Privacy Policy

Website: anukushwaha.com
Data controller/service provider: Anu Kushwaha
Effective date: 01 August 2026
Last updated: 04 August 2026

This Privacy Policy explains how Anu Kushwaha collects, uses, stores, shares and protects personal information when you visit anukushwaha.com, submit an enquiry, book or pay for a session, complete an agreement, attend a consultation, subscribe to communications or otherwise interact with the website and its services.

By using the website or voluntarily providing your information, you acknowledge the practices described in this Privacy Policy.

1. Who is responsible for your information?

The person responsible for determining why and how your personal information is processed is:

Name: Anu Kushwaha
Business or brand name: Back To Wellbeing
Website: anukushwaha.com
Email: info@BackToWellbeing.org
Telephone: +91 9959866113
Address: 3/7, Kalp City, Lucknow, UP, India

References to “I”, “me” and “my” mean Anu Kushwaha. References to “you” and “your” mean the website visitor, prospective Client or Client whose information is processed.

2. Scope of this Privacy Policy

This policy applies to personal information processed through:

  • anukushwaha.com;
  • Online booking forms;
  • Contact and enquiry forms;
  • Amelia appointment-booking tools;
  • Razorpay or another payment gateway;
  • Client agreements and electronic signatures;
  • Email, telephone or messaging communication;
  • Online or in-person consultations;
  • Workshops and programmes;
  • Customer panels or accounts;
  • Newsletters and marketing forms; and
  • Related administrative and follow-up activities.

Third-party websites and services operate under their own privacy policies.

3. Information I may collect

A. Identity and contact information

This may include:

  • Full name;
  • Email address;
  • Telephone or WhatsApp number;
  • City, state and country;
  • Postal or billing address;
  • Date of birth or age, where necessary; and
  • Emergency-contact details, where voluntarily provided and relevant.

B. Booking and service information

This may include:

  • Selected service;
  • Appointment date and time;
  • Time zone;
  • Booking reference;
  • Appointment status;
  • Attendance information;
  • Rescheduling history;
  • Package or programme information; and
  • Administrative notes.

C. Payment and transaction information

This may include:

  • Amount paid;
  • Currency;
  • Transaction identification number;
  • Payment status;
  • Payment method category;
  • Invoice or receipt details;
  • Refund status; and
  • Billing information.

Payments are generally processed by an authorised third-party payment gateway. I do not ordinarily receive or store your complete card number, card-security code, UPI PIN or online-banking password.

D. Wellbeing and session-related information

To assess whether the service is suitable and provide personalised support, you may voluntarily share information concerning:

  • Stress, emotional wellbeing or mental clarity;
  • Personal or professional information and challenges;
  • Goals and desired outcomes;
  • Existing support or treatment;
  • Physical or mental-health conditions;
  • Medication, where relevant to safety;
  • Pregnancy, injury or physical limitations;
  • Lifestyle and mind-body practices; and
  • Information discussed during consultations.

Some of this information may qualify as sensitive personal information under applicable Indian law. I will seek appropriate consent before intentionally collecting such information and will collect only information reasonably required for the stated purpose.

E. Agreement and consent records

This may include:

  • Signed Client Agreement;
  • Informed Consent Form;
  • Electronic signature;
  • Date and time of acceptance;
  • IP address or authentication record supplied by the signing platform;
  • Consent choices; and
  • Copies of notices and policies accepted by you.

F. Communications

I may retain:

  • Emails;
  • Contact-form submissions;
  • Messages;
  • Enquiries;
  • Complaints;
  • Feedback; and
  • Relevant administrative communication.

G. Technical and website information

The website or its service providers may automatically collect:

  • IP address;
  • Browser type;
  • Device type;
  • Operating system;
  • Approximate location derived from IP address;
  • Referring page;
  • Pages viewed;
  • Login information;
  • Cookie identifiers;
  • Date and time of access; and
  • Security or error logs.

H. Testimonials, photographs and recordings

Photographs, audio recordings, video recordings or identifiable case examples will be collected and published only after obtaining separate and specific permission where required. Testimonials can be used as necessary without consent, client can choose not to submit testimonial in case of any concern.

Standard consultations will not be recorded without prior consent.

I. Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

J. Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

K. Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

4. How information is collected

Information may be collected:

  • Directly from you;
  • Through website and booking forms;
  • When you make a payment;
  • When you sign an agreement;
  • During a consultation or programme;
  • Through emails, calls or messages;
  • Through cookies and website technologies;
  • From a parent or lawful guardian where services for a minor are permitted; and
  • From service providers that process bookings, payments or signatures on my behalf.

