Privacy notice
Last updated 11 November 2026
Privacy notice
Last updated: 11 November 2026
This notice explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and what you can do about it. We have tried to write it so that you can read it once and understand it.
If anything here is unclear, write to us at contact@primebeing.co or message us on WhatsApp at +91 94081 08886. A real person will answer.
Who we are
PrimeBeing is a health-information and wellness service based in Gota, Ahmedabad, Gujarat, India. It is run as a sole proprietorship by V.A. Brahmbhatt, trading as “PrimeBeing”.
In this notice, “we”, “us” and “PrimeBeing” mean V.A. Brahmbhatt trading as PrimeBeing. Under India’s data protection law we are the “Data Fiduciary”. That means we decide why and how your information is used, and we are responsible for it.
Contact for privacy questions and requests, and Grievance Officer:
- Name: V.A. Brahmbhatt
- Role: Proprietor and Grievance Officer, PrimeBeing
- Email: contact@primebeing.co
- Phone / WhatsApp: +91 94081 08886
- Hours: Every day, 8 am to 8 pm (India time)
The short version
- We collect only what we need to arrange your home blood test, write your report and plan, and do your retest.
- Your health information is used only to provide your service. We never use it for advertising. We never sell it.
- We share your details with our partner lab so that a phlebotomist can visit and the lab can test your sample.
- Some of our service providers store data outside India.
- You can see, correct or delete your information, and you can withdraw your consent, by contacting us.
- If you book for someone else, we confirm with that person directly and ask for their own consent before we collect a sample or any health information.
What we collect
Information you give us on the website
When you fill in the booking form, we collect:
- your name
- your WhatsApp number
- your email address (optional)
- your city (Ahmedabad or Gandhinagar) and pincode
- your address or area for the home visit
- your preferred day and time window
- your choice of package
- your preferred report language (English or Gujarati)
- the consents you give, and when you gave them
If you book for someone else
We also collect that person’s:
- name
- age
- relationship to you
- address for the home visit
- phone or WhatsApp number, so that we can confirm with them directly (optional)
See “Booking for someone else” below for how we treat this information.
Health information you give us after you book
There is no health questionnaire on our website. After you pay, we contact the person being tested by phone or WhatsApp. We ask for their consent first, and then ask questions that help us choose the right tests and write a useful plan. These may include:
- medicines and supplements being taken
- existing health conditions
- symptoms and how long they have lasted
- eating and daily habits
- menstrual history, where it is relevant
You can decline to answer any question. If a missing answer means we cannot provide the service safely or usefully, we will tell you and offer a refund under our refund and cancellation policy.
Lab results
Our partner lab sends us the results of the tests it runs on the sample. We use these to write the report and plan. At the retest, we receive those results too.
Payment information
Payments are processed by Razorpay. We never see or store your card number, CVV, UPI PIN or netbanking password. Razorpay tells us that a payment was made, the amount, the payment method type, a payment reference, and the name and contact details used for the payment. We also keep records of refunds.
Information collected automatically
- Basic technical data. Our website host, Vercel, processes technical details such as your IP address, browser type and the pages requested. This is needed to deliver the site and keep it secure.
- Cookieless analytics. We use Vercel Web Analytics to count visits and see which pages are useful. It does not use cookies and does not build a profile of you across websites.
- How you found us. If you arrive from an advertisement or a link, we note the campaign tags in the link (called UTM parameters), the Meta click identifier (fbclid) if there is one, and the first page you landed on. If you make a booking, this is saved with it so that we know which of our messages are helpful. These tags are kept in your browser’s local storage until you book, as explained under “Cookies, analytics and advertising” below.
Messages and calls
We keep the WhatsApp messages, emails and call notes we exchange with you. If we ever want to record a call, we will ask you first. We do not record calls at present.
Why we use your information
We use your information only for the purposes below.
| Purpose | Information used | Why we are allowed to |
|---|---|---|
| Arrange and confirm your booking and home sample collection | Booking form details | Your consent, given on the booking form |
| Share what the lab and phlebotomist need to visit and test | Name, age, sex where the lab needs it, address, phone number, tests ordered | Your consent |
| Choose tests, write your report and plan, and adjust the plan after the retest | Health information and lab results | The explicit consent of the person tested |
| Contact you about your booking, report and retest | Name, WhatsApp number, email | Your consent |
| Take payments and give refunds | Payment records | Needed to provide what you paid for; also required by tax law |
| Answer questions and handle complaints | Messages and booking records | Your request; our legal duties |
| Keep accounts and meet legal duties | Payment and booking records | Required by law |
| Understand which pages and messages work | Cookieless analytics, campaign tags | Low-risk measurement that does not use health information |
| Send health tips and offers | Name, WhatsApp number, email | Only if you tick the optional marketing box. You can stop at any time |
| Measure our adverts on Meta (not active yet, see below) | Limited website events | Only if you agree in the cookie banner |
We do not use your information to make automated decisions about you. A person prepares your report and plan.
