Privacy Policy

Last Updated / Effective Date: 20th July 2026

Dietplus Healthcare is a healthy lifestyle assistance and information services brand managed by RJSTechLabs (a sole proprietorship, GST: 27BLFPS5775M1Z7), with its registered office at WeWork Lightbridge, 6th Floor, Hiranandani Business Park, Saki Vihar Rd, Tunga Village, Chandivali, Powai, Mumbai, Maharashtra 400072 ("Company," "we," "us," or "our"). We are committed to protecting your privacy and complying fully with applicable data protection laws in India, including the Digital Personal Data Protection (DPDP) Act, 2023. This Privacy Policy explains how we collect, use, store, and process your personal and health-related data across all our service mediums, encompassing both digital channels (websites including https://www.dietplus.in and https://www.dietplus.co.in, mobile applications, social media channels, tele-consultations, online meetings, digital forums, or any other online medium) and non-digital channels (physical clinics, health camps, events, face-to-face interactions, paper-based forms, or any other offline medium or forum). By accessing or utilizing any of our services, you consent to the data practices described in this policy.

1. Geographical Scope and Applicability Our services are offered, marketed, and intended strictly for users located within India. We do not target, engage, or knowingly provide services to any users residing outside India. If you access our digital platforms, attend our events, or visit our physical locations from outside India, you do so at your own initiative, and you acknowledge that our data practices and terms are governed exclusively by the laws of India.

2. Information We Collect In compliance with the data minimization principle under the DPDP Act, we only collect personal data that is necessary for the provision of our services across all digital and non-digital touchpoints.

A. Personal Data Provided Directly by You (Online & Offline) Identity Data: Full name, date of birth, gender, and contact details (email address, telephone number) collected via online forms, mobile apps, physical clinic registrations, or camp sign-up sheets. Health & Nutritional Data (Sensitive Personal Data): Weight, height, body composition, blood pressure, medical history, past diagnoses, current medications, dietary habits, exercise routines, sleep patterns, and lab results gathered via tele-consultations, in-clinic consultations, health camps, or user profile uploads. Support & Feedback: Records of correspondence with our diet consultants across email, chat, phone, social media interactions, feedback forms, and participation in surveys or programs.

B. Automatically Collected Data (Digital Channels) Technical Data: IP address, browser type, device information, and usage patterns across our websites, mobile applications, and online meetings. Cookies: Used to enhance user experience, manage authentication, and track non-personal analytical metrics on our web platforms.

3. Legal Basis and Purpose of Processing (DPDP Compliance) We process your personal and health data based on your free, specific, informed, unconditional, and unambiguous consent, or where necessary for the performance of our services. We process data collected through any medium for the following lawful purposes: Personalized Nutrition Plans: Crafting dietetic and lifestyle recommendations tailored to your physiological profile based on data gathered digitally or in-clinic. Membership & Clinical Management: Managing user accounts, delivering online or in-clinic resources, hosting digital/physical forums, and maintaining professional clinical documentation. Communication: Sending appointment reminders, health tips, event notifications, and service updates via SMS, email, calls, or messaging apps (with explicit consent for marketing). Statutory Compliance: Fulfilling legal, tax, and regulatory obligations linked to our operations under Indian law.

4. Data Protection & Security Safeguards, and Internet Risks In accordance with reasonable security practices mandated under Indian law, we implement technical, physical, and organizational measures to safeguard your information: Digital Encryption: SSL/TLS encryption for data transmission across our websites, applications, and online meetings. Physical & Access Control: Strict role-based access ensuring physical and electronic health records are viewed only by authorized personnel directly involved in your care. Secure Storage: In-clinic paper records, physical camp documentation, and digital records are maintained within secure environments and electronic health record (EHR) systems. Acknowledgment of Internet Risks and Limitation of Liability: While we implement robust administrative, technical, and physical security safeguards to protect your personal data, you acknowledge that the transmission of information over the internet is never completely secure. Inherent risks of data breaches, malicious cyberattacks, malware, and online data theft exist across digital platforms. Subject to our mandatory legal obligations and compliance requirements under the Digital Personal Data Protection Act, 2023, RJSTechLabs (operating as a sole proprietorship) shall not be held liable for any indirect, incidental, or consequential losses, damages, or data exposures arising from sophisticated malicious cyberattacks, unauthorized third-party breaches, or other security incidents that are entirely beyond our reasonable control. You are responsible for maintaining the confidentiality of your account passwords and login credentials.

5. Data Sharing and Third-Party Disclosure We do not sell, rent, or trade your personal or health data. Information collected through any digital or non-digital medium is shared strictly under the following conditions: Healthcare & Diagnostic Lab Providers: With your explicit, verifiable consent, data and lab requirements gathered during consultations, camps, or clinics may be shared with your primary care physician, specialist, or trusted diagnostic lab partners to process and review required clinical testing. Service Providers: Trusted third-party partners who assist in website hosting, database management, event management, communication tools, and payment processing (e.g., Razorpay services), bound by strict confidentiality obligations. Legal Requirements: When mandated by law, court orders, or governmental agencies pursuant to Indian statutory requirements.

6. Your Rights as a Data Principal (Under the DPDP Act) As a Data Principal, you are entitled to exercise specific rights regarding your personal data: Right to Access & Information: Request a summary of personal data processed across all digital and non-digital channels and the identities of all third parties with whom data has been shared. Right to Correction & Completion: Request the correction of inaccurate data or the completion of incomplete personal data provided through any medium. Right to Erasure & Deletion: Request the deletion of your personal data when it is no longer necessary for the purpose collected. Note: In-clinic medical records and physical/offline files are subject to statutory retention mandates (typically 7–10 years) under applicable medical laws and cannot be immediately erased. Right to Withdraw Consent: Withdraw your consent at any time for processing or marketing communications across any communication channel. Withdrawal will not affect the lawfulness of processing based on consent prior to its withdrawal. Right to Grievance Redressal: Have your grievances addressed promptly by our designated authority.

7. Data Retention We retain your personal data only as long as necessary to satisfy the purpose for which it was collected across digital or non-digital mediums, or to comply with applicable legal, accounting, or medical record retention requirements.

8. Children's Privacy Our services across all digital platforms, events, camps, and clinics are strictly intended for individuals aged 18 and older residing within India. We do not knowingly collect personal data from minors. If we discover that data from a minor has been collected without verifiable parental consent, we will take immediate steps to purge such records.

9. Grievance Officer and Contact Details In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, if you have any questions, wish to exercise your rights, or want to register a privacy grievance concerning our digital or non-digital services, please contact our Grievance Officer at Dietplus Healthcare (managed by RJSTechLabs): Company Name: RJSTechLabs (Dietplus Healthcare) GSTIN: 27BLFPS5775M1Z7 Registered Office Address: WeWork Lightbridge, 6th Floor, Hiranandani Business Park, Saki Vihar Rd, Tunga Village, Chandivali, Powai, Mumbai, Maharashtra 400072 Email: support@dietplus.in