5. Why I use your information

I may use personal information to:

  • Respond to enquiries;
  • Check whether a service may be suitable;
  • Create and manage appointments;
  • Process payments and issue receipts;
  • Verify completion of agreements and consent forms;
  • Provide consultations, workshops or programmes;
  • Personalise the service to your stated needs and goals;
  • Communicate appointment reminders and joining instructions;
  • Process cancellation, refund or rescheduling requests;
  • Maintain appropriate session and administrative records;
  • Provide agreed follow-up resources;
  • Protect Client and Provider safety;
  • Prevent fraud, misuse and security incidents;
  • Maintain and improve website functionality;
  • Respond to complaints and legal claims;
  • Meet tax, accounting and legal obligations; and
  • Send marketing communication where you have separately chosen to receive it.

I will not intentionally use sensitive personal information for an unrelated purpose without obtaining appropriate permission unless the use is required or authorised by law.

6. Consent

Where processing relies on your consent, I will seek consent through an appropriate method, which may include:

  • An unticked website checkbox;
  • Written or electronic agreement;
  • Email confirmation;
  • Electronic signature;
  • A booking form;
  • A separate marketing choice; or
  • Recorded confirmation where lawful and appropriate.

Your consent should be voluntary, specific and based on clear information about the intended purpose.

You may withdraw consent by contacting me. Withdrawal will not invalidate processing that lawfully occurred before the withdrawal.

Where information is necessary to book or safely provide a service, withdrawing or refusing consent may mean that I cannot accept or continue the booking.

7. Information you are not required to provide

You may choose not to provide requested information.

However, I may be unable to provide a service where the information is reasonably necessary to:

  • Confirm your identity;
  • Process payment;
  • Schedule the appointment;
  • Assess safety or suitability;
  • Obtain informed consent;
  • Comply with law; or
  • Deliver the requested service.

8. Sharing of information

I may share limited personal information with service providers that support the operation of the website and delivery of services, including, where enabled:

  • WordPress and website plugins;
  • Hostinger or another hosting provider;
  • Amelia booking software;
  • Razorpay or another payment gateway;
  • WooCommerce;
  • Zoho Sign or another electronic-signature provider;
  • Email and messaging providers;
  • Video-conferencing platforms;
  • Cloud-storage and backup providers;
  • Google reCAPTCHA;
  • Website-security and analytics providers;
  • Accountants, lawyers or professional advisers; and
  • Contractors providing authorised administrative or technical support.

These providers may process information only to perform the relevant service, fulfil legal obligations or protect their systems, subject to their contractual terms and privacy practices.

I may also disclose information:

  • With your permission;
  • Where required by law, court order or lawful government request;
  • To investigate fraud, cyber incidents or misuse;
  • To establish, exercise or defend a legal claim;
  • Where there appears to be a serious and imminent risk of harm to you or another person;
  • Where reporting abuse or another matter is legally required; or
  • In connection with a lawful transfer or restructuring of the business, subject to appropriate safeguards.

I do not sell or rent personal information to third parties.

9. Confidentiality of session information

Information shared during a session will be treated as confidential and accessed only for legitimate service, safety, administrative or legal purposes.

However, confidentiality may be limited where:

  • You give permission to disclose information;
  • Disclosure is legally required;
  • A court or lawful authority requires information;
  • There appears to be an immediate and serious risk of harm;
  • Abuse, exploitation or another legally reportable matter is disclosed;
  • Confidential legal or professional advice is required; or
  • Disclosure is necessary to investigate misconduct, fraud or a legal claim.
  • During case discussion for academic purposes in closed circle of academicians or psychologists.

Where lawful and reasonably possible, only the minimum information required for the relevant purpose will be disclosed.

10. International data processing and transfers

Some technology providers may operate servers or support teams outside India.

Where information is transferred or accessed outside India, I will take reasonable steps to use reputable service providers and ensure that the transfer is connected with providing the requested service, supported by consent where required and subject to applicable data-protection law.

11. Data retention

Personal information will not be retained for longer than reasonably necessary for the purpose for which it was collected or as required by applicable law.

Unless a longer or shorter period is reasonably necessary:

  • Enquiries that do not become bookings may be retained for up to 12 months;
  • Booking, invoice and payment records may be retained for the period required by tax, accounting, consumer-protection and dispute-resolution obligations;
  • Signed agreements and consent records may be retained for the duration of the professional relationship and a reasonable period afterwards;
  • Session-related records may normally be retained for up to three years after your last session;
  • Complaints and legal correspondence may be retained until the issue and applicable limitation period have concluded;
  • Marketing information may be retained until you unsubscribe or withdraw consent; and
  • Security logs and technical information may be retained for a limited operational period.

Information may be deleted, anonymised or securely archived when it is no longer required.

