This Privacy Notice and Privacy Policy (“Policy”) explains how Privy Wellness LLP (“Company”, “we”, “us”, “our” or “LeanLife Clinic”) collects, receives, processes, uses, stores, protects and discloses Personal Data of individuals (“you”, “your” or “Data Principal”) who access or use our website, services, programmes, consultations and related digital interfaces available through https://www.leanlifeclinic.me/ (“Website” or “Platform”).
LeanLife Clinic provides medically guided weight-management and wellness services, including consultations, health assessments, lifestyle and nutrition support, health coaching, monitoring and other related services (“Services”).
This Policy is intended to explain our privacy practices and is designed with reference to the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), the Information Technology Act, 2000, applicable rules and regulations, and other applicable Indian laws.
The DPDP Act and DPDP Rules have a phased commencement framework. Accordingly, references in this Policy to particular statutory rights, obligations, procedures or timelines shall apply to the extent that the relevant provisions are in force and applicable to the Company. (MeitY)
By accessing or using the Website or Services, submitting information through our forms, communicating with us, booking a consultation, enrolling in a programme, or otherwise providing Personal Data after being presented with this Policy, you acknowledge that you have read and understood this Policy. Where consent is required by applicable law, we will obtain consent through an appropriate consent mechanism.
If you do not agree with the applicable terms of this Policy, you should refrain from submitting Personal Data or using those portions of the Website or Services that require such information.
LeanLife Clinic is a weight-management and wellness service operated by:
Privy Wellness LLP
Website:
https://www.leanlifeclinic.me/
Email:
info@leanlifeclinic.me
Phone:
+91 8879988776
For the purposes of applicable data-protection law, Privy Wellness LLP may act as the Data Fiduciary in relation to Personal Data processed by it for the purposes described in this Policy.
This Policy applies to Personal Data collected or processed through:
This Policy does not override any specific consent notice, medical consent form, programme terms, contractual terms or other privacy notice that may be presented to you for a particular service.
Depending on your interaction with LeanLife Clinic, we may collect and process the following categories of Personal Data.
This may include:
Where relevant to the Services, we may collect information such as:
Health information is treated as confidential Personal Data and is subject to appropriate access and security controls.
Depending on the Services used, we may collect information relating to:
During interactions with doctors, nutritionists, health coaches, customer-care personnel or other authorised personnel, we may collect information contained in:
Where you undertake laboratory or diagnostic testing through a laboratory partner and authorise the sharing of results with us, we may receive:
Such information may be incorporated into your health record or made available to authorised healthcare professionals involved in your care.
Where you purchase Services or products, we may process:
Payment-card or banking credentials may be processed directly by authorised payment service providers rather than being stored by us, depending on the payment mechanism used.
When you use our Website or digital interfaces, we may automatically collect information such as:
We may use cookies, pixels, tags, SDKs and similar technologies to:
You may manage cookies through your browser or device settings. Restricting certain cookies may affect Website functionality.
We may retain communications between you and LeanLife Clinic through:
These records may be retained to respond to requests, maintain service records, resolve disputes, improve customer support, maintain continuity of service and comply with applicable requirements.
A consultation may be recorded only where recording is proposed and appropriate consent has been obtained.
Where a recording is made, it may contain:
Recordings will be used only for legitimate purposes disclosed at the time of recording, such as clinical quality, service continuity, safety, training or compliance, and will not be used for promotional purposes without separate appropriate consent.
Where feasible, an alternative consultation mechanism may be provided if you do not wish to be recorded.
We may collect Personal Data through the following means.
You may provide Personal Data when you:
Our authorised healthcare and operational personnel may generate information during the delivery of Services, including consultation notes, recommendations, prescriptions, treatment plans, follow-up records and programme-progress information.
Where authorised and necessary, we may receive Personal Data from:
We will seek to process such information in accordance with applicable law and the purpose for which it was provided.
Where LeanLife Clinic introduces or enables integration with authorised health devices or platforms, and where you provide the required permission, information may include:
Such integrations will be subject to the permissions and functionality of the relevant third-party platform.
You may discontinue an integration by revoking the applicable permission through the relevant platform or device, subject to any information already lawfully processed or retained.
We may process Personal Data for the following purposes:
To:
Where applicable, to:
To:
To:
To:
To send necessary service-related communications, including:
Where required, we may send promotional communications only where an appropriate consent or other lawful basis exists.