Your health information gets extra care
Health information is sensitive. We treat it differently from everything else:
- We collect it only after the person tested has agreed.
- We use it only to provide the service to that person.
- Only the people who need it to prepare the report and plan can see it.
- We never use it for advertising or share it with advertising platforms.
- We never sell it or give it to insurers, employers or anyone else for their own use.
- We share a report with a family member only if the person tested tells us to.
Booking for someone else
Many people book for a parent. Here is how we handle that.
- When you book for someone else, you confirm that they know about the booking and have agreed to you sharing their name, age, relationship and address with us.
- We use those details only to contact them.
- Before any sample is collected or any health question is asked, we speak to them directly. We explain the service and this notice, and we ask for their own consent.
- If they say no, or we cannot reach them within 7 days, we cancel the booking, refund you under our refund and cancellation policy, and delete their details, except for a minimal record that the booking was cancelled.
- The test results and the report belong to the person tested. We send them to that person. We share them with you only if that person agrees. They can change their mind at any time.
If the person you are booking for cannot make decisions for themselves, please contact us before booking. We may need to speak to their lawful guardian.
Who we share your information with
We share information only with those who need it to provide the service, and only what they need.
Our partner lab and its phlebotomists
Our partner lab is an accredited diagnostic laboratory. We name the lab in your booking confirmation. We give it the name, age, sex (where needed), address and phone number of the person being tested, and the list of tests. The lab collects the sample, tests it, and sends us the results.
The lab also has its own legal duties to keep test records. For those records, the lab is responsible in its own right and follows its own privacy policy.
Service providers who work for us
| Provider | What it does for us | Information involved | Where it may be stored |
|---|---|---|---|
| Vercel | Hosts our website; cookieless analytics | Technical data; booking form data as it passes through | United States and other countries |
| Google (Google Workspace: Sheets, Drive, Gmail) | Stores booking records; sends us notifications | Booking details and service records | Google data centres in several countries, which may be outside India |
| Razorpay | Processes payments and refunds | Name, contact details, payment details | India |
| Zoho Mail | Our email | Emails you send us and our replies | Zoho’s India data centre |
| WhatsApp (Meta) | Messages and calls with you | Message content, phone number | Meta’s servers in several countries |
Lab reports and written plans are stored in Google Drive (part of Google Workspace above), in folders that only our team can open, and are shared with you on WhatsApp or email.
These providers may use information only to provide their service to us. We choose well-known providers with strong security, and we ask them to protect your information.
Others, only when needed
- Professional advisers, such as our accountant or lawyer, where needed and under a duty of confidence.
- Government bodies, courts or regulators, where the law requires us to disclose information.
- A new owner or legal entity, if PrimeBeing is moved into a company or transferred. We will tell you first, and this notice will continue to protect your information.
We do not sell your personal information. We do not share it with anyone for their own marketing.
Storage outside India
Some of the providers above store or process information outside India, including in the United States. When you give consent on the booking form, you also agree to this.
Indian law currently allows this. If the Government of India restricts transfers to any country, we will follow that restriction. Wherever your information is stored, we remain responsible for it.
Cookies, analytics and advertising
Today. Our website does not set advertising or tracking cookies. We use cookieless analytics from Vercel. A small amount of information may be kept in your browser for the site to work, for example to remember your banner choice. Specifically, the site keeps the campaign tags from the link you arrived on (UTM parameters, fbclid), the first page you visited and the referring site in your browser’s local storage, so that they can be attached to a booking; and, after you book, your booking reference and payment link in session storage so that you can retry a payment. Nothing is stored that identifies your health.
Meta Pixel and Conversions API (planned, not active yet). In future we may use Meta’s tools to measure whether our Instagram and Facebook adverts lead to bookings. When we do:
- They will be switched on only if you choose “Accept” in our cookie banner. If you choose “Reject”, nothing is sent.
- We will send only limited events, such as “visited the site” or “a booking was made”, with the time, the Meta click identifier and standard browser information.
- We will never send health information, test results, the contents of the booking form, or the name of the package you chose.
- Meta may use this information, together with what it already knows about you, to measure and deliver adverts. You can control this in your Facebook or Instagram ad settings.
- You can change your choice at any time using the “Cookie settings” link in the footer of our website.