12. Security

I take reasonable managerial, technical, operational and physical measures to protect personal information against:

  • Unauthorised access;
  • Accidental loss;
  • Misuse;
  • Alteration;
  • Improper disclosure;
  • Destruction; and
  • Other security risks.

Measures may include:

  • Password protection;
  • Limited access;
  • Secure hosting;
  • HTTPS encryption;
  • Updated software and plugins;
  • Multi-factor authentication where available;
  • Security monitoring;
  • Backups;
  • Confidentiality controls; and
  • Use of established payment and signing providers.

No electronic system can be guaranteed to be completely secure. You should also protect your passwords, devices, email account and private meeting links.

Where required by applicable law, affected individuals and the relevant authority will be informed of a personal-data breach.

13. Cookies and similar technologies

The website may use cookies or similar technologies for:

  • Essential website operation;
  • Booking functionality;
  • Login and security;
  • Remembering preferences;
  • Payment processing;
  • Spam and bot prevention;
  • Analytics; and
  • Measuring website performance.

Essential cookies may operate because they are required for the website or booking system to function.

Non-essential analytics or advertising cookies should be activated only after obtaining an appropriate choice where required. You can control cookies through the website consent tool or your browser settings, although blocking essential cookies may affect booking functionality.

14. Google reCAPTCHA

The website may use Google reCAPTCHA to identify automated access and protect forms from spam or misuse.

When reCAPTCHA is enabled, Google may receive technical information such as your IP address, browser information and interaction data according to Google’s applicable terms and privacy practices.

15. Marketing communication

Booking a session does not automatically subscribe you to unrelated promotional marketing.

Marketing emails or messages will be sent where:

  • You have voluntarily subscribed;
  • You have otherwise provided valid permission; or
  • Communication is permitted under applicable law.

You may unsubscribe through the link in the message or contact me directly. Administrative booking messages may still be sent where necessary to provide a service you requested.

16. Children and minors

The services and independent booking facility are intended primarily for persons aged 18 years or older.

A person below 18 years should not independently submit sensitive personal information or book a service without the involvement and consent of a parent or lawful guardian.

Where services for a minor are considered appropriate, I may require:

  • Verification of the parent or guardian;
  • Written parental or guardian consent;
  • A separate agreement;
  • The minimum information necessary; and
  • Additional safety and confidentiality arrangements.

I do not knowingly use children’s personal information for targeted advertising or behavioural monitoring.

17. Your choices and rights

Subject to applicable law and reasonable identity verification, you may request:

  • Confirmation of whether I hold your personal information;
  • Access to or a summary of the information being processed;
  • Correction of inaccurate or incomplete information;
  • Updating of outdated information;
  • Withdrawal of consent;
  • Deletion or erasure where retention is no longer necessary or legally required;
  • Information about the categories of recipients with whom information has been shared;
  • Cessation of marketing communication; and
  • Redressal of a complaint concerning the handling of your information.

You may also nominate another person to exercise relevant rights in the event of death or incapacity where applicable law provides that right.

Some information may need to be retained despite a deletion request where necessary for legal compliance, accounting, safety, fraud prevention, dispute resolution or defence of legal claims.

18. How to make a privacy request

Send your request to:

Email: info@BackToWellbeing.org
Subject: Privacy Request

Include:

  • Your full name;
  • Contact information used while booking;
  • Booking reference, where relevant;
  • A clear description of your request; and
  • Information reasonably required to verify your identity.

I will respond within the timeframe required by applicable law.

19. Grievance Officer

Questions, concerns or complaints relating to privacy or personal information may be sent to:

Grievance Officer: Anu Kushwaha
Email: help@BackToWellbeing.org
Telephone: +91 9959866113
Postal address:3/7, Kalp City, Lucknow, UP, India

I will endeavour to acknowledge the complaint within 48 hours and resolve it within one month of receiving the complaint and all information reasonably required to examine it.

This process does not restrict any right to approach an appropriate regulator, court, consumer commission or other competent authority.

20. Third-party links

The website may contain links to third-party websites, platforms or applications.

I am not responsible for the privacy, security or content practices of a third party. You should review the third party’s privacy policy before providing information through its service.

Who we are

Our website address is: https://anukushwaha.com.

21. Changes to this Privacy Policy

I may update this Privacy Policy to reflect changes in:

  • Applicable law;
  • Technology;
  • Website functionality;
  • Service providers; or
  • Business practices.

The revised version will be published on this page with an updated effective date. Where a change materially affects how previously collected information is used, additional notice or consent will be provided where required.

22. Contact

For questions about this Privacy Policy, contact:

Anu Kushwaha
Email: info@BackToWellbeing.org
Telephone: +91 9959866113
Address: 3/7, Kalp City, Lucknow, UP, India
Website: anukushwaha.com