These communications may relate to:
You may opt out of promotional communications at any time using the unsubscribe mechanism provided or by contacting us.
Opting out of promotional communications will not ordinarily affect essential service-related communications.
We may use Personal Data, aggregated information, pseudonymised information or anonymised information, as appropriate, to:
Where information is irreversibly anonymised so that it can no longer reasonably identify an individual, it may be used for legitimate analytical, statistical or research purposes subject to applicable law.
We may process information to:
We may process and disclose Personal Data where reasonably necessary to:
Depending on the nature of the processing and the applicable legal framework, Personal Data may be processed on the basis of:
Where consent is required, we will seek consent through a clear affirmative action and will provide information necessary to enable informed consent.
The DPDP Act establishes consent as one of the principal grounds for processing digital Personal Data and provides requirements concerning notice, consent and withdrawal. The DPDP Rules further prescribe requirements for notices and consent mechanisms. (MeitY)
Where consent is required, it may be obtained through:
Separate consent may be obtained for activities such as:
We will not make optional consent a condition of receiving Services where such consent is not necessary for the relevant Service.
Where processing is based on consent, you may withdraw your consent through a mechanism that is reasonably accessible and, where required by law, comparable in ease to the mechanism through which consent was provided.
You may contact us at:
Email:
info@leanlifeclinic.me
Phone/WhatsApp:
+91 8879988776
Where applicable, requests may also be submitted through the relevant Website or communication channel through which consent was provided.
Withdrawal of consent will not affect the lawfulness of processing undertaken before the withdrawal.
Withdrawal may affect our ability to provide certain Services where the relevant Personal Data is necessary for that Service.
Where continued retention or processing is required by law or otherwise permitted under applicable law, we may retain or process the relevant information despite withdrawal, subject to applicable requirements.
We may appoint third-party vendors and service providers to process Personal Data on our behalf.
Such service providers may include providers of:
Where appropriate, we will require such processors to maintain appropriate confidentiality and security measures and to process Personal Data only for authorised purposes.
We seek to maintain appropriate controls over the location and processing of Personal Data.
Where Personal Data is processed or stored outside India through a service provider or technology platform, such processing will be undertaken subject to applicable Indian law, contractual safeguards and other appropriate technical and organisational measures.
Any future restrictions or requirements notified by the Government of India concerning transfer of Personal Data outside India will be followed to the extent applicable.
We implement reasonable technical, organisational and administrative measures appropriate to the nature of the Personal Data we process.
Depending on the system and service, these measures may include:
Access to health and other confidential information is restricted to authorised personnel who require access for legitimate business or healthcare purposes.
Where third-party processors are engaged, we seek to impose appropriate confidentiality and security obligations through contractual arrangements.
No electronic system or method of transmission can be guaranteed to be completely secure. Accordingly, while we take reasonable precautions, absolute security cannot be guaranteed.
If we become aware of a Personal Data breach, we will assess the incident and take appropriate measures to contain, investigate, mitigate and remediate the incident.
Where notification is required under applicable law, we will notify the relevant individuals and/or authorities in the manner and within the timelines prescribed by law.
The DPDP Rules prescribe specific obligations relating to personal data breach notification, including notification to affected Data Principals and the Data Protection Board in circumstances covered by the Rules. (MeitY)
We retain Personal Data only for as long as reasonably necessary for:
When Personal Data is no longer required and there is no legal or other lawful basis for continued retention, we will take reasonable steps to delete, destroy or irreversibly anonymise it.
Where applicable provisions of the DPDP Rules prescribe specific retention or deletion requirements, we will follow those requirements. The notified Rules include provisions concerning specified retention periods, advance notice before certain scheduled erasures, and retention of certain processing-related data and logs for prescribed periods. (MeitY)
Different categories of information may therefore have different retention periods.
Subject to applicable law and the relevant provisions being in force, you may have rights including:
The scope, procedure and availability of these rights may be subject to the applicable law, commencement dates, exemptions and other statutory conditions.
The DPDP Act provides for Data Principal rights including access, correction, erasure, grievance redressal and nomination, subject to the Act and its applicable commencement framework. (MeitY)
When you request access, correction, deletion, withdrawal or other action concerning Personal Data, we may request reasonable information to verify your identity.
