Privacy Policy

We believe in the principle of data minimization. We only collect personal data that is strictly relevant and necessary to provide our services, respond to inquiries, and ensure seamless technical functionality.

A. Information You Voluntarily Provide to Us

When you interact with our website forms—such as the “Let's Talk” inquiry modal, the contact page form, appointment booking forms, or when you reach out directly via telephone, email, or WhatsApp—we may collect:

• Identity Details: Your full name, preferred salutation, or organizational affiliation.
• Contact Details: Your email address, telephone or mobile phone number (including country code), and general geographic location.
• Inquiry & Message Content: Specific details, questions, requirements, or context that you include in your message or booking request.
• Appointment Preferences: Selected service category (e.g., Anxiety Counselling, Therapy, Psychological Testing, Healthcare Process Excellence), preferred consultation dates, and times.

B. Technical & Browsing Data (Collected Automatically)

When you visit and navigate our website, our hosting infrastructure (Vercel) automatically logs standard, non-personally identifying technical data necessary for transmitting web pages:

• Internet Protocol (IP) address.
• Browser type, engine version, and device operating system.
• Date, time, and duration of page requests.
• Uniform Resource Locators (URLs) requested and referring web pages.

C. Information We Do Not Collect

We do not collect financial account numbers, credit/debit card numbers, or biometric information through this website. We do not execute online financial transactions directly on this informational platform.

We process personal data only for lawful, transparent, and defined purposes. Specifically, your data is used for:

We do not use your personal information for automated decision-making, behavioral profiling, or unsolicited third-party telemarketing.

Your information is disclosed strictly on a limited, need-to-know basis under the following defined circumstances:

• Internal Professional Staff: Authorized clinicians, therapists, consultants, and administrative staff who require access to respond to your inquiry or fulfill your engagement, all bound by strict non-disclosure obligations.
• Vetted Infrastructure Providers: Trusted technical service providers (such as Vercel for website hosting and secure corporate email providers) who process data strictly under our direction and subject to confidentiality agreements.
• Legal & Law Enforcement Obligations: If compelled by a valid judicial court order, subpoena, law enforcement request, or statutory mandate under Indian law.
• Protection of Vital Interests: In grave emergency circumstances to prevent physical harm, safeguard the safety of an individual, or protect the integrity and security of our website and services.

We implement robust technical and organizational security measures designed to safeguard your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure.

• End-to-End Encryption in Transit: All web traffic between your browser and our servers is secured using industry-standard 256-bit Transport Layer Security (TLS/HTTPS).
• Hardened HTTP Security Headers: Our production deployment enforces HTTP Strict Transport Security (HSTS), X-Content-Type-Options: nosniff, X-Frame-Options: DENY, and strict Content Security Policies (CSP).
• Access Control & Least Privilege: Administrative access to server logs, email systems, and inquiries is restricted strictly to authenticated personnel via multi-factor authentication (MFA).

Please note that while we adhere to recognized industry standards, no method of electronic transmission over the internet or method of electronic storage is completely infallible. We encourage users to maintain discretion when transmitting sensitive personal information online.

We take pride in maintaining a clean, privacy-first web experience:

Our website may feature links to external third-party services and communication channels, including:

• WhatsApp (wa.me) for instant appointment scheduling.
• Social media profiles (LinkedIn, Facebook, Instagram).
• External email clients (mailto:) and telephonic links (tel:).
• Map directions for visiting our Hyderabad physical office.

When you click on an external link or leave our website, you are governed by the privacy practices and terms of service of those third-party platforms. Boldfuse exercises no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third-party websites or services. We encourage you to inspect the respective policies of those platforms.

We retain personal data only for as long as is necessary to satisfy the specific purposes for which it was gathered:

• General Inquiries: Contact messages and inquiries submitted via forms are typically retained for 12 to 24 months to address ongoing communications, after which they are purged or permanently anonymized.
• Client & Consultation Records: Data relating to established professional consulting or psychological counselling engagements is retained in accordance with applicable medical council guidelines, clinical standards, and statutory limitation periods under Indian law.
• Server Logs: Routine access logs generated by our hosting provider are systematically rotated and erased periodically (typically within 30 to 90 days).

When personal data reaches the end of its retention lifecycle or is no longer needed, it is deleted through secure digital erasure or irreversible anonymization.

As a Data Principal under the Digital Personal Data Protection Act, 2023 (India), you possess statutory rights concerning your personal information:

How to Exercise Your Rights: To submit a formal request, please email us at info@boldfuse.in with the subject “Data Privacy Request.” We will review, verify, and process your request within the statutory timeline prescribed under Indian law (within 30 days).

Boldfuse provides dedicated child, adolescent, and parenting counselling services. However, our digital website and online forms are strictly intended for adults and parents or legal guardians.

In compliance with Section 9 of the DPDP Act, 2023, we do not knowingly collect or process personal data from individuals under the age of 18 without verifiable parental or guardian consent. All consultations and booking inquiries for minors must be initiated, consented to, and accompanied by a parent or legal guardian.

If you believe that a minor has provided us with personal data without verifiable parental consent, please contact us immediately at info@boldfuse.in, and we will take immediate steps to delete such information from our records.

We may periodically revise or update this Privacy Policy to reflect technological updates, operational adjustments, or evolving legal standards under Indian jurisprudence.

When amendments occur, we will revise the “Last Updated” date at the top of this page. Material revisions will be highlighted prominently on the website. We advise checking this page periodically. Continued use of our website following the posting of updates constitutes acceptance of the amended policy.

If you have any questions, feedback, or concerns regarding this Privacy Policy, or if you wish to exercise your statutory rights as a Data Principal, please connect with us using the official details below: