Privacy Policy

Dinesh Kiran Kashi Laabh is a spiritual hospice and care centre supporting individuals and their families through care, accommodation, spiritual support and related services.

For privacy and data-protection purposes:

• Legal operating entity: Dinesh Kiran Kashi Laabh
• Operating name: Dinesh Kiran Kashi Laabh
• Registered or operating address: Varuna Vihar, Sikraul, Nadesar, Shivpur, Varanasi, Uttar Pradesh 221002

In this policy, “we”, “us” and “our” mean Dinesh Kiran Kashi Laabh and its legal operating entity. “You” means the individual whose personal information is being processed or an authorised representative acting on that person’s behalf.

We collect only the information reasonably required for the purpose explained to you.

Personal and contact information

This may include:

• Name
• Age or date of birth
• Phone number
• Email address
• Residential address and location
• Gender, where relevant to care or accommodation
• Government-issued identification details, where legally or operationally required
• Emergency-contact information
• Details of family members, caregivers, guardians or authorised representatives
• Preferred language and method of communication

If you provide another person’s information, you must be authorised to do so and should ensure that the person has been informed about the disclosure where reasonably possible.

Health and care information

When you enquire about or use our care services, we may collect information such as:

• Present health condition and medical history
• Physical, physiological or mental-health information
• Medicines, allergies and dietary requirements
• Medical reports, prescriptions and test results
• Mobility, accessibility and personal-care requirements
• Lifestyle and daily-care information
• Treating doctor, hospital or caregiver details
• Health-insurance information, where relevant
• Spiritual, religious, personal or end-of-life preferences
• Information required to assess whether we can provide safe and appropriate care

Health and medical information is handled with particular care. We request only the information reasonably necessary to assess, provide or coordinate the requested services.

Travel and stay information

This may include:

• Proposed arrival and departure dates
• Expected duration of stay
• Travel itinerary and arrival information
• Accommodation requirements
• Transport and mobility-assistance requirements
• Details of accompanying family members or caregivers
• Other information required to plan the visit or stay

Payment and transaction information

When you make a booking, payment or donation, we may collect:

• Billing name and address
• Amount and payment status
• Transaction reference
• Invoice or receipt details
• Refund information
• Limited payment-related information received from the payment provider

Payments may be processed by an independent payment provider. We do not ordinarily store complete card numbers, banking passwords, PINs, CVVs or payment-authentication credentials.

Website and technical information

When you use our website, we may automatically collect:

• Internet Protocol address
• Browser and device information
• Operating system
• Pages visited and time spent on the website
• Referring website or link
• Approximate location derived from technical information
• Cookie and website-usage information
• Error, security and access logs

Communications

We may retain enquiries, emails, WhatsApp messages, call notes, feedback, complaints and other communications exchanged with you.

We may collect information:

• Directly from you
• From a family member, caregiver, guardian or authorised representative
• From a doctor, hospital, laboratory, pharmacy or care provider with appropriate permission or where otherwise legally permitted
• Through our website forms and communication channels
• Through booking, payment, transport, accommodation or technology providers
• Automatically through cookies and similar website technologies
• From government authorities or another lawful source where necessary and permitted

This Privacy Policy provides general information about our practices. It does not, by itself, constitute consent for every type of data processing.

At or before collecting personal data, we will provide an appropriate notice or explanation identifying:

• The specific personal data requested
• The purpose for which it is requested
• The service, facility or activity for which it will be used
• Whether providing the information is necessary or optional
• The relevant recipients or categories of recipients
• How consent may be withdrawn
• How privacy rights or grievances may be submitted

Where we rely on consent, it will be requested in clear and plain language and through an affirmative action. Consent will be limited to the information reasonably necessary for the stated purpose.

Additional or separate consent may be requested for activities such as promotional communications, testimonials, photographs, videos or uses unrelated to the care or service originally requested.

