Discover Wellness | Privacy Policy

Your Privacy is Our Priority

Welcome to Discover Wellness! We are committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and retain your personal information when you use our website, mobile applications, and related services (collectively, the "Services").

This policy is designed to inform you about your privacy rights and choices regarding your data. We encourage you to read this Privacy Policy carefully so that you understand our practices.

Key Points

We collect personal information to provide and improve our Services, personalize your experience, and comply with legal obligations.
We use strong security measures to protect your information
We respect your privacy rights and provide you with control over your data

Who we are:
This Privacy Policy applies to Discover Wellness, a company incorporated in [Your Country] ([Your Company Registration Number]), with its registered office at [Your Registered Office Address].

INFORMATION WE COLLECT

A. Account Information:
Discover Wellness allows you to create an account using your email address. Alternatively, you may choose to access the website as a guest, with certain functionalities potentially limited.

Username: You can choose a username for your account (optional). We recommend usernames that do not contain any personal information. Usernames may be displayed publicly on the platform (explain settings for public visibility if applicable).
Email Address: Your email address is used to identify your account and send you important information. You can update your email address through your account settings.
Password: We take the security of your account seriously. Your password is stored securely using hashing and salting techniques. We recommend using a strong and unique password for your Discover Wellness account.
Two-Factor Authentication: For an additional layer of security, you can enable two-factor authentication for your account. This requires a verification code from your phone or another device in addition to your password when logging in.
Profile Management: You can access and update your account information, such as your name and email address, through your profile settings. You can also manage additional profile details here (explain further details like profile picture or language settings if applicable).

B. Registration Information:
When you register for a program on Discover Wellness, we collect the following information:
Required Information:

Name
Email Address (used for account creation and program communication)

Optional Information (for personalization):

Birth Year (to personalize content based on age group)
Location (country/region) (to personalize content based on local preferences)
Weight Loss Goals (to tailor program recommendations)
Dietary Preferences (vegetarian, vegan, etc.) (to suggest suitable meal plans, optional)

C. Website Usage Data:
We collect information about your activity on our website to improve your experience and understand how our website is used. We collect this information using cookies, web beacons, server logs, and other tracking technologies. We may also use third-party analytics tools, such as Google Analytics, to collect and analyze website usage data.

The information we collect may include:

Browsing Activity: The pages you visit, the time you spend on each page, and the paths you take while navigating the website.
User Interactions: Clicks, form submissions, button presses, and search queries (if applicable).
Device Information: The type of device you are using, your operating system version, and your screen resolution.
Log Data: Your IP address (anonymized if possible), timestamps, your browser type, and the referring URL.

D. Optional Health Sharing:
Discover Wellness does not collect any specific health information through our website. However, you may choose to share some health information with us at your own discretion. This could include:

Information for Program Recommendations: You may choose to share details about your current weight, activity levels, or dietary habits to receive personalized program recommendations for healthy weight management.
Goal Setting: You may choose to set specific weight loss goals or share progress updates to track your progress.
Community Forums or Support Groups (if applicable): If Discover Wellness offers community forums or support groups, you may choose to share your health experiences with other users in a supportive environment.

Important Note: Sharing any health information on Discover Wellness is entirely optional. You are in control of what information you choose to share. You can choose to share specific details and withhold others.

E. Anonymity and Aggregation (if applicable):
In some cases, we may anonymize or aggregate shared health information for program improvement or research purposes. This anonymized data will not be used to identify you personally.

F. Withdrawal of Consent:
You have the right to withdraw your consent for sharing health information at any time. You can also request for the deletion of previously shared information. Please contact us at [insert email address] if you have any questions or wish to withdraw your consent.

G. Customer Support Interactions:
When you contact our customer support team through email, chat, or phone, we may collect information such as your name, email address, and a description of the issue you are experiencing. We will only collect the information necessary to resolve your inquiry and provide you with the best possible support.

H. Contest or Promotion Entries:
If you enter a contest or promotion that we offer, we may collect information such as your name, email address, and any additional information required for participation. We will use this information to administer the contest or promotion and to contact winners. We may also use this information for marketing purposes with your consent.

