Privacy policy
Last updated: 1 November 2026
This policy explains how Bhaskar Das Longevity collects, uses, shares and protects your personal information, including health information you share for coaching. It applies wherever you live. It is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act), the EU General Data Protection Regulation (GDPR) and the UK GDPR, and to respect similar privacy laws in other countries.
1. Who is responsible for your data
Bhaskar Das, trading as Bhaskar Das Longevity, Gurugram, Haryana, India, decides how your personal data is used. Under the DPDP Act this makes me the "Data Fiduciary", and under the GDPR the "controller". You can reach me about anything in this policy at coach@bhaskardaslongevity.com.
2. What I collect
- Contact details you give me: name, email, phone or WhatsApp number.
- Enquiry details: the program you're interested in and anything you write in the contact form.
- Coaching information if you become a client: health screening answers, goals, physical test results, body measurements, wearable data you choose to share, and blood reports from partner labs.
- Payment and billing records such as invoices. Card or UPI details are handled by the payment provider, not stored by me.
- Technical data collected by the website host for security and to deliver the site, such as IP address, browser type and time of visit.
3. Why I use it and the legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to your enquiry and arranging a call | Your consent, and steps you ask for before entering a contract |
| Assessing, planning and delivering your coaching, and tracking progress | Performance of our contract; explicit consent for health information |
| Invoicing, accounting and tax records | Legal obligation |
| Keeping the website secure and preventing spam | Legitimate interests in running a safe website |
| Sharing anonymised results or testimonials | Your separate, explicit consent only |
Under the DPDP Act, I process your data on the basis of your consent or for other lawful uses the Act permits. I do not sell your personal data, use it for advertising profiles, or make decisions about you by automated means alone.
4. Health information
Health information is a special category of data under the GDPR and needs extra care. I collect it only with your explicit consent, use it only to coach you, and share it only as described below. You can withdraw consent at any time by emailing me; this won't affect anything done before you withdrew, but I may not be able to continue coaching you without it.
I am a fitness coach, not a medical provider. Information you share is not a medical record, and I will suggest you see a doctor when something needs medical attention.
5. Who I share it with
- Partner diagnostic labs, only with your agreement, to carry out blood tests.
- A doctor, physiotherapist or dietitian, only with your agreement, when a referral is needed.
- Service providers that process data on my instructions and under contract: Cloudflare (website hosting and security), Web3Forms (delivering contact-form messages to my email), Google Workspace (email, documents and calendar), and any video-call, scheduling or payment tool I tell you about when you sign up.
- Authorities, if the law requires it.
6. International transfers
I am based in India, and some service providers, such as Cloudflare, Web3Forms and Google, may store or process data in the United States or other countries. If you are in the European Economic Area, the UK or Switzerland, your data is transferred outside those regions. I rely on safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum) offered by these providers, or on your explicit consent where no other safeguard applies. You can ask me for details of these safeguards.
7. How long I keep it
- Enquiries from people who don't become clients: deleted within 12 months.
- Client coaching records: kept while you are a client and for up to 3 years afterwards, then deleted.
- Invoices and accounting records: kept as long as tax law requires, typically 8 years in India.
8. How I protect it
The website is served only over HTTPS. Client records are kept in accounts protected by strong passwords and two-factor authentication, access is limited to what is needed, and reports are shared through secure links rather than open attachments where possible. If a breach affects your data, I will notify you and the relevant authorities as the law requires: the Data Protection Board of India and, for EU or UK residents, the relevant supervisory authority within 72 hours where required.
9. Your rights
Wherever you live, you can ask me to:
- tell you what data I hold about you and give you a copy (access);
- correct or complete it (rectification);
- delete it (erasure);
- withdraw consent at any time, as easily as you gave it.
If you are in the EU, UK or another region with similar laws, you can also:
- ask me to limit how I use your data (restriction);
- receive your data in a portable format or have it sent to someone else (portability);
- object to processing based on legitimate interests.
Under the DPDP Act you can also nominate another person to exercise your rights if you die or become unable to.
To use any right, email coach@bhaskardaslongevity.com. I may ask you to confirm your identity. I'll respond within one month, or sooner where the law requires.
If you're unhappy with my response, you can complain to the Data Protection Board of India, or, if you are in the EU or UK, to your local data protection authority (in the UK, the Information Commissioner's Office).
10. Cookies and tracking
This website does not use advertising or analytics cookies and does not track you across other sites. Fonts and files are served from this website itself, not from third-party services.
The home page can show some of my Instagram posts. They are not loaded automatically: nothing is requested from Instagram until you click "Show Instagram posts". If you do, Instagram (Meta Platforms) receives your IP address and browser details and may set its own cookies, under Instagram's privacy policy. Clicking the button is how you consent to this, and you can simply not click it.
If I add analytics or other tracking in future, I will update this policy and ask for your consent first where the law requires it.
11. Children
My services are for adults aged 18 and over. I don't knowingly collect data from children. If a parent or guardian enquires on behalf of an older family member, the family member's own consent is needed before coaching begins.
12. Changes and contact
I may update this policy as my services or the law change. The date at the top shows the latest version, and I'll tell clients directly about significant changes.
Questions or requests: coach@bhaskardaslongevity.com.