Privacy Policy

1. Who We Are

Goswami Rehab is the public name of Goswami Institute of Functional Training. We provide home physiotherapy and functional training in India. Online consultation requests are reviewed for location, practitioner scope and suitability before any appointment is confirmed.

Our address is E-60, Murlipura Scheme, Jaipur, Rajasthan. For privacy questions or requests about your information, email rgk21994@gmail.com or call +91 79760 44858.

2. Information We Collect

When you visit our website or send us a request, we may collect:

• Booking details, such as the care pathway you choose, preferred date and time, your name, email, phone number, country code and time zone. You may also share a city or location and notes about your concern.
• Workplace enquiry details, such as your organisation, contact person, work email, phone number, company size, locations, programme interests and message. Any optional programme answers are included in that message.
• Contact form details: your name, email address, phone number and message. This also applies to the version of our contact form that works without JavaScript.
• Consent details: which version of this policy you agreed to and when you submitted your request.
• Technical details: our API uses your IP address to temporarily limit repeated submissions. The application log records a request ID, method, URL path and response status, but is not designed to record form contents.
• Browser storage: your analytics choice is saved in your browser. If you accept analytics, a first-party session cookie may store selected campaign details (source, medium and campaign name) and the host name of an external referring website. These details may be included with a patient or workplace request to help us understand how you found us. We do not store the full referring URL.

3. How We Use Your Information

We use the information you share to:

• Review and reply to booking, contact and workplace requests.
• Discuss availability, care and the services you asked about.
• Keep the business and care-related records needed for follow-up, bookkeeping and legal requirements.
• If you accept analytics, understand overall website visits and interactions, including which campaigns lead to requests. Analytics events do not contain your name, contact details, message text or health information.
• We do not sell personal information or use your request details for advertising.

4. Health Information

You can include health details in a booking request or message. Please share only what we need to respond. Do not send medical records or urgent symptoms through the website.

A website request is not a clinical record. Records created as part of care may be kept outside this website and are managed separately under applicable record-keeping requirements.

5. Data Storage and Security

Website requests are stored in this application’s PostgreSQL database and sent to the care team through Gmail. We use technical safeguards designed to reduce unauthorised access and misuse.

We delete website enquiry records from the database once they are 12 months old. This helps us manage follow-up and bookkeeping. It does not delete notification copies in Gmail. If the law requires a longer retention period, that is handled separately. Clinical records kept outside this website also follow separate record-keeping requirements; we do not set a fixed period for them here.

6. Sharing Your Information

We do not sell, rent or trade your personal information. We share it only when needed in these situations:

• The hosting and database services that run this website.
• Google Gmail, which sends the care team request notifications containing the details you submitted.
• Google Maps, which may load on the coverage map when configured. Google receives the browser request and related technical connection information.
• Google Analytics, but only if you accept analytics. It receives page-view and interaction data, such as the page path and event type, plus a broad request category and selected campaign details when available. It does not receive form contents, contact details or health information.
• A service provider or authority, when needed to provide the service you requested or meet a legal requirement.

7. Subprocessor Disclosure and Service Providers

Replit hosts the published website, and the application uses a PostgreSQL database. Google Gmail receives request notifications with the details you submit. Google Maps JavaScript may load on the coverage map when configured. Google Analytics loads only if you accept it in the website’s consent prompt.

We also link to WhatsApp. If you open WhatsApp and send a message, WhatsApp handles it under its own terms and privacy practices.

8. Your Rights

You can:

• Ask what personal information we hold about you, or request a correction or deletion. Legal and bookkeeping requirements may limit what we can remove.
• Email rgk21994@gmail.com to make a request. Before sharing or deleting website records, we will check that you control the email address. Gmail notification copies and clinical records held outside this website are handled separately.

9. Cookies

Google Analytics loads only if you select “Accept analytics.” If you reject it, the analytics tag does not load. We save your choice in your browser so you do not have to make it again. Use “Privacy choices” in the footer to change your mind. If you withdraw consent, analytics stops and Google Analytics cookies set for this site are removed.

If you accept analytics, a first-party session cookie may store selected campaign details and an external referring website’s host name. We may include these details with a patient or workplace request to understand which campaign led to it. We do not store the full referring URL. Rejecting or withdrawing consent removes this attribution cookie.

10. Third-Party Links

The coverage map may load Google Maps JavaScript when configured. We also link to Google Maps and WhatsApp. When you use these services, they handle your browser data under their own privacy policies.

11. Changes to This Policy

If our practices change, we will update this policy and its version date.

12. Version history

Version 2026-10-16 — updated to describe the current website forms, database and email handling, browser storage, external services, contact details, and retention approach.

Version 2026-10-23 — added consent-gated Google Analytics and clarified analytics data and browser choice storage.

Version 2026-10-27 — edited for clearer, more direct language without changing the described data practices.