I. User-Generated Content:
If you submit reviews, comments, or other content to our website, we may collect information such as your username and profile picture. This information may be publicly viewable depending on the platform. You can manage or delete your user-generated content through your account settings.

J. Surveys and Feedback:
If you submit reviews, comments, or other content to our website, we may collect information such as your username and profile picture. This information may be publicly viewable depending on the platform. You can manage or delete your user-generated content through your account settings.

K. Third-Party Integrations (Optional):
Discover Wellness may integrate with certain third-party apps and services. If you choose to connect your account to a third-party service, we may share information with that service, such as your weight data or activity data. This information sharing is necessary for the functionality of the integration (e.g., importing fitness data). We recommend reviewing the privacy policies of these third-party services for more information about their data collection practices.

2. USE OF INFORMATION:

We use the information we collect for a variety of purposes to provide you with a safe, personalized, and efficient experience on Discover Wellness. Here are some specific examples:

Program Personalization: We use information about your goals (weight loss targets), preferences (dietary restrictions if shared), and basic demographics (birth year) to personalize your program experience. This may include suggesting appropriate meal plans, exercise routines, or content relevant to your age group and needs. Personalization enhances your experience but doesn't restrict access to core program features.
Website Functionality and User Experience: We use website usage data to improve the functionality and user experience of our website. This may involve improving navigation, personalizing content based on your browsing history (if enabled through your settings), and identifying areas for improvement.
Website Analytics: We use anonymized website usage data to analyse website traffic, user behaviour, and understand how users interact with our website. This information helps us improve the overall performance of Discover Wellness.
Customer Support: We use information from customer support interactions to resolve your inquiries, provide you with the best possible support, and improve our customer support services.
Marketing and Communication (with consent): With your consent, we may use your email address to send you targeted marketing communications or promotional offers related to Discover Wellness programs and services. Our targeting considers your interests based on your program usage (e.g., recommending vegetarian recipes if you've opted for vegetarian meal plans). You can always opt-out of receiving these communications by following the unsubscribe instructions in the email or through your account settings.
Data Sharing and Third-Party Disclosures: We may share some user information with third parties in limited circumstances. For example, we may share anonymized data with research partners to improve health and wellness programs. We may also work with data processors who provide specific services (e.g., email marketing platform) under strict data privacy agreements. We will never share your personal information with third parties for their marketing purposes without your consent.
User Control and Consent Management: You can access, update, or delete your information through your account settings. You can also withdraw your consent for specific data uses at any time. For instance, opting out of marketing communications will not affect your access to the core program features, but you might not receive personalized recommendations.

3. SECURITY AND TECHNICAL MEASURES:

Discover Wellness is committed to protecting the security and privacy of your personal information. We implement a variety of technical and organizational measures to safeguard your information against unauthorized access, disclosure, alteration, or destruction. These measures are designed to be consistent with the Indian Digital Personal Data Protection Act (DPA) and include:

A. Data Encryption:
We take data encryption seriously and implement Transport Layer Security (TLS) with strong ciphers to protect your personal information during transmission over the internet. TLS encrypts your information using industry-standard algorithms, making it unreadable to anyone who intercepts it in transit between your device and our servers.

Encryption at Rest (Optional):In addition to TLS encryption in transit, we may also encrypt your personal information at rest on our servers using technologies like AES-256. Encryption at rest adds an extra layer of security by scrambling your data on our storage systems, making it even more difficult for unauthorized individuals to access it even if they gain physical access to our servers.
Key Management (Optional): We employ strict key management practices to safeguard the encryption keys used to protect your information. These keys are securely stored and rotated regularly to further enhance security.
Transparency and Communication: We are committed to transparency regarding our security practices. If a data security incident occurs that compromises your personal information, we will notify you in accordance with the Indian Digital Personal Data Protection Act (DPA) and take necessary steps to mitigate the risk.

B. Pseudonymization for Enhanced Security (India):
Discover Wellness is committed to protecting your personal information and minimizing the risk of identification. In accordance with the Indian Digital Personal Data Protection Act (DPA), we may pseudonymize certain elements of your personal information.

What is Pseudonymization?
Pseudonymization is a data security technique that involves replacing personal identifiers (like your name, email address, or phone number) with artificial identifiers (pseudonyms). These pseudonyms don't directly reveal your identity.

