Privacy Policy

Effective Date: July 01, 2026

This Privacy Policy describes how Prana Privé, a label of Precipio Technologies Private Limited, collects, uses, stores, shares, and protects personal data through the Prana Privé website and related digital interactions. This policy is intended to provide transparent notice regarding the processing of digital personal data in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023, which governs the processing of digital personal data for lawful purposes and establishes obligations relating to notice, consent, access, correction, erasure, grievance redressal, and certain cross-border processing matters.

1. Who controls your data

For the purposes of this website and related digital communications, Precipio Technologies Private Limited, operating the Prana Privé label, acts as the entity responsible for determining why and how personal data is processed through the website, inquiry forms, consultations, mailing interactions, and other connected digital touchpoints.

2. Personal data collected

Depending on how the website is used, Prana Privé may collect personal data such as:

  • Full name

  • Email address

  • Phone number

  • City, country, or location details

  • Information submitted through inquiry, consultation, intake, or contact forms

  • Program interest and service preferences

  • Billing and transaction-related details, where applicable

  • Communications sent through forms, email, or other support channels

  • Technical and usage information such as IP address, browser type, device information, pages visited, referring URLs, and similar website analytics data

Under Indian privacy law, notice should make clear what categories of personal data are being processed and the purposes for which the data is collected.

3. How personal data is collected

Personal data may be collected when a visitor:

  • Browses the website

  • Fills out a contact, inquiry, application, booking, or intake form

  • Requests information about services or programs

  • Subscribes to newsletters or updates

  • Makes a payment or requests a payment link

  • Communicates with Prana Privé by email, forms, or other digital means

  • Interacts with cookies, analytics, or similar website technologies, where enabled

The Digital Personal Data Protection Act, 2023 requires clear notice and consent-based processing except where another lawful basis under the Act applies.

4. Purposes of processing

Prana Privé may process personal data for lawful purposes including:

  • Responding to inquiries and requests

  • Assessing suitability for services, programs, consultations, or memberships

  • Scheduling consultations, onboarding, and ongoing client communication

  • Delivering services, support, and client experience communications

  • Processing payments, invoices, confirmations, and related records

  • Maintaining internal records and service administration

  • Improving website performance, usability, and security

  • Sending updates, newsletters, or brand communications, where consent or another valid basis exists

  • Complying with legal, tax, accounting, fraud prevention, and regulatory obligations

  • Establishing, exercising, or defending legal claims

The DPDP Act recognizes processing for lawful purposes, with notice, consent, and specific rights available to data principals, including access, correction, erasure, and grievance redressal.

5. Consent and choices

Where required, Prana Privé will request consent before processing personal data. By voluntarily submitting personal data through the website or related forms, a user may be treated as consenting to the collection and use of that data for the specified purpose, subject to applicable law and any additional disclosures presented at the point of collection.

Users may withdraw consent, request access to their data, seek correction or erasure of their personal data, or raise a grievance through the contact details provided in this policy. The DPDP framework contemplates these rights and requires a publicly available mechanism for such requests and grievance handling.

6. Children’s data

The website and services are not intended for children unless specifically stated otherwise. If any service requires the processing of personal data relating to a child, such processing will be handled only in accordance with applicable legal requirements, including any consent or notice obligations that may apply under Indian law.

7. Cookies and analytics

The website may use cookies, pixels, analytics tools, and similar technologies to understand website traffic, improve functionality, maintain security, and enhance user experience. These tools may collect technical and usage data such as device identifiers, browser information, approximate location, pages viewed, and interaction patterns.

Where legally required, cookie or tracking choices should be presented clearly and transparently. Privacy notices are expected to explain categories of data, purposes, and relevant request mechanisms in a clear and accessible manner.

8. Payment information

If payments are enabled through the website, payment transactions may be processed through third-party payment service providers. Prana Privé may receive limited transaction-related information such as payer name, payment status, transaction reference, amount, and billing contact details, but full card or banking credentials are typically processed by the payment provider and not stored directly by the website operator unless expressly stated.

Users should also review the privacy and security policies of any third-party payment processors used on the website.

9. Sharing of personal data

Prana Privé may share personal data only where reasonably necessary, including with:

  • Technology, hosting, analytics, CRM, scheduling, communication, and email service providers

  • Payment processors and financial service providers

  • Professional advisers such as lawyers, accountants, auditors, or consultants

  • Regulatory bodies, courts, law enforcement, or government authorities where required by law or legal process

  • Service partners engaged in operating, administering, securing, or improving the website or client experience

The DPDP Act contemplates obligations on data fiduciaries regarding secure processing and lawful handling of personal data, including breach-related obligations and overall data governance responsibilities.

10. Cross-border processing

Personal data may be processed or stored outside India where service providers, cloud infrastructure, or operational systems are located internationally. The DPDP Act includes a framework for processing personal data outside India, subject to applicable restrictions and government-notified limitations, if any.

11. Data retention

Personal data will be retained only for as long as reasonably necessary for the purpose for which it was collected, or for longer where required for legal, accounting, tax, fraud prevention, dispute resolution, contractual, or regulatory reasons. Once no longer needed, data should be deleted, anonymized, or securely archived in accordance with applicable policy and law.

12. Data security

Prana Privé takes reasonable technical, organizational, and administrative steps to protect personal data against unauthorized access, misuse, loss, disclosure, alteration, or destruction. However, no website, platform, or method of transmission over the internet can be guaranteed to be completely secure.

Indian privacy guidance emphasizes reasonable security safeguards and breach-related obligations, including prompt notification requirements under the developing DPDP regime.

13. Your rights

Subject to applicable law, individuals may have the right to:

  • Request information about the personal data processed about them

  • Request correction of inaccurate or incomplete personal data

  • Request erasure of personal data, where appropriate

  • Withdraw consent, where processing is based on consent

  • Seek grievance redressal

  • Nominate another person to exercise rights in specified circumstances, where applicable under law

The Digital Personal Data Protection Act, 2023 expressly provides for rights relating to access, correction and erasure, grievance redressal, and nomination.

14. Grievance redressal and contact

To exercise rights, withdraw consent, or raise privacy-related concerns, users may contact:

Prana Privé
A label of Precipio Technologies Private Limited
Email: info@pranaprive.com
Website: https://pranaprive.com

The DPDP framework expects data fiduciaries to provide a publicly available mechanism for requests and grievances and to address grievances within prescribed timelines under the evolving rules framework.

15. Third-party websites and services

The website may contain links to third-party websites, social platforms, forms, booking tools, or payment systems. Prana Privé is not responsible for the privacy practices, content, or security of third-party services, and users should review those third-party policies independently.

16. Policy updates

This Privacy Policy may be updated from time to time to reflect changes in the website, legal requirements, services, business practices, or data processing activities. The updated version will be posted on the website with a revised effective date.

17. Important implementation note

This document is a general website privacy policy draft and should be customized before publication with final business contact details, actual processors used, payment providers, email platform, analytics stack, cookie practice, data retention periods, and any program-specific health or intake disclosures. If Prana Privé collects health-related intake data, additional legal review is recommended before publication because that may require more specific disclosures, safeguards, and contractual controls than a standard website privacy policy.