This is intended to prevent unauthorised access to or modification of Personal Data.
We will use verification information only for the purposes reasonably necessary to process and secure your request, subject to applicable law.
LeanLife Clinic's Services are primarily intended for individuals who are 18 years of age or older.
We do not knowingly seek to collect Personal Data from children for Services that are not intended for them.
Where applicable law permits or requires processing of a child's Personal Data for healthcare or another lawful purpose, we will follow the applicable statutory requirements, including requirements concerning verifiable parental consent or applicable exemptions.
The DPDP Rules contain specific provisions concerning verifiable consent for children's Personal Data and certain permitted processing by healthcare-related entities. (MeitY)
If you believe that a child has provided Personal Data to us in circumstances where such collection was not appropriate, please contact us so that we can review the matter.
Where applicable law requires consent from a lawful guardian for processing Personal Data of a person with disability, we will follow the applicable requirements for obtaining and verifying such consent.
Where appropriate, we may request reasonable documentation establishing the lawful guardian's authority.
Any such documentation will be used only for legitimate verification and compliance purposes.
The Website may contain links, integrations or references to third-party websites, applications, social-media platforms, payment providers or other services.
Third-party services operate under their own privacy policies and terms.
We are not responsible for the privacy practices of third-party websites or services that we do not control.
We encourage you to review the privacy policy of any third-party service before providing Personal Data through that service.
Where you have provided the required consent, we may contact you through:
You may opt out of promotional communications at any time.
Even after opting out of marketing communications, you may continue to receive essential communications relating to your existing Services, appointments, payments, security or other operational matters.
LeanLife Clinic's Website may contain general health, wellness, educational or programme-related information.
Such information should not be treated as a substitute for individual medical advice, diagnosis or treatment.
Healthcare decisions should be made in consultation with an appropriately qualified healthcare professional.
Where medical services are provided through LeanLife Clinic, applicable medical decisions are made by the relevant qualified healthcare professional based on the information available to them.
For questions concerning this Policy, Personal Data processing, privacy requests or grievances, you may contact:
Grievance Officer
Name: Bharat AroraPostal Address:
11, Ground Floor, West Wing,General Support
Privy Wellness LLP / LeanLife Clinic
Website:
https://www.leanlifeclinic.me/
Support Email:
info@leanlifeclinic.me
Contact:
+91 8879988776
You may contact the Grievance Officer for matters including:
We will process grievances and requests in accordance with applicable law and the procedures applicable to the relevant request.
Where the applicable statutory framework provides an escalation mechanism to the Data Protection Board of India, you may use that mechanism after following the applicable grievance process.
The Data Protection Board of India has been established under the DPDP framework. (MeitY)
We aim to:
Statutory timelines prescribed by applicable law will prevail over the indicative internal timelines stated in this Policy.
Where the DPDP Act and Rules prescribe specific grievance timelines after the relevant provisions become applicable, those statutory requirements will be followed.
We may update this Policy from time to time to reflect:
The updated Policy will be published on: https://www.leanlifeclinic.me/
The “Last Updated” date at the beginning of this Policy will indicate when the Policy was most recently revised.
Where required, we may notify users of material changes through appropriate communication channels, including email, Website notices, WhatsApp, SMS or other appropriate means.
This Policy shall be governed by and interpreted in accordance with the laws of India, subject to applicable data-protection, consumer-protection, healthcare and other applicable laws and regulations.
Any disputes relating to this Policy shall be subject to the jurisdiction of the competent courts and authorities in India, subject to applicable law.
If you have any questions regarding this Privacy Policy or the manner in which your Personal Data is processed, please contact:
Privy Wellness LLP
Operating Brand: LeanLife Clinic
Website:
https://www.leanlifeclinic.me/
Email:
info@leanlifeclinic.me
Phone:
+91 8879988776
Grievance Officer:
Bharat Arora, COO
Email:
bharat@nuhealth.me
Phone:
+91-7304931010
Postal Address:
11, Ground Floor, West Wing,
21. Social Media and Digital Advertising
We may maintain or use digital channels such as:
If you interact with us through these platforms, the relevant platform may independently collect and process information according to its own privacy policy and terms.
Where permitted by applicable law, we may use information generated through these interactions to respond to enquiries, provide support, measure campaign performance and manage communications.
We will seek consent where required for processing that requires consent.