How long we keep your information
We keep information only as long as we need it for the purposes above, or as long as the law requires.
| Information | How long we keep it |
|---|---|
| Enquiries and bookings that were started but never paid for | Up to 90 days |
| Booking and contact records for completed bookings | 8 years from the end of the financial year of the booking, because tax and accounting laws require business records to be kept |
| Payment and refund records, invoices | 8 years from the end of the financial year |
| Health information, lab results, reports and plans | 3 years after your last service with us, so that we can answer your questions, support a later booking and deal with any complaint or legal claim. Then we delete or anonymise them |
| Details of a person you booked for, where that person did not consent or could not be reached | Deleted within 30 days of cancellation, except a minimal cancellation and refund record |
| WhatsApp messages, emails and call notes about your service | 3 years after your last service |
| Records of the consents you gave or withdrew | For as long as we hold the related information, plus 3 years |
| Marketing contact list | Until you opt out, or after 24 months without any contact from you |
| Campaign tags (UTM, fbclid, landing page) | 24 months |
| Complaint and grievance records | 3 years after the complaint is closed |
If you ask us to delete your information earlier, we will do so unless we need to keep it to finish a service you have asked for, to meet a legal duty, or to deal with a complaint or legal claim. Indian data protection rules also expect organisations to keep certain records and logs for at least one year. If we cannot delete something straight away, we will tell you what we are keeping and why.
Our partner lab keeps its own test records for the period its laws and accreditation require.
How we protect your information
No system is perfectly secure, but we take sensible steps that fit the size of our service and the sensitivity of health information:
- access to booking records and health information is limited to the people who need it
- accounts that hold your information are protected with strong passwords and two-step verification
- data is encrypted in transit and at rest by our providers
- we share with the lab only what it needs
- we do not keep card details at all
- we keep backups, and we review who has access
Please help us by not sending health information to any number or email address other than the ones listed in this notice.
If something goes wrong
If we learn of a data breach that affects your personal information, we will tell you without delay. We will explain, in plain language:
- what happened and when
- what it may mean for you
- what we are doing about it
- what you can do to protect yourself
- who to contact with questions
We will also notify the Data Protection Board of India and any other authority, as the law requires.
Your rights and choices
You can:
- See a summary of the personal information we hold about you and what we have done with it.
- Know which providers and partners we have shared it with.
- Correct, complete or update information that is wrong or out of date.
- Delete your information, subject to the limits explained above.
- Withdraw your consent at any time. It is as easy as giving it: send “withdraw consent” to us on WhatsApp or by email. Withdrawing consent does not undo what we have already done. If you withdraw before the service is complete, we may not be able to finish it; our refund and cancellation policy explains what happens then.
- Stop marketing messages by replying “STOP” or contacting us.
- Nominate another person to exercise these rights for you if you die or become unable to act.
- Complain if you are unhappy with how we have handled your information.
How to make a request
Write to contact@primebeing.co, or message or call +91 94081 08886. Please tell us your name and the WhatsApp number you used to book, so that we can find your records. To protect you, we may ask a question or two to confirm it is really you. If you are asking about someone else’s information, we will check with that person.
We do not charge for requests.
How quickly we respond
- We acknowledge every request and complaint within 48 hours.
- We aim to resolve it within 30 days. If something is complex and needs longer, we will tell you why, and it will never take more than 90 days.
Complaints and the Data Protection Board
Please contact our Grievance Officer first, using the details at the top of this notice. We take complaints seriously and will try to put things right.
If you are not satisfied with our answer, or we do not respond in time, you have the right to complain to the Data Protection Board of India. The Board works as a digital office, so complaints are made online. You can find it through the Board’s official website. The law asks you to use our grievance process before going to the Board.
You also have rights as a consumer. You can contact the National Consumer Helpline on 1915 or at consumerhelpline.gov.in.
Children
Our service is for adults. You must be 18 or older to book, and the person tested must be 18 or older. We do not knowingly collect information about anyone under 18. If you believe we have, please tell us and we will delete it.
If you are outside India
Our service is delivered only in Ahmedabad and Gandhinagar, India, and we are based in India. Indian law governs how we handle your information.
Some people who book for their parents live in other countries. If that is you:
- Your information will be processed in India and by the providers listed above.
- Whatever country you live in, you can use all the rights in this notice.
- If you live in the European Economic Area or the United Kingdom, and data protection law there applies to our handling of your booking details, we rely on these grounds: taking steps to enter into and perform our contract with you; your consent, where we ask for it; our legal duties; and our legitimate interest in running and improving a small service safely. You may also have the right to object, to restrict use of your data, to receive a copy in a portable form, and to complain to your local data protection authority.
- Information about the person being tested in India is handled under Indian law.
Changes to this notice
We may update this notice as our service or the law changes. The date at the top shows when it was last updated. If we make a change that affects how we use your information in an important way, we will tell you by WhatsApp or email before it takes effect, and ask for your consent again where the law requires.
Languages
This notice is written in English. A Gujarati explanation is available on request on WhatsApp. If the two versions ever differ, tell us and we will explain which meaning applies.
Contact us
V.A. Brahmbhatt, Grievance Officer, PrimeBeing Gota, Ahmedabad, Gujarat, India Email: contact@primebeing.co Phone / WhatsApp: +91 94081 08886
Questions about this page: contact@primebeing.co · +91 94081 08886