Privacy Policy

MITRA – Center for Counselling & Psychotherapy

A service operated by RadiantMinds Rehab LLP

Last Updated: August 2, 2026

Plain-Language Summary (not a substitute for the full policy below)

We collect what we need to book and run your therapy sessions: your contact details, booking information, payment confirmation, and what you share with your clinician during sessions. We never sell your data. Payments go through Razorpay, bookings run on our bookings platform, and sessions happen over Zoom or Google Meet, each of which handles a piece of your data under their own security standards. You can ask us what we hold about you, ask us to correct or delete it, and withdraw consent at any time, subject to what we're legally required to keep. Full detail below.

1. Introduction

This Privacy Policy explains how RadiantMinds Rehab LLP, operating as MITRA – Center for Counselling & Psychotherapy ("MITRA", "we", "us", "our"), collects, uses, stores, shares, and protects your personal data when you visit our Website, book a Session, or receive our Services.

This Policy should be read together with our Terms & Conditions, and forms part of the agreement between you and us when you use our Website or Services. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.

2. Who We Are

MITRA is a service operated by RadiantMinds Rehab LLP, a Limited Liability Partnership registered in India (LLPIN: ACB-1066), with its registered office at Sivam Arcade, Puthenangady, Kottayam, Kerala, India. For the purposes of the DPDP Act, RadiantMinds Rehab LLP is the Data Fiduciary responsible for your personal data.

3. Scope of This Policy

This Policy applies to personal data we collect through:

• our website at mitracounselling.in;

• our booking platform at bookings.mitracounselling.in; and

• your interactions with our Clinicians and administrative staff, including during Sessions, over email, or by phone.

4. Personal Data We Collect

4.1 Identity and contact data: your name, email address, phone number, and similar identifying details you provide when booking or contacting us.

4.2 Booking and appointment data: the service type, Clinician, date, and time of your Sessions, and any notes you provide at the time of booking.

4.3 Payment data: confirmation of payment status, transaction reference, and amount paid. Your card, UPI, or bank account details are collected and processed directly by Razorpay, our payment gateway; we do not receive or store this information ourselves.

4.4 Health and clinical information: what you share with your Clinician during intake, assessment, and Sessions, including your mental health history, presenting concerns, and clinical notes your Clinician records for continuity of care. This is the most sensitive category of data we hold, and we handle it accordingly, as described in Section 9.

4.5 Technical and usage data: your IP address, browser type, device information, and general usage data collected automatically when you visit our Website, including through cookies (see Section 11).

4.6 Communications: emails, contact form submissions, or messages you send us

5. How We Collect Your Data

We collect data directly from you, when you fill in a form, make a booking, make a payment, or speak with a Clinician. We collect some data automatically through cookies and similar technologies when you use our Website. We also receive limited data from third parties we work with, such as payment confirmation from Razorpay.

6. Why We Use Your Data

We use your personal data to:

• create and manage your booking, and deliver your Sessions;

• process payments and refunds;

• communicate with you about appointments, including confirmations and reminders;

• maintain clinical records for continuity of care, professional accountability, and legal or regulatory compliance;

• respond to your enquiries and provide customer support;

• maintain the security and proper functioning of our Website; and

• send you service-related updates, and promotional communications only where you have opted in, which you may withdraw consent to at any time.

We do not use your health information for advertising or marketing purposes, and we do not sell your personal data to anyone.

7. Your Consent

We rely primarily on your consent to process your personal data, given when you book a Session, complete an intake form, or otherwise provide information to us. You may withdraw consent at any time by contacting us (Section 15), though this may affect our ability to continue providing Services to you, and withdrawal does not affect the lawfulness of anything we did with your data before withdrawal.

Separately from consent, we may process limited data where necessary to respond to a medical emergency, or where required to comply with a legal obligation, consistent with the exceptions described in Section 10 of our Terms & Conditions.

