Privacy Policy

1. Introduction

WellThesis Healthtech Pvt. Ltd. (“WellThesis”, “we”, “our”, or “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information about you when you visit our website at wellthesis.com, submit enquiries, or interact with our services.

This policy is designed to be consistent with applicable Indian data protection law, including the Digital Personal Data Protection Act, 2023 (DPDPA), and anticipates alignment with international standards including the EU General Data Protection Regulation (GDPR) as our operations evolve.

2. Data We Collect

We collect personal data in the following ways:

• •Contact and enquiry forms: Name, email address, organisation name, your message, and the enquiry type you select. This data is submitted voluntarily when you complete a form on our website.
• •Launch list and newsletter sign-ups: Email address and, optionally, your name. Submitted when you register to receive updates.
• •Website usage data: IP address, browser type, device type, pages visited, time spent on pages, and referral source. Collected automatically via analytics tools when you visit our website.
• •Cookies: Small data files placed on your device. See Section 9 for details.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• •Responding to your enquiries, messages, and partnership requests
• •Sending development updates, launch announcements, and newsletters to subscribers who have opted in
• •Improving the content, functionality, and user experience of our website
• •Understanding how visitors engage with our content to inform our communications strategy
• •Complying with legal obligations applicable to our business

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• •Consent: For email communications including the launch list and newsletter. You may withdraw consent at any time by unsubscribing or contacting us.
• •Legitimate interests: For responding to enquiries, improving our website, and maintaining business records. We balance these interests against your privacy rights.
• •Legal obligation: Where required to comply with applicable law.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry and contact form submissions are retained for up to 24 months unless an ongoing business relationship requires longer retention. Email subscriber data is retained until you unsubscribe or request deletion. Website analytics data is retained in aggregated or anonymised form.

6. Third-Party Services

We use the following third-party services, which may process your data on our behalf:

• •Supabase:Database and backend infrastructure. Form submissions and subscriber data are stored in Supabase. Data is hosted on servers in accordance with Supabase’s data processing terms.
• •Google Analytics:We use Google Analytics to understand website usage patterns. Data is collected via cookies and is subject to Google’s privacy policy. Analytics data is anonymised where possible.
• •Email provider: We use a transactional email service to deliver communications. Email addresses are shared with this provider solely for the purpose of sending the communications you have requested.
• •Vercel: Website hosting and edge infrastructure. Access logs and performance data may be processed by Vercel in accordance with their data processing terms.

We require all third-party processors to maintain appropriate security standards and to process data only as directed by us.

7. Your Rights

Depending on applicable law, you may have the following rights in relation to your personal data:

• •Access: Request a copy of the personal data we hold about you
• •Rectification: Request correction of inaccurate or incomplete data
• •Erasure: Request deletion of your personal data, subject to applicable legal obligations
• •Portability: Receive your data in a structured, machine-readable format
• •Objection: Object to processing based on legitimate interests
• •Withdrawal of consent: Withdraw consent for consent-based processing at any time

To exercise any of these rights, please contact us at contact@wellthesis.com. We will respond within the timeframe required by applicable law.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encryption in transit (HTTPS), access controls, and regular review of our security practices. No method of internet transmission is completely secure; we cannot guarantee absolute security but we take our obligations seriously.

9. Cookies

We use the following categories of cookies:

• •Essential cookies: Required for the website to function correctly. These cannot be disabled without affecting site functionality.
• •Analytics cookies: Used to understand how visitors interact with our website. Set by Google Analytics. These are non-essential and you may opt out via your browser settings or the Google Analytics opt-out tool.

You can control or delete cookies through your browser settings. Disabling cookies may affect certain website functionality.

10. International Transfers

Some of the third-party services we use may process data outside India. Where this occurs, we ensure that appropriate safeguards are in place — including reliance on service providers whose terms of service include data protection commitments consistent with applicable law.

11. Children

Our website is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when the most recent revision was made. We encourage you to review this policy periodically. Continued use of our website following a material change constitutes acceptance of the updated policy.

13. Contact for Privacy Requests

For any privacy-related requests, questions, or complaints, please contact:

We aim to respond to all privacy requests within 30 days.