Privacy Policy

HealthSpanMD ("we", "us", "our") is a doctor-led metabolic health and longevity practice based in Mumbai. This policy explains what personal information we collect through thehealthspanmd.com, why we collect it, and how it's used and stored. We handle personal data in line with the Digital Personal Data Protection Act, 2023 (DPDP Act).

The short version: we collect the information you give us so we can respond to your inquiry, book your assessment, and process your payment — and we do not sell, rent, or otherwise pass your personal information on to any third party for their own use.

We collect information in four ways:

1. Information you submit through our forms. When you send an inquiry or book an assessment, we collect what you enter — typically your name, phone number, email address, age, gender, the programme or area of interest you've selected, and any message you include.

2. Approximate location. With your browser's permission, we may collect precise location coordinates to understand where you're reaching us from (for example, to gauge whether an in-person or virtual consultation makes more sense for you). If you don't grant that permission, we fall back to estimating your city/region from your IP address using a third-party lookup service. This is approximate only and isn't used to identify you personally.

3. Payment and booking details. If you book and pay for a programme, our payment gateway, Razorpay, processes the transaction and returns a payment confirmation, which we record against your booking (programme selected, amount paid, and payment/order reference numbers). We do not see or store your card, UPI, or banking credentials — those are handled entirely by Razorpay.

4. Patient intake and medical reports. If you complete our patient intake form, we collect the health, lifestyle and contact details you enter, and any lab or scan reports you upload. We use this only to prepare for and carry out your care.

We use the information we collect only to:

respond to your inquiry and get in touch about booking or scheduling; confirm and process payment for a programme you've chosen; keep an internal record of your booking so our clinical and front-desk teams can prepare for your visit or consultation; and improve how we communicate with prospective and existing patients.

We do not use your information for advertising, profiling, or any purpose unrelated to running the practice and serving you as a patient or prospective patient.

We do not sell or share your personal information with third parties for their own marketing, advertising, or commercial purposes. The only parties who ever receive any of your information are the service providers that make this website and our booking process work, and only to the extent needed to do that job:

Razorpay — our payment gateway, to process bookings and payments.
Supabase — our database provider, which securely stores the information described above on our behalf.
Google — we send form submissions to our own team inbox via Gmail's mail servers, and load a small set of interface icons from Google Fonts.
IP geolocation lookup — receives only your IP address, to estimate an approximate location when browser location isn't available.
Google (Gemini AI) — reads the lab and scan reports you upload and extracts the values from them. Your doctor then checks those values before they become part of your record. The report file is deleted from our storage once it has been read.

Each of these providers is contractually or technically limited to using your information solely to deliver the service we've engaged them for. We may also disclose information if required to do so by law, or to protect the rights, safety, or property of HealthSpanMD or others.

We use Google Tag Manager and Google Analytics to understand how people use this site. Advertising tags configured in Tag Manager (for example Meta) may also load. These tools can set cookies or similar storage. You can limit this through your browser settings.

We retain inquiry and booking records for as long as needed to respond to you, deliver the programme you've booked, and meet our own record-keeping and legal obligations. We delete or anonymise data when it is no longer needed. You can ask us to delete your information at any time — see "Your Rights" below.

Under the DPDP Act, 2023, you are a "data principal". You have the right to:

access the personal data we hold about you; correct it; ask us to erase it; withdraw your consent at any time; and nominate another person to exercise your rights if you die or become unable to act. We may need to keep some records for legal, medical, or accounting reasons. To make a request, email us at connect@thehealthspanmd.com.

If you have a complaint about how we handle your personal data, write to our grievance officer: Dr. Narendra Rathi, at connect@thehealthspanmd.com. We aim to respond within 30 days.

Our services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we'll remove it.

We may update this policy from time to time as our services evolve. The "Last updated" date at the top of this page will always reflect the most recent version.

If you have any questions about this policy or how your information is handled, reach out to us at connect@thehealthspanmd.com or +91 77383 38362, or write to us at B-1, Viral Apartment, Opp. Shoppers Stop, S.V. Road, Andheri (W), Mumbai 400058.