Privacy Policy

Who runs this

weave.clinic and the Weave Press digital catalogue are run by Weave Centre for Integrative Psychiatry, a partnership of Dr Wilfred D'souza and Dr Niharika H. S., based in Mumbai, Maharashtra, India.

For privacy matters, the partnership of Dr Wilfred D'souza and Dr Niharika H. S. is the data fiduciary.

Contact for any privacy question:

wilfred@weave.clinic.

What we collect

When you buy a digital field guide from us, we collect what we need to send it to you and verify your payment:

• Your name
• Your email address
• Your WhatsApp number
• The screenshot of the UPI payment confirmation you send us
• The UPI transaction reference number (UTR) for that payment
• If you are claiming the student price: your college email address, used only to confirm you are a current student

When you simply browse weave.clinic without buying anything, two things are counted without asking, on the pages described below: an arrival, with the kind of site you came from, and a tap on a WhatsApp link. Nothing optional is measured until you accept it. What runs after you accept is described under Cookies and analytics below.

What we don't collect

• We do not collect or store your bank account number, debit or credit card details, or CVV.
• We do not collect or store any UPI PIN or one-time password (OTP). Never send these to us. We will never ask.
• We do not collect your Aadhaar number, PAN, government ID copies, or any health information.
• We do not ask you for any clinical or diagnostic information to sell you a field guide.

What we use your information for

• To verify your UPI payment and deliver the field guide PDF to your WhatsApp and email.
• To send you a receipt if you ask for one.
• To answer support questions you send us about your purchase.
• To confirm student eligibility, if you bought at the student price.

That is it. We do not use your contact details to send you marketing emails or WhatsApp messages unless you ask us to. We do not add you to any list by default.

Who we share it with

We do not sell, rent, or trade your personal data with anyone. We do not share your contact or purchase details with advertisers or data brokers.

The only third parties that ever touch your information are the services we genuinely need to deliver what you bought:

• WhatsApp, if you receive your PDF via WhatsApp, the message and attachment pass through WhatsApp's infrastructure under their own privacy terms.
• Your email provider, if you receive your PDF via email, it passes through standard email infrastructure.
• Your bank and the UPI network, the payment itself is routed through India's UPI network and the banks at either end. We do not control or store anything inside that network beyond the UTR reference you share with us.

Apart from the optional measurement you can accept under Cookies and analytics, we will only ever share your information beyond this if a lawful order from an Indian court or authority requires us to.

Optional page recording

On selected public overview and study pages, you can choose to allow Microsoft Clarity heatmaps and session replays. It records clicks, scrolling and masked page content, and sends usage data to Microsoft.

Clarity loads only after you allow recording. Clarity's own advertising storage stays denied.

We do not attach names, email addresses, account identifiers or care-request events to Clarity. Clarity uses its own browser and session identifiers.

Intake, booking, payment, patient tools, condition pages and gated downloads are excluded. Recording stops when you enter search or other protected interactions. New pages are excluded until reviewed.

Use Cookie settings to allow, decline or withdraw recording separately from analytics. Your choice lasts up to 180 days. Global Privacy Control and Do Not Track block optional measurement.

Clarity normally retains recordings for 30 days; marked recordings and heatmap data may remain for up to 9 months under Microsoft's current policy. See Microsoft's retention details and Microsoft's privacy statement.

Cookies and analytics

Necessary preferences, such as your privacy choice, keep the site working. Optional analytics and masked recordings remain off until you choose them. Accepting one does not require accepting the other.

On clinic, consultation, assessment and treatment landing pages, optional analytics sends a fixed page category, a fixed action and the kind of site you came from to our own measurement endpoint, hosted by Cloudflare. It counts page loads and enquiry-link clicks, not unique visitors or completed appointments.

