products, and related services (collectively, the “Platform” or “Services”).

By accessing or using the Platform, or by submitting your information to us, you agree to this Policy, subject to applicable law.

If you do not agree with this Policy, please do not use the Platform.

---

1. WHO THIS POLICY APPLIES TO

This Policy applies to:

• visitors browsing the Platform;

• Users / Clients / Customers booking or using services through WellnessZ Experts;

• Experts, coaches, trainers, dietitians, consultants, and other service providers onboarded to the Platform;

• persons whose information is submitted by another authorized person for bookings or related services;

• business users interacting with us for partnerships, enquiries, onboarding, or support.

---

2. WHAT DATA WE COLLECT

Depending on how you use the Platform, we may collect the following categories of data:

2.1 Identity and Contact Data

• full name

• mobile number

• email address

• gender

• date of birth or age

• city, state, country

• postal address

• profile photo

• business or brand details

• government or tax identifiers where legally required for onboarding, invoicing, or compliance

2.2 Account and Profile Data

• login credentials

• account identifiers

• dashboard usage data

• preferences

• service interests

• public profile details

• qualifications, certifications, experience, and specialization details submitted by Experts

2.3 Health, Wellness, and Lifestyle Data

Where voluntarily provided by you or lawfully submitted for service use:

• height, weight, age, gender

• wellness goals

• activity data

• dietary preferences

• allergies

• lifestyle details

• uploaded reports or records

• consultation notes

• progress data

• fitness, nutrition, habit, or wellness information

2.4 Booking and Transaction Data

• service bookings

• subscriptions

• consultations

• invoices

• receipts

• payment status

• transaction summaries

• refunds

• cancellations

• payout records

• GST and billing information, where applicable

2.5 Device and Technical Data

• IP address

• browser type

• device type

• operating system

• app version

• crash logs

• device identifiers

• session logs

• usage analytics

• cookies and similar technologies

2.6 Communication Data

• emails

• chat messages

• support tickets

• call records or summaries, where lawfully recorded

• WhatsApp or SMS communications

• push notification interactions

2.7 User Content

• reviews

• ratings

• comments

• files

• images

• videos

• forms

• messages

• content submitted on public or private platform areas

2.8 Marketing and Preference Data

• consent choices

• campaign responses

• referral source

• ad interactions

• communication preferences

---

3. HOW WE COLLECT DATA

We may collect personal data:

• directly from you when you register, book, pay, upload, message, or contact us;

• from Experts or business partners where you authorize or request a service;

• from family members or authorized persons acting on your behalf;

• automatically through cookies, SDKs, analytics tools, and device-level technologies;

• from payment processors, communication tools, support systems, and lawful third-party integrations;

• from public or business sources where required for onboarding verification or fraud prevention.

---

4. PURPOSES FOR WHICH WE USE YOUR DATA

We may process your personal data for the following purposes:

4.1 To provide the Platform and Services

• create and manage accounts

• enable logins and dashboard access

• list Expert profiles

• facilitate bookings and subscriptions

• deliver consultations, plans, programs, and digital services

• provide customer support

4.2 To manage payments and billing

• process payments

• issue receipts, invoices, and transaction records

• manage GST and tax workflows

• process settlements and payouts

• handle refunds, reversals, and disputes

4.3 To personalize and improve the Platform

• recommend Experts or services

• improve platform design and user experience

• optimize performance

• improve service delivery and operations

• develop new features and products

4.4 To communicate with you

• send OTPs and account alerts

• send booking confirmations and reminders

• respond to support requests

• provide updates, notices, and policy changes

• send promotional communications, where permitted

4.5 To ensure safety, integrity, and compliance

• verify identity and eligibility

• detect fraud, misuse, abuse, or circumvention

• maintain platform security

• investigate complaints or disputes

• meet legal, regulatory, tax, audit, and law enforcement requirements

• respond to cybersecurity incidents and maintain logs where required for security and incident response purposes.

4.6 To use aggregated or de-identified information

We may use anonymized, aggregated, or de-identified information for analytics, benchmarking, internal reporting, service improvement, and business planning, provided such information does not identify you personally.

