Privacy & Data Policy

Confidentiality is a fundamental requirement of the therapeutic relationship. Under the Mental Healthcare Act, 2017 and DPDP Act, 2023 guidelines, any personal information, contact coordinates, or clinical session details you disclose are kept strictly private. Information is only accessed by your assigned therapist and administrative coordinator exclusively for booking purposes.

We only collect data that is voluntarily submitted through our confidential session request form, including:

• Your name or initials (so we know what to call you).
• Your contact coordinates (phone number/WhatsApp, optional email).
• Your preferred contact channel (WhatsApp message vs direct call).
• Selected area of concern and preferred session format.
• Voluntary preliminary notes or messages describing what is on your mind.

All submitted data is transferred over secure, encrypted HTTPS protocols. Data is processed securely via encrypted endpoints and routed directly to our secure administrative inbox. We do not store details in public databases, and we implement access control parameters to prevent unauthorized exposure.

We have a strict zero-sharing policy. We do not sell, rent, trade, or distribute your personal details or contact information to third-party marketing, analytics, or aggregator platforms.

Under the Digital Personal Data Protection (DPDP) Act, 2023 of India, you hold complete ownership of your personal data. Your rights include:

• Right to Information & Access: The right to know exactly what details we hold about you.
• Right to Correction & Erasure: The right to request that we correct inaccurate data or delete your details permanently from our systems.
• Right to Withdraw Consent: The right to withdraw your consent to data processing at any point.

To exercise any of these rights, simply email our data compliance contact at contact@xmentalwellness.com with your request, and we will process it within 48 hours.