Privacy Policy
Your privacy and clinical health confidentiality are sacred. Learn how DRIVANA protects your information with doctor-led integrity and rigorous security.
256-Bit SSL Encryption
Clinical-grade digital protocols protect all bookings and health questionnaires.
Zero Data Sales
We never monetize, sell, or rent your personal identity or clinical history.
Statutory DPDP Compliance
Fully aligned with Indian Information Technology and Personal Data Protection laws.
1. Overview & Commitment to Privacy
At DRIVANA ("we," "our," "us," or the "Company"), operated in Bangalore, Karnataka, India, we recognize that our clients place extraordinary trust in us when inviting our clinical team into their private residences, offices, or private venues for luxury IV therapy, aesthetic rituals, and personalized wellness consultations.
This Privacy Policy sets forth our practices regarding the collection, use, processing, storage, disclosure, and safeguarding of your personal data and Sensitive Personal Data or Information (SPDI) in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023 (DPDP Act), and applicable healthcare confidentiality standards.
By accessing our website (dripwithdrivana.com), booking an at-home IV or aesthetic treatment, enrolling in a The Reliable NutrAid educational program, or purchasing wellness apothecary products, you acknowledge that you have read, understood, and consented to the practices detailed in this Policy.
2. Information We Collect
To provide safe, doctor-supervised, and customized wellness services, we collect several categories of information:
A. Personal Identification & Contact Data
Full legal name, date of birth, age, biological sex, contact phone number (WhatsApp/mobile), email address, residential/dispatch address, landmark, and emergency contact details.
B. Sensitive Health, Clinical & Medical History (SPDI)
Crucial for pre-treatment triage and safety: vital signs (blood pressure, heart rate, oxygen saturation), self-reported medical history, current pharmaceutical medications, known drug or food allergies, pregnancy/lactation status, history of renal, hepatic, or cardiovascular disorders, G6PD enzyme status, recent surgeries, and notes recorded by our consulting physicians or registered nursing personnel.
C. Booking & Transaction Records
Treatment history, selected cocktail formulations, date and time preferences, clinician dispatch logs, invoicing records, and masked payment confirmation tokens. (Note: We do not store raw credit card numbers or UPI PINs; all payments are processed through RBI-authorized, PCI-DSS compliant payment gateways).
D. Technical & Device Metadata
IP addresses, browser type, operating system, device identifiers, referring URLs, and aggregated analytics gathered via cookies to ensure seamless website performance and security.
3. How We Use & Process Your Data
We strictly process your personal and health information for lawful and legitimate purposes:
- Medical Screening & Triage: To evaluate your medical suitability, screen for potential contraindications, and formulate tailored IV vitamin doses under physician supervision.
- Clinical Dispatch & Logistics: To route our certified registered nurses and healthcare staff to your doorstep across Bangalore efficiently and safely.
- Post-Treatment Care & Monitoring: To conduct post-drip follow-ups, monitor treatment outcomes, and record adverse reaction logs if any.
- Education & Product Fulfillment: To deliver The Reliable NutrAid educational materials, issue certificates, and deliver clinical skincare and apothecary orders.
- Legal Compliance & Audit Trails: To fulfill statutory accounting, tax, and medical record maintenance obligations mandated by Indian regulatory authorities.
4. Informed Consent & Strict Non-Disclosure
OUR SOLEMN PROMISE: DRIVANA will NEVER sell, rent, trade, or monetize your personal identity or medical health data to third-party advertisers, insurance brokers, or data aggregators.
We disclose your data exclusively on a strict need-to-know basis to:
- Assigned Healthcare Staff: The certified registered nurse and supervising medical practitioner directly responsible for assessing and administering your treatment.
- Accredited Pharmacy & Diagnostic Partners: For procuring doctor-prescribed, pharmaceutical-grade formulations or laboratory test panels.
- Secure Technology Service Providers: Trusted cloud infrastructure (AWS/Vercel), encrypted communication gateways, and RBI-licensed payment processors operating under binding data protection agreements.
- Statutory Authorities: Only when compelled by law, court order, or official regulatory directive in accordance with Indian judicial processes.
5. Clinical Security, Encryption & Retention
We maintain physical, technical, and managerial safeguards to protect your personal and medical records against unauthorized access, alteration, disclosure, or destruction:
End-to-End Encryption
All digital communications and data transmissions are encrypted using standard SSL/TLS 256-bit protocols.
Role-Based Access Control
Access to sensitive medical triage forms is strictly restricted to licensed clinical personnel involved in your direct care.
Data Retention: We retain clinical records for the minimum period required by medical practice guidelines and applicable tax/accounting regulations, after which data is securely anonymized or permanently expunged.
6. Your Legal Rights & Data Choices
Under the Digital Personal Data Protection Act, 2023, and applicable laws, you hold the following rights regarding your personal data:
- • Right to Review & Correction: You may request a copy of your personal data or request updates to inaccurate information.
- • Right to Withdraw Consent: You may withdraw your consent for optional marketing communications at any time. (Note: Clinical records cannot be immediately deleted if retention is statutorily required for medical safety audits).
- • Right to Grievance Redressal: You have the right to register concerns or grievances regarding data processing with our designated Grievance Officer.
7. Protection of Minors
DRIVANA's intravenous and aesthetic services are strictly formulated and intended for adults aged 18 and above. We do not knowingly collect personal data from or administer IV treatments to minors without express, verified, written consent and physical presence of a parent or legal guardian, accompanied by specific medical authorization.
8. Grievance Officer & Official Inquiries
In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of our designated Grievance Officer for privacy and data protection matters are provided below:
We endeavor to respond to and resolve all verified privacy concerns within 30 business days.
Let's drip together.
Reserve your DRIVANA session in under sixty seconds. Same-day availability across Bangalore.