Cookie Policy

This Cookie Policy explains how WellSathi ("we", "our", or "us") uses cookies and similar tracking technologies on www.wellsathi.in and our mobile applications (collectively, the "Platform").

It should be read alongside our Privacy Policy, which governs the broader processing of your personal data.

IMPORTANT — CONSENT:

Use of the Platform does not by itself constitute consent to the placement of non-essential cookies.

On your first visit, you will be presented with a granular cookie consent banner. We will place only strictly necessary cookies before you have made a choice.

Non-essential cookies are activated only after you provide category-specific consent through that banner or the Cookie Preference Centre.

You may withdraw consent at any time.

1. What Are Cookies and Similar Technologies?

A cookie is a small text file placed on your device (computer, tablet, or mobile) by a website when you visit it. Cookies allow the website to remember information about your visit, such as your login status or language preference.

This Policy also covers the following similar technologies, which we treat equivalently to cookies for the purposes of consent and control:

Web beacons and pixel tags: Tiny transparent images embedded in web pages or emails that signal when content is viewed.

Local storage and session storage: Browser-based storage mechanisms used to retain data on your device across or within sessions.

Software Development Kit (SDK) trackers: Code embedded in our mobile applications that performs functions analogous to cookies in a mobile context.

Fingerprinting: We do not use device fingerprinting.

2. Categories of Cookies We Use

The table below sets out each category of cookie we use, its purpose, examples, whether your consent is required, and the maximum retention duration.

Category	Purpose	Examples	Consent Required?	Max Duration
Strictly Necessary	Core Platform functions: login sessions, security tokens, booking flow state. Cannot be disabled.	session_id, csrf_token, auth_token	No — exempt under applicable law	Session / up to 12 months
Functional / Preference	Remember your stated preferences: language, city, saved searches, display settings.	lang_pref, location_pref, recent_search	Yes — opt-in required	Up to 12 months
Analytics	Aggregate, anonymised data on how users navigate the Platform; used only for performance improvements. No individual profiling.	Google Analytics (_ga, _gid), Hotjar (anonymised session recordings)	Yes — opt-in required	Up to 12 months
Marketing / Advertising	Deliver relevant promotional content within the Platform and measure campaign effectiveness. Deployed only with explicit consent.	Google Ads conversion tag, Meta Pixel (_fbp)	Yes — opt-in required	Up to 90 days
Third-Party Embedded	Set by integrated third-party services. Governed by those parties' own policies.	Cashfree Payments, PayU (payment checkouts), Google Maps	Varies by service	Varies

3. First-Party vs. Third-Party Cookies

First-party cookies are set directly by WellSathi and are used exclusively to operate and improve the Platform for you.

Third-party cookies are set by external service providers we have integrated into the Platform. These providers act as independent data controllers for the data their cookies collect and are governed by their own privacy and cookie policies.

The principal third-party cookie providers currently in use are:

Google LLC (Google Analytics, Google Ads): Privacy policy at policies.google.com/privacy.

Meta Platforms Ireland Ltd (Meta Pixel): Privacy policy at www.facebook.com/privacy/policy.

Cashfree Payments India Private Limited (payment gateway session & security cookie): Privacy policy at cashfree.com/privacy.

PayU Payments Private Limited (payment gateway session & security cookie): Privacy policy at payu.in/privacy.

Google Maps (embedded clinic location maps): Governed by Google's cookie policy.

We contractually require all third-party providers to handle personal data collected through their cookies in compliance with applicable Indian data protection law.

However, we are not responsible for the data practices of these providers beyond that contractual obligation.

4. Managing and Controlling Cookies

You have the following mechanisms to control cookies placed on your device.

4.1 Cookie Preference Centre

Our Cookie Preference Centre allows you to accept or decline cookies by category.

It is accessible:

On your first visit, via the cookie consent banner displayed at the bottom of the screen.

At any time thereafter, via the "Cookie Settings" link in the footer of every page on www.wellsathi.in.

Changes made through the Preference Centre take effect immediately for new cookies.

Cookies already stored on your device from a prior session will not be retroactively deleted.Your preferences are stored in a first-party cookie for up to 12 months.

