Privacy Policy — Healing Process

Introduction

This Privacy Policy describes how Suman Daderwal ("we", "us", "our"), operating the Healing Process platform ("Platform"), collects, uses, stores, and protects your personal information when you visit our website, create an account, enroll in courses, or otherwise interact with our services.

We are based in Bikaner, Rajasthan, India. While our primary audience is in India, users from other countries may also access the Platform. By using our services, you agree to the practices described in this policy.

This policy is prepared with reference to applicable Indian data protection requirements, including the Digital Personal Data Protection Act, 2023 (DPDP Act). This document is provided for informational purposes and does not constitute legal advice.

Information We Collect

We collect information that you provide directly, information generated through your use of the Platform, and limited technical data necessary to operate and secure our services.

Account information: name, email address, and password (stored in hashed form).
Profile information: username, profile photo, and bio (optional).
Course activity: enrollments, lesson progress, and completion status.
User-generated content: comments, reactions, bookmarks, and other community interactions.
Payment information: transaction references, amounts, and payment status processed through Razorpay. We do not store your full card or UPI credentials.
Newsletter and marketing: email address when you subscribe to updates or download free resources.
Uploaded files: images or documents you upload, stored securely via AWS S3.
Video viewing data: playback and streaming metadata related to course videos delivered through Mux.
Technical data: IP address, browser type, device information, and usage logs collected through essential cookies and Google Analytics.

How We Use Your Information

To create and manage your account and authenticate your access.
To provide course content, track progress, and deliver enrolled programmes.
To process payments and confirm enrollments.
To send service-related emails such as verification, password reset, and account notices.
To respond to support requests and grievances.
To improve the Platform, fix errors, and understand how features are used.
To comply with legal obligations and enforce our Terms of Use.
To protect the Platform, our users, and our rights against fraud or misuse.

Legal Basis & Your Rights (India)

Under applicable Indian law, including the DPDP Act, we process personal data based on your consent, contractual necessity (to provide services you request), and legitimate interests such as platform security and improvement, where permitted by law.

Depending on applicable law, you may have the right to access, correct, update, or request erasure of your personal data, withdraw consent where processing is consent-based, and raise a grievance regarding our handling of your data.

To exercise these rights, contact us using the details in the Contact section below. We aim to respond within fifteen (15) days of receiving a verifiable request.

Third-Party Service Providers

We use trusted third-party providers to operate the Platform. These providers process data on our behalf and only as necessary to deliver their services:

Mux — video hosting, encoding, and streaming for course lessons and promotional videos.
Amazon Web Services (AWS) S3 — secure storage for uploaded files such as profile images and course attachments.
Razorpay — payment processing for course purchases in Indian Rupees (INR).
Google Analytics — website usage analytics to understand traffic and improve user experience.
Email delivery providers — to send transactional emails such as verification and account notifications.

Cross-Border Data Transfers

Some of our service providers, including Mux and Google, may process or store data on servers located outside India, including in the United States. Where such transfers occur, we take reasonable steps to ensure that appropriate safeguards are in place and that processing is limited to what is necessary to provide the Platform.

If you access the Platform from outside India, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection laws than your country of residence.

Cookies & Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences (such as theme settings), and understand how the Platform is used.

Essential cookies — required for authentication, security, and core site functionality.
Analytics cookies — Google Analytics helps us measure visits, pages viewed, and general usage patterns.
You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use certain features. You may also opt out of Google Analytics using Google's browser add-on or your browser's privacy controls.

Data Retention

We retain personal data for as long as your account is active or as needed to provide services to you. If you request account deletion, we apply a thirty (30) day grace period during which your account may be recoverable, after which personal data is permanently removed in accordance with our deletion process.

We may retain certain records for longer periods where required by law, including payment and tax records, or where necessary to resolve disputes and enforce our agreements.

Your Rights & Grievance Redressal

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at base@healingprocess.in. Please include sufficient detail so we can verify your identity and respond appropriately.

If you are not satisfied with our response, you may have the right to escalate your concern to the relevant authority under applicable Indian law, subject to the provisions of the DPDP Act and related rules.

Children's Privacy

The Platform is intended for users aged eighteen (18) years and above. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the bottom of this page will indicate when the policy was last revised. Continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

Contact Us

Data fiduciary / operator: Suman Daderwal, an individual operating under the brand name Healing Process

Location: Bikaner, Rajasthan, India

Email: base@healingprocess.in