Privacy Policy

1. Introduction

H2Age Enrichment Centre Private Limited ('Company', 'we', 'our', or 'us') is committed to protecting the privacy and personal data of our members, visitors, and other individuals who interact with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (https://happy2age.com/), enrol in our programmes, or interact with us in any other way.

We are committed to complying with the Digital Personal Data Protection Act, 2023 ('DPDPA') and other applicable Indian laws regarding data privacy and security.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our Services.

2. Information We Collect

3. How We Use Your Information

• To provide and manage membership services and activities
• To personalise programmes based on your health needs and preferences
• To communicate with you about events, updates, and changes to services
• To process payments and manage accounts
• To ensure safety and emergency preparedness
• To comply with legal obligations
• To improve our services and develop new programmes
• To send promotional communications (with your consent)
• To conduct research and compile anonymised statistics about our members
• To comply with any applicable law or regulatory requirements

4. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following legal bases:

• Consent: When you have explicitly agreed to the processing of your personal data for specific purposes
• Contractual Necessity: When processing is necessary to fulfil our contractual obligations to you
• Legal Obligation: When we are required to process data to comply with applicable laws
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights

5. Consent Management

When we rely on your consent as the legal basis for processing, you have the right to withdraw your consent at any time. However, please note that the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

To withdraw your consent, you may contact us using the details provided in the 'Contact Us' section of this Privacy Policy.

6. Information Sharing and Disclosure

We may share your information with:

• Healthcare providers and emergency services when necessary for your safety
• Service providers who assist us in operating our programmes (under strict confidentiality agreements)
• Payment processors for secure transaction handling
• Government authorities when required by law
• Research institutions (only anonymised data, never personally identifiable information without explicit consent)

We do not sell, rent, or trade your personal information to third parties for marketing purposes without your explicit consent.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:

• Membership records: Retained for the duration of your membership plus 7 years after termination
• Medical records: Retained as required by applicable healthcare regulations
• Financial records: Retained for 8 years as per Indian tax laws
• Website data: Retained for a period of up to 2 years

After the applicable retention period, we will securely delete or anonymise your personal data.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data both in transit and at rest
• Access controls and authentication procedures
• Regular security assessments and audits
• Staff training on data protection practices
• Incident response procedures

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. These include:

• Essential cookies: Required for the website to function properly
• Analytics cookies: Help us understand how visitors interact with our website
• Preference cookies: Remember your preferences and settings

You can control cookies through your browser settings. However, disabling certain cookies may affect your ability to use some features of our website.

10. Your Rights Under DPDPA 2023

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Grievance Redressal: File a grievance about our data processing practices
• Right to Nominate: Nominate another person to exercise your rights in the event of your death or incapacity

To exercise any of these rights, please contact our Grievance Officer using the details provided below. We will respond to your request within 30 days.

11. Children's Privacy

Our services are primarily designed for adults aged 55 and above. We do not knowingly collect personal data from children under the age of 18. If we become aware that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete such data from our records.

12. Third-Party Links

Our website may contain links to third-party websites or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Effective Date' at the bottom. We may also notify you by email or through a prominent notice on our website.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023:

We will address your grievance within 30 days of receiving it.

15. Contact Us

If you have any questions about this Privacy Policy, your personal data, or our privacy practices, please contact us at: