Privacy notice
Last updated: 29 October 2026
Who we are
Synkriya (“we”, “us”) is a psychiatric practice run by Dr. Rohan Kosambiya and Dr. Ishanshi Sonera, offering consultations online. We decide why and how your personal data is used, which makes us the Data Fiduciary under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the “DPDP law”). Postal address: .
This notice explains, in plain language, what we collect, why, who we share it with, how long we keep it, and how you can exercise your rights. If you would like it in another Indian language, write to us and we will provide it.
What we collect
| Data | Why we need it |
|---|---|
| Name, email address, mobile number | To confirm your identity, book and hold your consultation, and contact you about it |
| Session type, psychiatrist, date and time, and the time zone you viewed times in | To schedule and conduct the consultation, and to tell you the time in your own zone |
| For a child’s session: the child’s name and age, and the parent’s or guardian’s confirmation and consent | To book the consultation for the child with a parent’s or guardian’s consent (see Children and teenagers) |
| For a Couples session: your partner’s name and, if you give it, their email | To prepare the session and, if you choose, send them the invite |
| Optional: preferred language, whether it is your first session, what you would like to focus on, and how you heard about us | To help your psychiatrist prepare, and to understand how people find us. You can leave all of these blank |
| Requests you send from “Manage my booking” | To reschedule or cancel your session as you ask |
| Waiting list: name, email, and optionally mobile number and preferred times | To contact you if a time opens up. Only if you join the waiting list |
| One-time verification code | To confirm the mobile number is yours. Codes are used once and not kept |
| Payment amount, status and transaction reference | To confirm payment, issue receipts, handle refunds and meet tax obligations. Card, UPI and bank details are entered directly with our payment provider and never reach us |
| Record of your consent (date, time and notice version) | To show, as the law requires, that you agreed to this notice |
| Clinical notes and prescriptions | Made by your psychiatrist during care and kept as confidential medical records, separate from the booking system |
| Basic technical logs (such as IP address and browser type) | Kept briefly to keep the service secure |
Health information is sensitive personal data under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. The booking form does not require any health details. If you choose to write what you would like to focus on, that note may contain health information: it is seen only by your psychiatrist(s), protected like the rest of your records, and you may leave it blank and share things in the consultation instead.
Why we are allowed to use it
We use your personal data on the basis of your consent, which you give when you book. Your consent covers only the purposes listed above. We may also process data without consent where the DPDP law permits, for example to respond to a medical emergency or to comply with a legal obligation.
You can withdraw your consent at any time, as easily as you gave it, by writing to us. Withdrawing does not affect anything done before, and we may need to keep certain records where the law requires. Without consent we will not be able to book or continue online consultations.
Who we share it with
We never sell your data or use it for advertising. We share it only with service providers who help us run your appointment, under contracts that limit them to that purpose:
| Provider | What for | Where |
|---|---|---|
| Supabase | Secure database for booking records | India (Mumbai) |
| Cloudflare | Hosting the website and protecting booking from automated abuse | Global network |
| Google (Workspace) | Email, calendar invites and Google Meet video sessions | Global |
| Razorpay | Processing payments and refunds | India |
| SMS provider [to be confirmed] | Sending your verification code | [to be confirmed] |
We may also disclose information when required by law, by a court or regulator, or to protect someone from serious harm.
Medical confidentiality
What you share in a consultation is protected by medical confidentiality and the Mental Healthcare Act, 2017. Only your treating psychiatrist(s) can see your records; for couples sessions, both psychiatrists attend and share the notes. Confidentiality may be set aside only where the law allows, for example to prevent serious harm to you or others.
How long we keep it
We keep booking and payment records for as long as needed to provide your care and for the periods required by tax, accounting and medical-records law. When data is no longer needed for these purposes, we delete it or make it anonymous. If you have not interacted with us for a long period, we will erase data we are not required to keep, as the DPDP law provides.
How we protect it
- The site is served only over encrypted HTTPS.
- Booking records are stored in a database that visitors cannot read. Each psychiatrist can see only their own patients.
- Doctors sign in with a password and a second verification step, and are signed out automatically after inactivity.
- Every change to a booking is logged.
If a personal data breach occurs, we will inform the people affected and the Data Protection Board of India as the law requires.
Your rights
Under the DPDP law you can ask us to:
- tell you what personal data we hold about you and how it is used, and with whom it has been shared;
- correct, complete or update it;
- erase it, unless the law requires us to keep it;
- let a person you nominate exercise these rights if you are unable to.
To make a request or a complaint, contact our Grievance Officer: , synkriya.psychiatry@gmail.com. We will respond within the time set by law. If you are not satisfied with our response, you may complain to the Data Protection Board of India. More about your rights as a patient is on our Your rights page.
Children and teenagers
For anyone under 18, a parent or legal guardian must book, give consent on the child’s behalf and join the consultation. When booking, the parent or guardian confirms that they are the child’s parent or legal guardian; we record that confirmation with the time it was given, and we may ask for reasonable proof of the relationship and identity before or at the first session, as the DPDP law requires.
We use a child’s data only to provide their care. We do not track children’s behaviour, profile them or show them advertising.
Cookies and browser storage
We do not use advertising or analytics cookies. The website stores only what it needs to work: your progress through a booking, your chosen time zone and day/evening display setting, and a sign-in session for doctors. You can clear these at any time in your browser settings.
Changes to this notice
If we change this notice, we will update the date above and ask for fresh consent where the law requires. Questions? Email synkriya.psychiatry@gmail.com.