The Brain Tea Mental Health Clinic(“we”, “us”, “our”, or “the Clinic”) operates the website https://www.thebraintea.co.in and provides mental health and psychotherapy services. We are committed to protecting the privacy of our clients and website visitors and to handling personal data in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable Indian law.
By using our website, booking a session, or making a payment, you consent to the practices described in this Privacy Policy.
1. Information We Collect
We collect the following categories of information:
- Personal identification: your name, email address, phone number, and, where relevant, age, gender, and emergency contact details.
- Clinical & sensitive information: details you share for the purpose of therapy, such as your reason for seeking support, appointment history, and clinical notes recorded by your therapist. This is treated as sensitive personal data.
- Booking information: the service selected, appointment date and time, chosen consultant, and mode of session (in-person or online).
- Payment information: the amount, currency, invoice number, transaction reference, and payment status of each booking. We do not collect or store your card number, UPI PIN, bank credentials, or CVV. These are entered directly on the secure PhonePe payment page and are handled entirely by PhonePe.
- Technical information: IP address, browser type, and device information collected automatically when you use the website.
2. How We Use Your Information
We use your information only for legitimate purposes, including to:
- schedule, confirm, reschedule, and manage your appointments;
- deliver therapy services and maintain accurate, confidential clinical records;
- process payments, issue invoices, and handle refunds through our payment gateway;
- send appointment reminders and service-related communications by email, SMS, or WhatsApp;
- respond to your enquiries and provide customer support;
- comply with legal, accounting, and regulatory obligations, and detect or prevent fraud.
3. Clinical Confidentiality
Everything you discuss in a session is strictly confidential. Information about your care is shared only with your explicit written consent, except in the rare circumstances mandated by law — for example, where there is an imminent risk of serious harm to you or others, or where disclosure is required by a court or statutory authority. Our practitioners work within applicable professional and ethical guidelines.
4. Payments and PhonePe
Online payments on our website are processed through PhonePe Payment Gateway, a third-party payment aggregator regulated by the Reserve Bank of India. When you make a payment:
- you are redirected to PhonePe’s secure environment to complete the transaction using UPI, cards, net banking, or wallets;
- your sensitive payment credentials are collected and processed by PhonePe under their own privacy policy and PCI-DSS compliant infrastructure — not by us;
- we receive only a transaction reference, the amount, and the success or failure status, which we use to confirm your booking and for accounting.
We encourage you to review PhonePe’s Privacy Policy to understand how they handle your payment data.
5. How We Share Information
We do not sell or rent your personal information. We share it only with trusted service providers who help us operate, and only to the extent necessary:
- Payment processing: PhonePe, to collect payments and process refunds.
- Communications: our email and messaging providers to send confirmations and reminders.
- Hosting & infrastructure: our website and database hosting providers.
- Legal & regulatory bodies: where disclosure is required by law.
6. Data Security
We apply reasonable technical and organisational safeguards to protect your information, including encryption of sensitive clinical notes at rest, secure HTTPS transmission, access controls, and role-based permissions for staff. While we take security seriously, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.
7. Data Retention
We retain personal and clinical records for as long as necessary to provide our services and to meet our legal, professional, and accounting obligations. When information is no longer required, it is securely deleted or anonymised.
8. Your Rights
You may, subject to applicable law:
- request access to the personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- withdraw consent for non-essential communications at any time;
- request deletion of your information, where we are not required to retain it.
To exercise any of these rights, contact us at admin@thebraintea.co.in or +91 93098 33817.
9. Children’s Privacy
Services for minors (under 18) are arranged and consented to by a parent or legal guardian. We collect a minor’s information only with such consent and use it solely to provide the agreed care.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated “Last updated” date. Continued use of our website after changes take effect constitutes acceptance of the updated policy.