---

5. LEGAL BASIS / LAWFUL BASIS OF PROCESSING

We process personal data for lawful purposes, including where necessary:

• to provide services requested by you;

• to comply with legal or regulatory obligations;

• to respond to your actions and account requests;

• based on your consent, where consent is the appropriate basis;

• for legitimate business purposes such as fraud prevention, platform security, internal administration, service improvement, and dispute handling, to the extent permitted by law.

India’s Digital Personal Data Protection Act, 2023 provides the overarching framework for lawful processing of digital personal data, and the Government has already notified parts of the Act and established the Data Protection Board of India as part of its rollout.

---

6. HEALTH AND WELLNESS DATA NOTICE

6.1 Some services on WellnessZ Experts may involve the collection or sharing of health-related or wellness-related information that you voluntarily provide.

6.2 You acknowledge that such information may be processed by WellnessZ and, where necessary for service delivery, shared with the relevant Expert, service partner, support team member, or authorized processor.

6.3 You should only submit information that is accurate and that you are comfortable sharing for the purpose of receiving the requested service.

6.4 If you upload another person’s health or wellness information, you represent that you are lawfully authorized to do so and have obtained all required permissions or consents.

---

7. COOKIES, TRACKING TOOLS, AND ANALYTICS

7.1 We may use cookies, pixels, tags, SDKs, log files, and similar technologies to:

• keep you signed in

• remember preferences

• understand platform usage

• improve performance

• measure campaigns

• detect fraud and security threats

  7.2 You may be able to control cookies through your browser or device settings. However, disabling certain technologies may affect the functionality of the Platform.

  7.3 We may also use third-party analytics or product tools subject to appropriate contractual and operational controls.

---

8. WHEN WE SHARE YOUR DATA

We may share personal data only as reasonably necessary and subject to applicable law, including with:

8.1 Experts and Service Providers

To enable bookings, consultations, service delivery, communication, progress tracking, or issue resolution.

8.2 Payment and Financial Partners

To process payments, refunds, settlements, invoicing, fraud checks, and tax-related workflows.

8.3 Technology Vendors and Processors

Including hosting providers, CRM tools, support tools, analytics providers, communication service providers, storage providers, and security vendors acting on our instructions.

8.4 Business and Operational Partners

Where needed for campaigns, integrations, digital services, or support functions related to the Platform.

8.5 Legal, Regulatory, and Government Authorities

Where disclosure is required by law, court order, regulatory direction, audit, legal process, or to protect rights, users, safety, or platform integrity.

8.6 Corporate Transactions

In connection with a merger, acquisition, investment, restructuring, sale of assets, or similar transaction, subject to appropriate protections.

---

9. WE DO NOT SELL PERSONAL DATA AS A COMMODITY

We do not sell your personal data as a standalone commodity in the ordinary sense of data brokering. However, we may share limited data with service providers, Experts, partners, and processors where required to operate the Platform, provide requested services, or run lawful business operations as described in this Policy.

---

10. DATA RETENTION

10.1 We retain personal data only for as long as necessary for:

• providing services

• maintaining accounts

• fulfilling bookings

• handling support and disputes

• meeting tax, legal, contractual, accounting, and regulatory obligations

• security, fraud prevention, and incident response

  10.2 Retention periods may vary depending on:

• the type of data

• the nature of the service

• legal and regulatory requirements

• dispute or litigation risk

• security and fraud considerations

  10.3 We may retain certain logs and incident-related information for cybersecurity, abuse prevention, or compliance reasons. CERT-In’s 2022 Directions continue to require certain entities to report specific cyber incidents and maintain specified logs for defined periods.

  10.4 Once retention is no longer necessary, we may delete, anonymize, aggregate, or securely archive the information, subject to technical and legal constraints.

---

11. DATA SECURITY

11.1 We implement reasonable technical, organizational, and administrative safeguards designed to protect personal data against unauthorized access, disclosure, alteration, misuse, and loss.

11.2 These safeguards may include:

• access controls

• password protection

• limited personnel access

• encryption or secure transmission controls where appropriate

• secure hosting arrangements

• monitoring, logging, and incident response measures

  11.3 No digital platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your account credentials and promptly notifying us of suspected misuse.

  11.4 In the event of a cybersecurity incident, we may take such steps as are necessary under applicable law and incident response requirements, including reporting where required.

