Privacy Policy,
Terms & Refund
VOS Health and Life Solutions Private Limited (Hlty Beings)
Last Updated: 13 April 2026 · Effective Date: 13 April 2026
Jurisdiction: Bangalore, Karnataka, India · CIN: U86909KA2023PTC181856
Part I: Privacy Policy
Compliant with Digital Personal Data Protection Act, 2023 (DPDP Act)
Welcome to www.hlty.care. VOS Health and Life Solutions Private Limited ("Hlty Beings," "we," "our," or "us") operates this website, providing educational health experiences, books, and workshops for children and families. Your privacy and trust are of utmost importance to us.
1. Introduction & Legal Basis
- •Legal Basis: We process personal data based on consent (Section 4, DPDP Act) or legitimate uses (Section 7, DPDP Act). By using our Website and explicitly consenting via the checkbox at signup/checkout, you consent to this Privacy Policy.
- •Digital Data Fiduciary: We qualify as a Significant Data Fiduciary under Section 10, DPDP Act, as we process children's personal data (grades 4–7) and health-related data.
2. Information We Collect & Purpose
| Data Category | Specific Purpose | Legal Basis | Retention Period |
|---|---|---|---|
| Identity: Name, email, phone | Order fulfillment, workshop registration | Consent / Contract | 5 years from last transaction |
| Child's Data: Name, age, school, health info (allergies) | Workshop safety, age-appropriate content | Verifiable Parental Consent (Section 9) | Until child turns 18, then 3 years |
| Payment Data: UPI/Card details (tokenized) | Transaction processing | Legitimate Use | 7 years per RBI requirements |
| Technical: IP address, browser, cookies | Website security, analytics | Consent (cookies); Legitimate Use (security) | 1 year for logs |
| Communication: Emails, WhatsApp | Customer support | Consent | 3 years from resolution |
3. Children's Data Protection (Section 9, DPDP Act)
We serve children (grades 4–7) with verifiable parental consent:
- •Age Verification: Parents/guardians provide contact details and verify identity via OTP to registered mobile/email before any child's data is collected.
- •Parental Consent: No data collected from children without affirmative consent from a verified parent/guardian.
- •Processing Restrictions: We do not track children's behaviour for advertising or profiling.
- •Breach Notification: Parents notified within 24 hours of any breach affecting children's data.
Guardian's Rights: Parents may review, correct, or delete their child's data by contacting our DPO at dpo@hlty.care.
4. Cross-Border Data Transfers
All transfers comply with Section 16, DPDP Act. Data principals may request copies of SCCs by emailing dpo@hlty.care.
| Service | Location | Data Transferred | Safeguard |
|---|---|---|---|
| Framer Inc. | United States | Website hosting, form data | Standard Contractual Clauses (SCCs) |
| Formspark | EU / United States | Form submissions | SCCs with adequacy assessment |
Review their privacy policies:
5. Your Rights as a Data Principal (Sections 11–14, DPDP Act)
| Right | How to Exercise | Timeline |
|---|---|---|
| Access | dpo@hlty.care | 30 days |
| Correction | dpo@hlty.care | 15 days |
| Deletion | dpo@hlty.care | 30 days |
| Nomination | Email dpo@hlty.care with nominee details | Immediate |
| Grievance Redressal | grievance@hlty.care | 48 hrs acknowledgment; 30 days resolution |
| Consent Withdrawal | dpo@hlty.care | Immediate for future processing |
6. Officers & Contact
In accordance with startup operational efficiency, the same individual currently holds multiple statutory officer roles as permitted under DPDP Act and CPA 2019.
Data Protection Officer (DPO)
Suraj Prasad
dpo@hlty.careA-301 Purva Panorama, Kalena Agrahara, Bannerghatta Road, Bangalore South, Karnataka 560076, India
48 hours response
Grievance Officer
Suraj Prasad
grievance@hlty.careA-301 Purva Panorama, Kalena Agrahara, Bannerghatta Road, Bangalore South, Karnataka 560076, India
48 hrs acknowledgment; 30 days resolution
Nodal Officer (E-Commerce)
Suraj Prasad
nodal@hlty.careA-301 Purva Panorama, Kalena Agrahara, Bannerghatta Road, Bangalore South, Karnataka 560076, India
48 hrs acknowledgment; 30 days resolution
7. Data Security & Breach Notification
Security: Encryption (AES-256), access controls, regular audits.
Breach Protocol: In case of a personal data breach, we notify:
- •Data Protection Board of India within 72 hours
- •Affected Data Principals within 72 hours
- •Parents/Guardians within 24 hours (if children affected)
8. Cookies and Tracking Technologies
We use cookies to improve website functionality and analytics. A cookie consent banner is displayed on your first visit — non-essential cookies (analytics) are only activated after your explicit acceptance. You can manage cookie preferences at any time via your browser settings.
9. Changes to this Privacy Policy
Updates are posted here with the "Last Updated" date revised. Significant changes will be communicated via email 7 days in advance.
Contact Us
National Consumer Helpline
1915
A-301 Purva Panorama, Kalena Agrahara, Bannerghatta Road, Bangalore South, Karnataka 560076, India
Acknowledgment
- •You have read this Privacy Policy and Terms of Use.
- •You consent to data processing as described herein.
- •If registering a child, you are the legal parent/guardian with authority to provide consent.
- •You understand your statutory rights under Indian consumer and data protection laws.
© 2026 VOS Health and Life Solutions Private Limited (Hlty Beings). All Rights Reserved.