We may use personal information to:

• Respond to enquiries
• Assess whether our facilities and services are suitable
• Plan admission, travel, transport, accommodation and duration of stay
• Provide and coordinate hospice, care and spiritual-support services
• Maintain care, medication and service records
• Communicate with authorised family members, caregivers, guardians and emergency contacts
• Coordinate with doctors, hospitals, laboratories, pharmacies and other service providers
• Respond to a medical or safety emergency
• Process bookings, payments, donations, refunds and receipts
• Provide service updates, reminders and important notices
• Receive and respond to feedback, requests or complaints
• Improve our facilities, website and services
• Protect residents, guests, families, staff, visitors and information systems
• Detect or prevent fraud, misuse, unauthorised access and security incidents
• Maintain required accounting, tax, care and operational records
• Comply with legal, regulatory, judicial or government requirements
• Establish, exercise or defend legal claims

We process personal data only for a lawful purpose and on a basis permitted by applicable law. Depending on the circumstances, this may include your consent, information voluntarily provided for a service you requested, compliance with law, response to a medical emergency or another use specifically permitted by law.

We do not use personal information for an unrelated purpose without providing an appropriate notice and obtaining consent where required.

Where processing is based on consent, you may withdraw that consent by contacting us using the details below.

We will make the method of withdrawing consent reasonably comparable in ease to the method used to provide it.

Withdrawal will not affect processing already lawfully undertaken before the withdrawal. Following withdrawal, we and our relevant service providers will stop the affected processing within a reasonable period unless continued processing is required or permitted by law.

If particular information is necessary to provide safe care, accommodation, travel assistance or another requested service, refusing to provide it or withdrawing consent may mean that we cannot provide or continue that service. We will explain the relevant consequence where reasonably possible.

We do not sell or rent personal information.

We may share only the information reasonably necessary with:

• Authorised employees, caregivers, coordinators and spiritual-care personnel
• Doctors, nurses, hospitals, laboratories, pharmacies and healthcare providers
• Ambulance, transport, travel and emergency-support providers
• Accommodation and facility-support providers
• Payment processors, banks, accountants and auditors
• Website-hosting, cloud-storage, communication, analytics and information-technology providers
• Insurers or claims administrators, where applicable
• Professional advisers such as advocates and consultants
• Family members, caregivers, guardians or representatives authorised by you
• Government authorities, regulators, courts, law-enforcement agencies or other persons where disclosure is legally required
• A successor organisation involved in a lawful restructuring, merger or transfer of operations, subject to appropriate confidentiality and legal safeguards

Health, medical and other information treated as sensitive under applicable law will not be disclosed to an unrelated third party without appropriate permission unless:

• The disclosure was agreed as part of the service arrangement
• It is necessary to provide or coordinate the requested service
• It is necessary to respond to a medical or safety emergency
• It is required or authorised by law
• It is required under a valid court, regulatory or government direction

Our service providers are expected to process information only for authorised purposes and to apply appropriate confidentiality and security safeguards.

Where there is a threat to life, an immediate threat to health or another serious emergency, we may disclose relevant information to healthcare professionals, hospitals, ambulance providers, emergency services or emergency contacts where reasonably necessary and permitted by law.

Only information relevant to responding to the emergency should be disclosed.

Our website may use cookies and similar technologies to:

• Operate essential website functions
• Remember user preferences
• Maintain website security
• Understand website usage
• Detect errors
• Improve website performance

Optional analytics or marketing cookies, if used, should operate according to the choices provided through our cookie notice or consent settings.

You can manage cookies through the cookie settings provided on the website or through your browser. Disabling certain cookies may affect website functionality.

Details of the cookies actually used, their purposes, providers and retention periods should be provided in a separate Cookie Notice or cookie-settings panel.

We retain personal information only for as long as reasonably necessary to:

• Provide the requested care or services
• Maintain appropriate care, admission, booking and transaction records
• Respond to privacy requests, complaints or disputes
• Protect legal rights
• Meet medical, accounting, tax, regulatory and other legal requirements
• Maintain security and incident records for legally required periods

When consent is withdrawn or the purpose for which information was collected is no longer being served, we will delete or anonymise the information within a reasonable period unless retention remains necessary for the specified purpose or is required or permitted by law.

Different types of information may have different retention periods. Dinesh Kiran Kashi Laabh should maintain an internal retention schedule for health, admission, payment, communication, CCTV and website records.

We use reasonable administrative, physical and technical safeguards appropriate to the nature of the information and the services we provide.