Two counts run without this choice. On those pages and on the Family Library's front page and guides (not its crisis cards), the page load sends a fixed page category, the event name arrival and the kind of site you came from to our own measurement endpoint, once each time the page is loaded; a tap on a WhatsApp link sends the same three values with the event name whatsapp tap, at most once each time the page is loaded. The kind of site is one of six words: search engine, social app, AI assistant, our own site, another site, or none. It is decided in your browser from the referring site's name, which is then discarded; the address itself is never sent. These counts carry no cookie, no visitor ID, no message, number, link or ad code, and nothing from them reaches Google. Global Privacy Control and Do Not Track stop them. They count loads and taps, not people: a reload can count again. We use the daily totals to see which kinds of page people message us from, and which kind of site brings them.

Cloudflare stores each fixed page/action event with an automatic event time for up to three months. Our reports group these into daily totals.

These records contain no visitor IDs, contact details, form answers, search terms, full URLs or referring addresses; the kind of site a visit came from is kept as one of six words.

Cloudflare handles normal network metadata to deliver the service; our measurement code does not save it. No recordings are made on these pages.

Once you accept, Google Analytics (G-CQF603DJ1W) also loads on these care pages and on the Family Library:

• Attention and focus assessment
• Adult autism assessment
• Psychiatrist in Mumbai
• Online psychiatrist
• Kanjurmarg
• Near Powai
• Near Ghatkopar
• Near Vikhroli
• Near Bhandup
• Near Mulund
• The fees page
• What to expect
• The Family Library's front page, in every language

Nothing from Google loads on them before you accept.

On those pages Google receives the page address with any Google ad-click tag in it, a fixed page label and technical usage information.

If you tap WhatsApp there, Google receives one bare event. It carries no number, message or link. Google may set analytics and advertising cookies.

We use this only to see whether a visit or a WhatsApp tap came from a Google ad. We do not build audiences from it.

If you arrive from one of our Google ads, the link carries a two-character code.

The page removes it from the address at once, keeps it in this browser tab only, and adds it in brackets to the WhatsApp message you send us, so we can tell which ad brought you.

It names no condition and is never sent to Google.

Every other assessment and treatment page uses only our own counts. Nothing optional runs on the emergency page or the crisis cards.

On selected public overview and study pages, optional analytics also uses Google Analytics.

Google receives technical usage information and may set analytics and advertising cookies. We do not supply names, contact details or purchase information to Google.

Apollo business profiling is disabled. Booking, intake, patient tools and payment activity are excluded from optional measurement. Search and form interaction stop optional measurement for that page.

Cookie settings let you reject optional measurement or withdraw later.

Your choice is stored for up to 180 days; choices saved before the advertising purpose was added are asked again.

Withdrawal clears the Google Analytics, Google advertising and Clarity first-party cookies the page can reach, and reloads it; already-sent data and third-party cookies are not erased by this control.

We do not sell these measurement records. Refusing optional measurement does not prevent you from reading, contacting us, booking or paying.

How long we keep things

We keep order records, your name, contact details, what you bought, the UTR, for seven years. Indian tax law requires this kind of business record to be retained.

After seven years, we delete or anonymise these records. Payment screenshots are deleted sooner, once the order is fully reconciled.

Your right to be forgotten

You can ask us to delete your personal information at any time. Email wilfred@weave.clinic from the address we have on file, with the subject "Delete my data". We will honour the request within 30 days.

One exception: where Indian tax law requires us to keep an order record for seven years, we will retain a minimal version of that record (transaction details only) and delete everything else. We will tell you exactly what was kept and why.

Security

We keep order records on standard, password-protected systems. We do not store your bank credentials or card numbers anywhere, they never reach us in the first place. UPI payment screenshots are kept only for as long as needed to reconcile your order.

No system is perfectly secure. If we ever discover a breach affecting your information, we will tell you within a reasonable time and explain what to do.

Children

The Weave Press catalogue is written for healthcare professionals and adult learners. We do not knowingly sell to children under 18 or collect their information.

Jurisdiction

This policy is governed by the laws of India. Any dispute arising from it is subject to the sole jurisdiction of the courts in Mumbai, Maharashtra.

Changes to this policy

If this policy changes, the updated version will always live at weave.clinic/privacy.html with a new "last updated" date at the top. Material changes will be flagged in a callout for at least 30 days.