Why Pseudonymize?
We may pseudonymize your data for several reasons:

Reduced Risk of Identification: Even if someone were to gain unauthorized access to pseudonymized data, it would be much more difficult to identify you compared to data containing your original identifiers. This enhances the overall security of your information.
Improved Data Governance: Pseudonymization allows us to manage and analyze data for various purposes (e.g., program improvement, research) while minimizing privacy risks associated with directly identifiable data.

What Data Might Be Pseudonymized (Examples):

We may pseudonymize identifiers within program participation data, such as replacing your name with a unique user ID.
We may pseudonymize certain elements in website usage data before using it for website analytics.

Important to Note:

Pseudonymization is just one layer of data security. We implement other security measures like encryption to further protect your information.
The DPA allows pseudonymization as long as the pseudonyms are managed in a way that allows for re-identification when necessary (e.g., for legal compliance). We will only re-identify you with your consent or if required by law.

C. Multi-Layered Access Controls:
Discover Wellness implements a robust system of access controls to safeguard your personal information. This system ensures that only authorized personnel who have a legitimate business need to access your information can do so.

Access Levels and Permissions: We assign different access levels and permissions to our employees and contractors based on their roles and responsibilities. This ensures that individuals only have access to the specific data they need to perform their job duties.
Access Monitoring and Logging: We monitor and log all access to user information. This allows us to track who accessed what information, when, and from where. This data is used for security purposes and to investigate any potential unauthorized access attempts.
Additional Security Measures: In addition to access controls, we implement other security measures to further protect your information. These may include:
- Multi-factor authentication: This requires users to provide additional verification factors (e.g., a code sent to their phone) beyond their username and password to access their accounts.
- Regular security awareness training: We train our employees on data security best practices to ensure they handle user information responsibly.
- Secure Development Practices: We follow secure development practices throughout the software development lifecycle to minimize vulnerabilities in our systems.

D. Compliance with the DPA:
We are committed to complying with the Indian Digital Personal Data Protection Act (DPA) and all its provisions concerning data security. We will update this clause to reflect any changes in the DPA or our security practices.

Your Role in Security
While we take great care to protect your information, it is also important for you to take steps to protect your own information. Here are some tips:

Choose a strong and unique password for your Discover Wellness account.
Do not share your login credentials with anyone.
Be cautious about opening emails or clicking on links from unknown senders.
Keep your software up to date, including your web browser and operating system.

By working together, we can help ensure the security of your personal information.

4. REGULAR AUDITS AND SECURITY REVIEWS:

Discover Wellness is committed to maintaining the security and integrity of your personal information. To achieve this, we conduct regular audits and security reviews of our systems and processes. These audits are designed to:

A. Proactive Vulnerability Management:
Discover Wellness is committed to proactively identifying and addressing vulnerabilities in our systems and processes to safeguard your personal information. We implement a multi-layered vulnerability management program that includes:

Regular Vulnerability Scans: We conduct regular vulnerability scans of our systems using industry-standard security tools. These scans identify potential weaknesses in our software, hardware, and configurations that could be exploited by attackers.
Security Threat Intelligence: We subscribe to security threat intelligence feeds that provide us with up-to-date information about the latest cyber threats and vulnerabilities. This allows us to prioritize our patching efforts and address newly discovered vulnerabilities promptly.
Bug Bounty Program (Optional): We may offer a bug bounty program where security researchers can receive rewards for reporting vulnerabilities in our systems. This encourages external experts to help us identify and address potential weaknesses.
Patch Management: We have a defined patch management process to ensure timely deployment of security patches for identified vulnerabilities in our software and systems.

B. Focus on Risk Mitigation:
Our vulnerability management program prioritizes addressing vulnerabilities that pose the highest risk to your personal information. We consider factors such as the severity of the vulnerability, the likelihood of it being exploited, and the potential impact on user data.