Depending on the relevant system, these safeguards may include:

• Role-based access controls
• Password and authentication controls
• Encryption, masking or other protection of personal data
• Access logs, monitoring and review
• Secure backups and recovery procedures
• Physical protection of records and facilities
• Staff confidentiality requirements and training
• Security requirements for technology and service providers
• Procedures for identifying, investigating and responding to security incidents

Access to personal and care-related information is limited to authorised persons who reasonably require it for their work.

No website, electronic communication or storage system can be guaranteed to be completely secure. You should avoid sending unnecessary medical, identity or financial information through unsecured channels.

If we become aware of a personal-data breach, we will take reasonable steps to:

• Contain and investigate the incident
• Reduce the possible harm
• Restore the security and availability of affected systems
• Prevent recurrence
• Maintain appropriate incident records
• Notify affected individuals, the Data Protection Board of India or another authority when and in the manner required by applicable law

Where notification to an affected person is required, it may include information about the nature of the breach, likely consequences, mitigation measures, precautions the person may take and appropriate contact details.

Subject to applicable law and the commencement and application of relevant statutory provisions, you may request to:

• Obtain a summary of the personal data being processed and the related processing activities
• Obtain information about other Data Fiduciaries or Data Processors with whom the data has been shared, subject to legal exceptions
• Review personal information previously provided
• Correct inaccurate or misleading information
• Complete incomplete information
• Update information that has changed
• Request erasure of information that is no longer required
• Withdraw consent where processing is based on consent
• Raise a grievance about the processing of personal data
• Nominate another individual to exercise applicable rights in the event of death or incapacity

Requests may be submitted using the contact information below. Please provide sufficient information to identify yourself and the relevant records. We may request reasonable evidence of identity or authority before acting on a request.

A request for deletion may be refused or limited where retention remains necessary for the requested service, compliance with law, medical or safety records, dispute resolution or protection of legal rights.

Where the relevant DPDP provisions are in force and applicable, you may approach the Data Protection Board of India after first giving us a reasonable opportunity to resolve your grievance.

A child means an individual under 18 years of age for the purposes of the DPDP framework.

Our website enquiries and service arrangements should ordinarily be completed by an adult. Before processing a child’s personal data, we will obtain verifiable consent from a parent or lawful guardian where required.

We will not knowingly undertake behavioural monitoring, tracking or targeted advertising directed at children where prohibited.

Applicable law may permit limited processing without parental consent where processing is necessary for providing health services to a child or protecting the child’s health. Any such processing will be limited to what is reasonably necessary and legally permitted.

Where an adult with a disability is unable to provide legally valid consent and has a lawful guardian appointed under applicable guardianship law, we will obtain and verify the lawful guardian’s consent where required. We will not assume that a person lacks decision-making capacity merely because the person has a disability.

Some website, cloud, communication, payment or technology providers may store or process information outside India.

Where personal data is transferred outside India, we will comply with applicable Indian law, including:

• Requirements concerning the protection provided by the recipient
• Restrictions or conditions notified by the Central Government
• Any applicable healthcare, financial or sector-specific localisation requirement
• Consent or contractual requirements applicable to the transfer

Use of email, WhatsApp, payment services or cloud platforms may involve processing through systems operated in other countries.

We may send promotional or fundraising communications only where permitted and, where required, after obtaining consent.

You may opt out at any time using the unsubscribe option provided in the communication or by contacting us.

Opting out of promotional messages will not stop necessary service, care, booking, payment, safety or administrative communications.

Our website may contain links to websites, payment services, maps, social-media platforms or other services operated by third parties.

We are not responsible for the independent privacy practices of those organisations. Please review their privacy notices before providing personal information.

We may update this Privacy Policy when our services, technology, data practices or legal obligations change.

The revised policy will be published on this page with an updated “Last updated” date. Where a change materially affects how previously collected information is used, we will provide an additional notice or seek consent where required.

To exercise a privacy right, withdraw consent or raise a grievance about how your personal data is handled, please contact:

• Dinesh Kiran Kashi Laabh
• Phone: +91 86688 94754
• Address: Varuna Vihar, Sikraul, Nadesar, Shivpur, Varanasi, Uttar Pradesh 221002