8. Who We Share Your Data With

We do not sell or rent your personal data. We share it only where necessary, with:

• Razorpay, to process your payments and refunds;

• LatePoint / our booking platform infrastructure, hosted on Hostinger, to manage bookings and appointments;

• Zoom and Google Meet, to conduct video Sessions;

• Framer, our website hosting and content platform; and

• professional advisors, auditors, or authorities, where required by law, or where necessary to establish, exercise, or defend a legal claim.

Each of these providers processes data under its own privacy and security terms, and we choose providers that maintain appropriate security standards. We do not disclose your clinical information to any third party without your consent, except in the limited circumstances described in Section 10 of our Terms & Conditions (serious risk of harm, suspected abuse of a child or vulnerable adult, legal compulsion, clinical supervision, or your explicit written consent).

9. How We Protect Your Data

We use reasonable technical and organisational measures to protect your personal data, including encryption in transit, access controls limiting who can view clinical records, and confidentiality obligations binding all Clinicians and staff. Clinical notes are accessible only to your treating Clinician and, where necessary for supervision or continuity of care, to other bound professionals within MITRA.

No system is completely secure, and while we work to protect your data, we cannot guarantee absolute security. If we become aware of a data breach likely to affect you, we will notify you and the relevant authorities as required under the DPDP Act.

10. Cross-Border Data Transfers

Some of our service providers, including Zoom, Google Meet, and Razorpay's underlying infrastructure, may process or store data outside India as part of their global operations. The DPDP Act permits transfer of personal data outside India except to countries specifically restricted by the Government of India. We take reasonable steps to work with providers that maintain adequate security and data protection standards regardless of where data is processed.

11. Cookies and Tracking Technologies

Our Website may use cookies and similar technologies to keep the site functioning correctly and to understand how visitors use it. You can control or disable cookies through your browser settings; doing so may affect some website functionality, though it will not affect your ability to book or attend Sessions.

12. Data Retention

We retain your personal data only as long as necessary for the purposes described in this Policy. As a general rule:

• Clinical records are retained for a minimum of 3 years after the end of your therapeutic relationship with us, or longer where required by professional guidelines, our Grievance Redressal or legal obligations, or an ongoing legal matter.

• Booking and payment records are retained as required for accounting, tax, and regulatory purposes.

• Marketing data, where you have opted in, is retained until you withdraw consent.

When data is no longer required, we securely delete or anonymise it.

13. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

• access a summary of the personal data we hold about you and how we process it;

• request correction or completion of inaccurate or incomplete personal data;

• request erasure of your personal data, where it is no longer necessary for the purpose it was collected, subject to our legal and professional record-keeping obligations;

• withdraw consent at any time, as described in Section 7;

• nominate another individual to exercise these rights on your behalf in the event of your death or incapacity; and

• lodge a grievance with us (Section 15), and, if unresolved, with the Data Protection Board of India.

To exercise any of these rights, please contact us using the details in Section 15. We will respond within a reasonable time, consistent with our obligations under the DPDP Act.

14. Children's Privacy

Our Services are available only to individuals aged 18 and above, as set out in our Terms & Conditions. We do not knowingly collect personal data from anyone under 18, and if we become aware that we have, we will delete it.

15. Grievance Officer and Contact for Privacy Queries

If you have a question, concern, or grievance about how we handle your personal data, please contact our Grievance Officer:

Deepthi Prasad, Administrator, RadiantMinds Rehab LLP Email: admin@radiantmindsrehab.com Phone: +91 7994432203

We will acknowledge your query within 48 hours and aim to resolve it within 15 business days. If you remain unsatisfied with our response, you may approach the Data Protection Board of India.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top will change accordingly, and we encourage you to review this page periodically. Continued use of our Website or Services after an update constitutes acceptance of the revised Policy.

17. Governing Law

This Policy is governed by the laws of India, and any dispute relating to it is subject to the exclusive jurisdiction of the courts at Kottayam, Kerala, consistent with our Terms & Conditions.

18. Contact Us

MITRA – Center for Counselling & Psychotherapy, a service of RadiantMinds Rehab LLP Sivam Arcade, Puthenangady, Kottayam, Kerala, India Email: support@mitracounselling.in Phone: +91 79944 22292 (Inquiries) / +91 79944 22298 (Support)