4.2 Browser-Level Controls

All major browsers allow you to view, block, or delete cookies through their settings menus:

Google Chrome: Settings > Privacy and security > Cookies and other site data

Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data

Safari (desktop): Preferences > Privacy > Manage Website Data

Safari (iOS): Settings > Safari > Advanced > Website Data

Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data

Blocking strictly necessary cookies will impair core Platform functions, including login, booking flow, and payment.

4.3 Opt-Out from Specific Analytics and Advertising Providers

Google Analytics: Install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.

Google Ads (remarketing): Manage personalised ad settings at adssettings.google.com.

Meta (Facebook) Pixel: Manage via your Facebook Ad Preferences at www.facebook.com/ads/preferences.

General Interest-Based Advertising: You may opt out of participating members of the Digital Advertising Alliance at optout.aboutads.info or the European Digital Advertising Alliance at youronlinechoices.com.

5. Do Not Track (DNT) Signals

Some browsers transmit a "Do Not Track" (DNT) header signal to websites.

There is currently no legally binding standard under Indian law or any universally adopted technical standard that prescribes how websites must respond to DNT signals.

Accordingly, our Platform does not alter its cookie practices in response to DNT signals at this time.

We will review this position if the Government of India or the Data Protection Board issues guidance on DNT signal compliance, or if a recognised standard is adopted.

6. Cookies and Minors

Our Platform is not directed to individuals under 18 years of age and we do not knowingly use cookies to track minors.

Non-essential cookies — particularly marketing and analytics cookies — are not placed on devices that we have reason to believe are used by a minor.

If a parent or guardian believes that a minor's device has been subject to non-essential cookies placed by our Platform without valid parental consent, please contact us at [email protected] and we will promptly investigate and, where confirmed, take remedial action including deletion of any data collected.

7. Retention of Cookie Data

The maximum retention periods for each cookie category are set out in the table in Section 2.

These periods are the upper limits; in practice, many cookies are set for shorter durations or expire at the end of your browser session.

Personal data collected through analytics and marketing cookies is retained in accordance with our Privacy Policy (Section 6 — Data Retention).

Specifically:

Anonymised or aggregated analytics data derived from cookie data may be retained for up to 24 months for trend analysis purposes, as it does not constitute personal data.

Personal data linked to marketing cookies (such as identifiers used for remarketing) is retained for no longer than 90 days, after which it is deleted from our systems and from the relevant third-party advertising platform (to the extent that we have the technical means to instruct such deletion).

8. Changes to This Cookie Policy

We may update this Cookie Policy to reflect changes in:

The cookies or technologies we use (addition of new providers or removal of existing ones);

Applicable Indian law or regulatory guidance, including any directions from the Data Protection Board of India; or

Our data practices or business operations.

Material changes — defined as changes that affect the categories of cookies used, the purposes for which data is collected, or third-party providers with whom data is shared — will be communicated to you by:

Updating the "Last Updated" date at the top of this Policy;

Displaying a prominent notice on the Platform for at least 14 days; and

Re-presenting the cookie consent banner so that you may review and re-confirm or withdraw your consent in light of the change.

Non-material changes (corrections, formatting, addition of browser instructions) will be made without separate notice beyond updating the "Last Updated" date.

Continued use of the Platform after a non-material change does not require fresh consent but constitutes acknowledgement of the updated Policy.

9. Contact Us

If you have questions about this Cookie Policy, wish to exercise your rights regarding cookie-related personal data, or wish to make a complaint, please contact:

Platform

www.wellsathi.in

Privacy / Cookie Queries

[email protected]

General Support

[email protected]

Registered Address

Khamarbendi, Chas, Bokaro, Jharkhand – 827013, India

Response Time

Acknowledgement within 72 hours; substantive response within 30 days

Escalation

Data Protection Board of India (www.dpbi.gov.in) if unresolved within 30 days

10. Updates to This Policy

We may update this Cookie Policy as our practices change or new cookies are implemented. We will notify you of significant changes.

For questions about our cookie usage, contact: [email protected]