Privacy Policy

Home / Privacy Policy

Effective Date: 01.01.2026 | Last Updated: 22.07.2026

Healing by Ritika ("we," "us," "our"), owned and operated by Ritika Chandak, is committed to protecting the privacy of every person who visits our website or engages with our energy healing services ("you," "your," "Client"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights you have over your information. As our clients join us from countries around the world, this Policy has been drafted with reference to internationally recognised privacy principles, including the EU General Data Protection Regulation (GDPR), so that your data is handled with a consistently high standard of care regardless of where you live.

1. Information We Collect

1.1 Information You Provide Directly

Full name, email address, phone/WhatsApp number, and country of residence.
Date of birth and, where relevant to your session (e.g., certain readings or chakra work), time and place of birth.
Health, emotional, relationship, career, or personal background information you choose to share before or during a session, to the extent necessary to provide the Services.
Payment-related information such as billing name, billing address, and transaction reference (your full card or bank details are collected and processed directly by our third-party payment processors, not stored by us).
Any messages, emails, or forms you submit to us, including booking forms, intake forms, and testimonials.

1.2 Information Collected Automatically

Technical information such as IP address, browser type, device type, operating system, and general location (city/country level).
Usage data such as pages visited, time spent on the website, referring website, and click patterns, collected via cookies and analytics tools.

1.3 Information from Third Parties

If you interact with us through Instagram, Facebook, LinkedIn, or similar platforms, we may receive limited information (such as your public profile name and message content) as permitted by that platform's own privacy policy.

2. How We Use Your Information

We use the personal information we collect to:

Schedule, prepare for, and deliver your energy healing sessions, readings, or programs.
Communicate with you regarding bookings, confirmations, rescheduling, and follow-ups.
Process payments and maintain accurate billing and transaction records.
Personalise your healing experience based on the background you have shared with us.
Send you newsletters, spiritual insights, offers, or updates, where you have opted in to receive marketing communications.
Improve our website, content, and Services based on aggregated, anonymised usage patterns.
Comply with applicable legal, tax, accounting, or regulatory obligations.
Protect the safety, rights, and property of our clients, our practice, and the public.

3. Legal Basis for Processing (For Clients in the EU/EEA and UK)

Where the GDPR applies to you, we rely on the following legal bases to process your personal data:

Consent - for example, when you opt in to receive our newsletter or marketing communications, or when you share sensitive health-related information for your session.
Performance of a contract - to book and deliver the Services you have requested and to process your payment.
Legitimate interests - to improve our Services, maintain website security, and communicate with existing clients about relevant offerings, provided this does not override your fundamental rights.
Legal obligation - where we are required to retain certain records for tax, accounting, or regulatory purposes.

Because some information you may share (such as health-related details) is considered "special category data" under GDPR, we only collect and use this information with your explicit, informed consent, and solely for the purpose of providing your requested session.

4. Cookies and Similar Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience, understand website traffic, and support marketing efforts.

Essential cookies: necessary for the website to function correctly (e.g., page navigation, booking forms).
Analytics cookies: help us understand how visitors use our website (e.g., Google Analytics), allowing us to improve content and user experience.
Marketing/advertising cookies: used by platforms such as Meta (Facebook/Instagram) or LinkedIn to measure engagement and, where applicable, deliver relevant content.

You can control or disable cookies through your browser settings at any time; however, disabling certain cookies may affect the functionality of the website, such as booking forms.

5. Payment Information

All payments made through our website or booking links are processed by secure, PCI-DSS-compliant third-party payment gateways (such as Razorpay, PayPal, Stripe, or similar providers). We do not directly collect, view, or store your complete card number, CVV, or banking credentials. These are handled entirely within the secure systems of our payment partners, in accordance with their own privacy and security policies.

6. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share limited information only in the following circumstances:

With trusted third-party service providers who support our operations, such as payment processors, website hosting providers, email/newsletter platforms, and scheduling tools - solely to the extent necessary for them to perform their function, and under confidentiality obligations.
With your explicit consent, such as when you agree to have your testimonial, first name, or experience featured publicly.
Where required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Healing by Ritika, our clients, or the public.
In connection with a business transition, such as a merger, acquisition, or sale of assets, in which case your information may be transferred as part of that transaction, subject to confidentiality safeguards.

7. International Data Transfers

As Healing by Ritika serves clients across the USA, UK, Canada, Australia, UAE, Singapore, and other countries, your personal information may be transferred to, stored, and processed in India or in the country where our service providers (such as hosting or payment platforms) operate. Where such transfers occur from the EU/EEA or UK, we take reasonable steps to ensure an adequate level of protection is applied to your data, consistent with recognised safeguards such as standard contractual clauses, where applicable.

8. Data Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction, including secure website hosting, restricted access to client records, and use of reputable, secure third-party platforms for payments and data storage. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Policy, including providing ongoing Services, maintaining business records, and complying with legal, tax, or accounting obligations.
Session notes and client background information are typically retained for the duration of our working relationship and for a reasonable period afterward, in case you return for further sessions, unless you request earlier deletion.
Where you withdraw consent or request deletion, we will remove or anonymise your personal information within a reasonable timeframe, except where retention is required by law.

10. Marketing Communications

We will only send you newsletters, promotional content, or marketing emails if you have explicitly opted in (for example, by subscribing through a form on our website or providing your email for a lead magnet/free resource).
Every marketing email will include a clear and simple option to unsubscribe at any time.
Opting out of marketing communications will not affect service-related communications, such as booking confirmations or session details.

11. Your Privacy Rights

Depending on your country of residence, you may have some or all of the following rights regarding your personal information:

Right to Access - request a copy of the personal information we hold about you.
Right to Rectification - request correction of inaccurate or incomplete information.
Right to Erasure ("Right to be Forgotten") - request deletion of your personal information, subject to certain legal exceptions.
Right to Restrict Processing - request that we limit how we use your information in certain circumstances.
Right to Data Portability - request your information in a structured, commonly used, machine-readable format.
Right to Object - object to our processing of your information based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent - withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Right to Lodge a Complaint - with your local data protection authority, if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us using the details in Section 15 below. We will respond to your request within a reasonable timeframe, and in any event within the period required by applicable law.

12. Children's Privacy

Our Services and website are not directed at children under the age of 18. We do not knowingly collect personal information from children. Sessions for minors are only conducted with the informed consent and direct involvement of a parent or legal guardian, who is responsible for the accuracy of any information provided on the minor's behalf. If we become aware that we have inadvertently collected personal information from a child without appropriate parental consent, we will take steps to delete such information promptly.

13. Third-Party Websites and Services

Our website may contain links to third-party websites, booking tools, or social media platforms (such as Instagram, Facebook, or LinkedIn). This Privacy Policy does not apply to those third-party sites, and we encourage you to review their respective privacy policies, as we are not responsible for their content or privacy practices.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or legal requirements. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this Policy periodically. Your continued use of our website or Services after changes are posted constitutes your acknowledgment of the updated Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled, please contact us at:

Healing by Ritika
Attn: Ritika Chandak (Data Controller)
Email: hello@healingbyritika.com
Website: www.healingbyritika.com
Phone/WhatsApp: +91-9831479979

If you are located in the EU/EEA or UK and believe your data protection rights have not been adequately addressed, you have the right to lodge a complaint with your local supervisory authority.