Draft for legal review: this implementation-ready notice must be completed with the final legal entity, postal address, grievance contact, processors, retention periods and production systems before launch.
Information collected
- Contact and account information
- Programme enquiries, attendance, goals and progress notes
- Health context and clinician restrictions supplied for safe participation
- Consent and disclaimer records
- Instructor identity, qualification and review records
- Payments and transaction references
- Uploaded documents and security/audit information
Purposes
Responding to enquiries; screening and programme matching; scheduling and attendance; payment administration; instructor assignment and quality control; safety escalation; legal/audit requirements; and marketing only where a separate preference is recorded.
Access and sharing
Access is role based. An instructor receives information reasonably needed for delivery; administrators handle operations; payment, email, hosting and other processors receive only the data needed for their service. Corporate/RWA reports are aggregate by default and should not include individual health responses.
Uploads
Private documents are stored under the protected uploads area using generated filenames and database permissions. Direct directory access is blocked. Public media is explicitly marked public by an authorised administrator.
Retention and requests
Final retention schedules must be approved before launch. A person may request access, correction, withdrawal of optional marketing consent or deletion subject to legal, safety and transaction-record obligations. Requests should be logged and identity verified before action.
Security and incidents
Controls include HTTPS, role-based access, private-file handlers, upload allowlists, password hashing, audit logs and least-privilege database access. No system can promise absolute security. A documented incident and notification process is required.
Contact
Privacy/grievance email: privacy@satvyog.com (placeholder pending confirmation). This address must be operational before launch.