Effective date: 10 October 2026
This Privacy Policy explains how Trichos Hair Transplant Center ("Trichos", "we", "us") collects, uses, shares and protects your personal data when you visit trichos.in, contact us, or use our services. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made under them.
1. Who we are
Trichos Hair Transplant Center, #302, 3rd Floor, HIG-18, Road No. 1, KPHB Colony, Kukatpally, Hyderabad, Telangana, India. Phone: +91 90005 66767. Trichos is the Data Fiduciary for the personal data described in this policy.
2. Personal data we collect
- Identity and contact details: your name, phone number, email address, city, and age when you share it.
- Health information you choose to share: details of your hair or scalp concern, hair-loss stage, medical history, medicines, and scalp or hair photographs you upload or send to us (for example through our forms, email or WhatsApp).
- Appointment and consultation details: preferred dates, consultation notes, and treatment records created when you visit the clinic.
- Communications: messages, call records and emails between you and Trichos.
- Technical data: IP address, device and browser type, pages visited and how you reached our website, collected through cookies and similar technologies (see section 7).
3. How we use your personal data
- To respond to your enquiry and contact you about your consultation or appointment.
- To assess your hair or scalp concern and provide consultation and treatment.
- To maintain medical records as required by law and professional regulations.
- To send you information you have asked for, such as our hair-loss guide.
- To operate, secure and improve our website.
- To measure the performance of our website and advertising. Health information you share with us is never used for advertising.
4. Legal basis: consent
We process your personal data on the basis of your consent, which you give when you submit a form, upload images, or message or call us. We may also process personal data without consent where the DPDP Act permits it, for example to comply with a legal obligation or to respond to a medical emergency.
5. Withdrawing consent
You may withdraw your consent at any time by writing to our Grievance Officer (section 11). Withdrawing consent does not affect processing that took place before you withdrew it. After withdrawal we will stop processing your data for that purpose and delete it unless we are required by law to keep it (for example, medical records).
6. Who we share your data with
We do not sell your personal data. We share it only with service providers (Data Processors) who help us run our services, under contracts that require them to protect it and use it only on our instructions. These include:
- Website hosting, content management (Sanity) and image hosting (Cloudinary).
- Email delivery (Resend) and customer relationship management (HubSpot) to handle enquiries.
- Messaging providers such as WhatsApp (Meta) when you choose to message us.
- Analytics and advertising tools (Google Analytics, Google Ads, Microsoft Clarity) to understand how our website is used and to measure our advertising. These tools do not receive the health information you share in our forms.
We may also disclose personal data when required by law, a court order or a government authority.
7. Cookies and similar technologies
Essential cookies are needed for the website to work. We also use analytics and advertising cookies to understand how the website is used and to measure our advertising. You can block or delete cookies at any time in your browser settings. See our Cookie Policy for details.
8. How long we keep your data
- Enquiry and contact details: up to 24 months after our last contact with you, unless you become a patient.
- Photographs and health details sent through enquiry forms or messaging: up to 12 months after your enquiry, unless they become part of your medical record.
- Medical records: for the period required by law and professional regulations.
When data is no longer needed, we delete it or make it anonymous.
9. How we protect your data
We use reasonable security safeguards, including access controls, encrypted connections (HTTPS) and limited staff access, to protect personal data against unauthorised access, loss or misuse. If a personal data breach occurs, we will inform the Data Protection Board of India and affected individuals as required by the DPDP Act.
10. Your rights
- Access: ask for a summary of the personal data we hold about you and how we use it.
- Correction and update: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete data we no longer need, subject to legal retention requirements.
- Grievance redressal: raise a complaint with our Grievance Officer, and if unresolved, with the Data Protection Board of India.
- Nomination: nominate another person to exercise your rights in the event of your death or incapacity.
Children: if you are under 18, a parent or lawful guardian must give consent on your behalf.
11. Grievance Officer
Name: B. Subash. Email: grievance@trichos.in. Phone: +91 90005 66767. Address: Trichos Hair Transplant Center, #302, 3rd Floor, HIG-18, Road No. 1, KPHB Colony, Kukatpally, Hyderabad, Telangana. For general questions you can also write to support@trichos.in. We will respond to grievances within the time required by law.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with its effective date.
