Privacy Policy - Dr. Ace Wellness

Last Updated: September 30, 2025

At Dr. Ace Wellness, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.dracewellness.com and use our services.

Your Privacy Matters: We understand that your health information is sensitive and personal. We adhere to strict privacy standards and comply with applicable data protection laws, including the Information Technology Act, 2000 and its rules.

1. Information We Collect

We collect various types of information to provide and improve our services to you.

1.1 Personal Information

When you register for our services, make a purchase, or contact us, we may collect:

Name and contact details (email address, phone number, mailing address)
Date of birth and age
Gender
Account credentials (username and password)
Payment and billing information
Shipping address for product deliveries

1.2 Health Information

For our functional medicine programs, we may collect sensitive health information including:

Medical history and current health conditions
Current medications and supplements
Dietary preferences and restrictions
Lifestyle habits (exercise, sleep patterns, stress levels)
Symptoms and health goals
Laboratory test results (if provided)
Progress notes and health assessments

1.3 Automatically Collected Information

When you visit our website, we automatically collect:

IP address and device information
Browser type and version
Operating system
Pages visited and time spent on pages
Referring website addresses
Clickstream data
Cookies and similar tracking technologies

1.4 Information from Third Parties

We may receive information from:

Payment processors for transaction verification
Analytics providers for website usage statistics
Marketing partners (with your consent)
Healthcare providers (with your authorization)

2. How We Use Your Information

We use the collected information for the following purposes:

Purpose	Description
Service Delivery	To provide functional medicine programs, consultations, and deliver fitness equipment
Personalization	To customize programs and recommendations based on your health profile
Communication	To send program updates, appointment reminders, and respond to inquiries
Payment Processing	To process transactions and maintain billing records
Improvement	To analyze usage patterns and improve our services
Marketing	To send promotional materials (with your consent)
Legal Compliance	To comply with legal obligations and protect our rights

3. Legal Basis for Processing

We process your personal information based on:

Consent: You have given explicit consent for specific purposes
Contract Performance: Processing is necessary to fulfill our services to you
Legal Obligation: We must comply with applicable laws and regulations
Legitimate Interests: Processing is necessary for our legitimate business interests while respecting your rights

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

Payment processors for transaction handling
Shipping companies for product delivery
Cloud storage providers for data hosting
Email service providers for communications
Analytics services for website performance
Customer support platforms

4.2 Healthcare Professionals

With your explicit consent, we may share health information with:

Your primary care physician
Specialists involved in your care
Laboratory services for testing

4.3 Legal Requirements

We may disclose information when required to:

Comply with court orders or legal processes
Respond to lawful requests from government authorities
Protect our rights, property, or safety
Prevent fraud or illegal activities
Protect the safety of individuals

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security

We implement robust security measures to protect your information:

Encryption: Data transmitted over the internet is encrypted using SSL/TLS protocols
Access Controls: Strict access limitations to personal and health information
Secure Storage: Data stored on secure servers with firewall protection
Regular Audits: Periodic security assessments and vulnerability testing
Employee Training: Staff trained on data protection and confidentiality
Data Minimization: We only collect information necessary for our services

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

6.1 Types of Cookies We Use

Essential Cookies: Necessary for website functionality and security
Performance Cookies: Help us understand how visitors use our website
Functional Cookies: Remember your preferences and settings
Marketing Cookies: Track effectiveness of our marketing campaigns (with consent)

6.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality. Most browsers allow you to:

View what cookies are stored and delete them individually
Block third-party cookies
Block all cookies
Delete all cookies when closing the browser

7. Your Privacy Rights

You Have the Right To:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal obligations)
Restriction: Request restriction of processing in certain circumstances
Portability: Receive your data in a structured, commonly used format
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
Opt-out: Unsubscribe from marketing communications
Lodge a Complaint: File a complaint with relevant data protection authorities

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 days.

8. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

8.1 Retention Periods

Account Information: Retained while your account is active and for 3 years after closure
Health Records: Retained for 7 years from last interaction (as per medical record guidelines)
Transaction Records: Retained for 7 years for tax and accounting purposes
Marketing Data: Retained until you unsubscribe or request deletion
Website Analytics: Typically retained for 26 months

8.2 Deletion Process

When data is no longer needed, we securely delete or anonymize it. You may request earlier deletion, though we may need to retain certain information for legal compliance.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer information internationally, we ensure appropriate safeguards are in place, such as:

Standard contractual clauses approved by regulatory authorities
Adequacy decisions by relevant data protection authorities
Binding corporate rules for intra-company transfers

11. Third-Party Websites

Our website may contain links to third-party websites, plugins, and applications. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of every website you visit.

12. Marketing Communications

With your consent, we may send you promotional emails about:

New programs and services
Special offers and discounts
Health tips and educational content
Events and webinars
Product launches

12.1 Opting Out

You can opt out of marketing communications at any time by:

Clicking the "unsubscribe" link in any marketing email
Updating your preferences in your account settings
Contacting us directly

Please note that even if you opt out of marketing communications, we will still send you transactional messages related to your account and services.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information held by us
Right to opt-out of the sale of personal information (note: we do not sell personal information)
Right to non-discrimination for exercising your privacy rights

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation including the right to access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint with a supervisory authority.

15. Health Information Privacy

We treat health information with the highest level of confidentiality and security:

Health data is stored separately from other personal information
Access is limited to authorized personnel only
We use de-identification techniques when possible
We obtain explicit consent before sharing health information
We comply with healthcare privacy regulations applicable in your jurisdiction

16. Automated Decision-Making

We may use automated processes to personalize program recommendations based on your health profile. However, significant decisions affecting your health are always reviewed by qualified professionals. You have the right to request human intervention in automated decision-making processes.

17. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

Notify affected individuals without undue delay
Report the breach to relevant authorities as required by law
Take immediate steps to mitigate the breach
Provide information about the nature of the breach and steps being taken
Offer guidance on protective measures you can take

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Posting the updated policy on our website
Updating the "Last Updated" date at the top of this policy
Sending an email notification for significant changes
Requesting your consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

19. Your Consent

By using our website and services, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. For sensitive health information, we will obtain your explicit consent before collection and use.

20. Contact Information and Data Protection Officer

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Dr. Ace Wellness
Privacy Officer

Website: www.dracewellness.com
Email: privacy@dracewellness.com
Phone: [7416399696]
Address: [Your Business Address]
Telangana, India

For Data Subject Requests:
Email: dataprotection@dracewellness.com
We will respond to your request within 30 days.

21. Grievance Redressal

In accordance with Information Technology Act, 2000 and rules made thereunder, if you have any grievance with respect to our privacy practices, you may contact our Grievance Officer:

Grievance Officer Name: [To be appointed]
Email: grievance@dracewellness.com
Response Time: Within 48 hours of receipt

Your Trust is Our Priority: At Dr. Ace Wellness, we are committed to maintaining the trust you place in us. We continuously review and improve our privacy practices to ensure your information remains secure and is used only as described in this policy.