Privacy policy
To send a therapist to your home we need your name, your phone number and your address. This page sets out exactly what we do with that information, who else sees it, and how you can ask us to change or delete it.
Who we are
DoorMassage is a home wellness service operating in Guwahati, Assam, offering massage, facial and makeup treatments at your address. In this policy, "we" and "us" mean DoorMassage; "you" means anyone who books a session or uses this website.
We are the data fiduciary for the information described below, which means we decide why and how it is used, and we are answerable to you for it. This policy is written to meet our obligations under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 along with the rules made under them.
What we collect
Information you give us when you book
- Your name — so your therapist knows who they are meeting.
- Your phone number — to confirm the booking and to let the therapist reach you if they cannot find the address.
- Your address — including flat or house number, locality and landmark.
- Your booking details — the treatment you chose, the date and time slot, and whether you asked for a female or male therapist.
- Anything you tell us in a message — including anything you choose to mention on WhatsApp about health conditions, injuries or areas to avoid.
Information we record automatically
- Your payment reference — the transaction ID for the amount you paid. We do not receive or store your card number, UPI PIN, CVV or bank login. Those stay with your bank and our payment provider.
- The IP address your booking came from, kept as a basic check against spam and fraudulent bookings.
- Standard server logs kept by our hosting provider, such as the pages requested and the time of the request.
What we deliberately do not collect
We do not ask for your date of birth, your ID documents, your income, your caste or religion, or your marital status. If a form or a person claiming to be from DoorMassage asks you for any of these, or for an OTP, it is not us. Call +91-8822953511 and tell us.
Why we collect it
We use your information for these purposes and no others:
- To confirm your booking, assign a therapist and get them to your door at the right time.
- To send you your booking reference, your therapist's name, and any change to your slot.
- To take payment for the session and to process a refund if one is due.
- To answer a question or a complaint you raise with us.
- To keep the records our accountants and tax rules require.
- To look into a safety incident involving a client or a therapist.
Our legal basis is your consent, which you give by submitting the booking form, and the necessity of performing the service you have paid for. We do not sell your information to anyone, and we do not share it with advertisers.
If we ever want to send you offers or promotional messages, we will ask you separately first, and you can say no without it affecting your booking.
How long we keep it
- Booking records are kept for three years from the date of the session, so we can handle disputes, refunds and tax queries.
- Payment references are kept for eight years, as financial records generally must be.
- Messages and complaints are kept for two years after the matter is closed.
- Server logs are kept for the period our hosting provider retains them, typically a few months.
After these periods we delete the records or strip them of anything that identifies you. You can ask us to delete your details sooner — see your rights below.
How we protect it
- The website runs over an encrypted HTTPS connection.
- Booking records sit in a password-protected database that is not reachable from the public internet.
- Our booking dashboard is behind a login, with session timeouts and limits on repeated password attempts. Only the owner and authorised staff have accounts.
- Therapists are given your details for their assigned session only.
No system is perfectly secure. If a breach affects your information, we will tell you and the Data Protection Board of India as the law requires, and we will explain what happened and what you should do.
Your rights
Under the Digital Personal Data Protection Act, 2023 you can ask us to:
- Show you what information we hold about you and who we have shared it with.
- Correct anything that is wrong, incomplete or out of date.
- Delete your information, where we are not required to keep it for tax or legal reasons.
- Withdraw your consent at any time. If you do so before your session, we will treat it as a cancellation and refund you under our cancellation and refund policy.
- Nominate someone to exercise these rights on your behalf if you die or become unable to act.
- Raise a grievance with us, and escalate to the Data Protection Board of India if our answer does not satisfy you.
Write to us using the contact details below with the phone number you booked from. We will respond within 30 days.
Children
Our services are for adults. We do not knowingly take bookings from anyone under 18 or collect their information. A treatment for someone under 18 must be booked and supervised throughout by their parent or guardian, who must be present in the room. If you believe a child's information has reached us, tell us and we will delete it.
Changes to this policy
If we change how we handle your information, we will post the revised policy here and update the date at the top. Where the change is significant, we will also message customers with an upcoming booking. The version on this page at the time you book is the one that applies to that booking.
Contact us
For any question about this policy, or to exercise any of the rights above, reach our grievance officer:
Grievance officer, DoorMassage
Phone: +91-8822953511
WhatsApp: +91-9864601242
Email: privacy@doormassage.in
Address: [ADD YOUR REGISTERED BUSINESS ADDRESS], Guwahati, Assam
We acknowledge every grievance within 48 hours and resolve it within 30 days.