---

12. CROSS-BORDER TRANSFERS

We may store or process data in India and, where operationally required and legally permitted, outside India using cloud, software, or service providers. Any such transfer will be carried out subject to applicable law, contractual safeguards, internal controls, and government restrictions that may apply from time to time under India’s digital personal data framework. The DPDP framework contemplates cross-border transfers subject to restrictions that may be notified by the Central Government.

---

13. YOUR RIGHTS

Subject to applicable law, you may have rights regarding your personal data, including the right to:

• request access to certain personal data we hold about you;

• request correction or updating of inaccurate or incomplete data;

• request deletion of personal data, subject to lawful exceptions;

• withdraw consent where processing is based on consent;

• request grievance redressal;

• nominate another person to exercise certain rights on your behalf where law permits.

The Digital Personal Data Protection Act, 2023 provides for rights such as access to information, correction and erasure, grievance redressal, and nomination, subject to the Act and applicable rules/notifications.

To exercise these rights, you may write to us at support@wellnessz.in or the contact details listed below.

We may need to verify your identity before acting on a request.

---

14. CONSENT WITHDRAWAL

Where we rely on your consent for specific processing, you may withdraw such consent by contacting us or using in-platform controls, where available. Withdrawal of consent will not affect the lawfulness of processing already carried out before the withdrawal and may impact our ability to provide some Services.

---

15. CHILDREN’S PRIVACY

The Platform is generally not intended for persons under 18 years of age unless a lawful parent, guardian, or authorized adult is acting on their behalf for a permitted use case.

We do not knowingly allow minors to independently create accounts or contract for services where not permitted by law. If we learn that personal data has been submitted in violation of this Policy or applicable law, we may suspend the account and delete or restrict the relevant data, subject to legal obligations.

---

16. THIRD-PARTY LINKS AND INTEGRATIONS

The Platform may contain links to third-party websites, applications, videos, tools, payment systems, or other services. We are not responsible for the privacy practices, content, or security of those third parties. Your interactions with third-party services are governed by their own terms and privacy notices.

---

17. EXPERT-SPECIFIC PRIVACY NOTE

If you are an Expert or business user on WellnessZ Experts, we may process your business and personal data for:

• onboarding and profile creation

• verification and compliance checks

• listing management

• payouts and settlements

• tax and invoicing workflows

• performance tracking

• customer support

• dispute handling

• platform operations

• fraud prevention

• internal reporting and business management

We may also display business profile information that you choose or agree to make public on the Platform.

---

18. MARKETING COMMUNICATIONS

18.1 We may send you:

• service notifications

• transactional messages

• booking updates

• account alerts

• support responses

• invoices and receipts

• promotional emails, SMS, WhatsApp messages, push notifications, or calls, where permitted

  18.2 You may opt out of promotional communications through available unsubscribe options or by contacting us. However, we may still send essential service and transaction communications.

---

19. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in:

• law

• regulation

• product features

• security practices

• internal business processes

• platform structure

The updated version may be posted on the Platform with a revised effective date. Continued use of the Platform after such update constitutes acceptance of the revised Policy, to the extent permitted by law.

---

20. GRIEVANCE AND CONTACT DETAILS

If you have any questions, complaints, requests, or privacy concerns, you may contact:

MOHI LIFESTILE SOLUTIONS PRIVATE LIMITED

Brand: WellnessZ / WellnessZ Experts

Email: support@wellnessz.in

Registered Office: First Floor A-279, A-Block, New Amritsar, Amritsar, Punjab – 143001

Privacy / Grievance Contact: [Insert Name]

Designation: [Insert Designation]

Email: [Insert Email]

Phone: [Insert Phone, if any]

India’s intermediary framework requires grievance-related compliance structures, and your final published version should include the exact responsible contact details actually used by WellnessZ.

---

21. GOVERNING LAW

This Privacy Policy shall be governed by the laws of India. Any disputes arising in relation to this Policy shall be subject to the jurisdiction of the competent courts at Amritsar, Punjab, subject to applicable law.

---

22. SHORT CONSENT LANGUAGE FOR CHECKBOX / APP FLOW

You can use this shorter line near signup or booking:

“By continuing, you agree to WellnessZ Experts’ Terms and Privacy Policy and consent to the collection and processing of your personal data, including wellness-related information you choose to provide, for providing platform services, bookings, support, payments, and related operations.”