C. Continuous Monitoring and Evaluation of Security Controls:
Discover Wellness is committed to ensuring the ongoing effectiveness of our security controls in safeguarding your personal information. We implement a program for continuous monitoring and evaluation of our security controls, which includes:

Regular Reviews: We conduct periodic reviews of our security controls to assess their adequacy, relevance, and effectiveness in the current threat landscape. This may involve reviewing access control policies, encryption standards, and incident response procedures.
Security Audits: We conduct regular security audits (internal or external) to obtain an independent assessment of the effectiveness of our security controls. These audits may involve penetration testing (simulated attacks) to identify vulnerabilities in our systems and controls.
User Access Reviews: We conduct regular reviews of user access privileges to ensure that only authorized personnel have access to the specific data they need for their job duties.
Security Incident Response Testing: We periodically test our security incident response plan to ensure we can effectively identify, contain, and recover from a security incident.

D. Maintain Compliance with Regulations:
We conduct audits to ensure our data security practices comply with the Indian Digital Personal Data Protection Act (DPA) and other relevant regulations.

Types of Audits :

Internal Audits: Our internal security team or a designated third-party auditor may conduct regular internal audits to assess our security posture.
Penetration Testing (Optional): We may conduct penetration testing, where ethical hackers attempt to identify vulnerabilities in our systems by simulating real-world attacks. This helps us proactively identify and address potential security weaknesses.

E. Continuous Improvement:
We use the findings from these audits and reviews to continuously improve our security posture. This may involve implementing new security measures, updating existing controls, or enhancing employee security awareness training.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

Contact Us
If you have any questions about this Privacy Policy, please contact us by email: info@discoverwellness.in

<!-- Accordion -->
<div class="accordion" id="accordionExample">
  <div class="accordion-item">
    <div class="accordion-header" id="headingOne">
      <a class="accordion-button" role="button" data-bs-toggle="collapse" data-bs-target="#collapseOne" aria-expanded="true" aria-controls="collapseOne">
        Accordion Item #1
      </a>
    </div>
    <div id="collapseOne" class="accordion-collapse collapse show" aria-labelledby="headingOne" data-bs-parent="#accordionExample">
      <div class="accordion-body">
        <strong>This is the first item's accordion body.</strong> It is hidden by default, until the collapse plugin adds the appropriate classes that we use to style each element. These classes control the overall appearance, as well as the showing and hiding via CSS transitions. You can modify any of this with custom CSS or overriding our default variables. It's also worth noting that just about any HTML can go within the <code>.accordion-body</code>, though the transition does limit overflow.
      </div>
    </div>
  </div>
  <div class="accordion-item">
    <div class="accordion-header" id="headingTwo">
      <a class="accordion-button collapsed" role="button" data-bs-toggle="collapse" data-bs-target="#collapseTwo" aria-expanded="false" aria-controls="collapseTwo">
        Accordion Item #2
      </a>
    </div>
    <div id="collapseTwo" class="accordion-collapse collapse" aria-labelledby="headingTwo" data-bs-parent="#accordionExample">
      <div class="accordion-body">
        <strong>This is the second item's accordion body.</strong> It is hidden by default, until the collapse plugin adds the appropriate classes that we use to style each element. These classes control the overall appearance, as well as the showing and hiding via CSS transitions. You can modify any of this with custom CSS or overriding our default variables. It's also worth noting that just about any HTML can go within the <code>.accordion-body</code>, though the transition does limit overflow.
      </div>
    </div>
  </div>
  <div class="accordion-item">
    <div class="accordion-header" id="headingThree">
      <a class="accordion-button collapsed" role="button" data-bs-toggle="collapse" data-bs-target="#collapseThree" aria-expanded="false" aria-controls="collapseThree">
        Accordion Item #3
      </a>
    </div>
    <div id="collapseThree" class="accordion-collapse collapse" aria-labelledby="headingThree" data-bs-parent="#accordionExample">
      <div class="accordion-body">
        <strong>This is the third item's accordion body.</strong> It is hidden by default, until the collapse plugin adds the appropriate classes that we use to style each element. These classes control the overall appearance, as well as the showing and hiding via CSS transitions. You can modify any of this with custom CSS or overriding our default variables. It's also worth noting that just about any HTML can go within the <code>.accordion-body</code>, though the transition does limit overflow.
      </div>
    </div>
  </div>
</div>
<!-- End Accordion -->