top of page

Privacy Policy

Effective Date: [01.05.2025]
Last Updated: [01.05.2025]

Bodhi Yatra is committed to protecting the privacy and confidentiality of your personal and health-related data. This policy explains how we collect, use, store, and disclose information in compliance with the following Indian laws and guidelines:

  • Information Technology Act, 2000 and IT Rules, 2011

  • Mental Healthcare Act, 2017

  • Digital Personal Data Protection Act, 2023

  • Guidelines for Practice of Telemedicine in India, National Medical Commission, 2022.

  • Telepsychiatry Operational Guidelines-2020. Pub; NIMHANS, Bengaluru-560 029. ISBN No: 978-81-945815-2-9  

  • Guidelines for Tele-Psychotherapy Services, Version 1.0, 14th April 2020 (Department of Clinical Psychology, NIMHANS, Bengaluru)

1. Information We Collect

A. Personal Information

We collect the following:

  • Name, contact details (email, phone)

  • Age, gender, address

  • Government-issued ID (when applicable)

  • Emergency contact (as per Telepsychiatry Guidelines)

B. Health and Therapy Data

  • Mental health history and clinical notes

  • Therapy and session progress records

  • Prescriptions and diagnosis (where applicable)

  • Forms and disclosures submitted online

C. Digital & Technical Information

  • IP address, device/browser information

  • Cookies, website activity logs

  • Date/time and duration of teleconsultations

2. Purpose of Collection

We use your data to:

  • Deliver psychological, psychiatric, and psychotherapeutic care

  • Conduct teleconsultations and therapy sessions

  • Maintain treatment records and progress

  • Enhance user experience through the website

  • Meet legal, regulatory, and audit requirements

3. Teleconsultation and Therapy Protocols

As per Telemedicine and Telepsychiatry Guidelines:

  • All teleconsultations are conducted over secure, encrypted platforms.

  • Informed consent is obtained—implied for first text/audio, and explicit for video or ongoing care.

  • Prescriptions follow TPG and MCI schedules (e.g., no Schedule X or narcotics prescribed remotely).

  • Audio/video consultations may be documented but not recorded without written consent.

  • For children or minors, sessions require consent and oversight of a parent or guardian.

As per Telepsychotherapy Guidelines (2020):

  • Clients are informed about the limitations of remote therapy, such as emergency care constraints.

  • Written telepsychotherapy consent is obtained at initiation, including details of therapist identity, platform used, and session logistics.

  • No part of the psychotherapeutic session is recorded by the therapist or clinic without prior, documented consent.

  • Clients are informed of confidentiality, data handling, crisis protocols, and digital boundaries.

4. Consent and Confidentiality

  • We collect and store explicit consent before initiating any teletherapy or psychiatric treatment.

  • Confidentiality is protected under the Mental Healthcare Act, MCI Code of Ethics, and professional psychotherapeutic standards.

  • You may withdraw consent at any time, which may limit access to certain services.

5. Data Sharing and Disclosure

We may disclose information:

  • Internally, to clinicians involved in your care

  • To insurers, with your written consent

  • To legal authorities in cases of emergencies, abuse, self-harm, or court orders

  • To regulators or oversight bodies for audits, without identifying you unless required

We do not sell or commercially share personal or health data.

6. Cookies and Website Analytics

We use cookies to:

  • Track website usage for performance improvements

  • Remember your session preferences

  • Ensure security and authentication

You may disable cookies in your browser settings.

7. Data Security Measures

We employ:

  • Encrypted transmission (SSL)

  • Secure, access-controlled storage for medical and therapy records

  • Verified and compliant video platforms for sessions

  • Regular privacy audits and cyber risk assessments

8. Data Retention

Records of consultations and therapy are retained for at least 3 years, or longer if legally required. If you request data deletion, we will comply unless retention is required by law.

9. Your Rights

As per applicable Indian data protection laws, you have the right to:

  • Access your personal and therapy records

  • Request corrections or updates

  • Withdraw consent (where applicable)

  • Lodge a complaint with the Data Protection Board of India (once active)

To exercise these rights, please contact us directly.

10. Policy Changes

We reserve the right to update this policy. Any changes will be posted here, with the updated effective date. Continued use of the website or services implies acceptance of the revised policy.

11. Contact Information

If you have questions, concerns, or wish to file a privacy-related request, contact us with the details provided in the appropriate section.

bottom of page