Privacy Policy

1. Commitment to Clinical Discretion & Privacy

At Trance Therapeutics, we recognize that our clients place immense trust in our organization when procuring botanical specimens and sharing sensitive personal, physiological, and emotional information for therapeutic consultations. TRANCE THERAPEUTICS PRIVATE LIMITED (“Company”, “we”, “us”) is the designated Data Controller responsible for the processing and protection of your personal information.

This Privacy Policy explains in detail our practices regarding the collection, retention, safeguarding, and disclosure of personal and health data obtained via our online portal (trancetherapeutics.com), telehealth consultations, and in-person sanctuary sessions.

2. Categories of Information We Collect

Depending on the nature of your interaction with our platform, we collect two distinct classifications of data:

A. E-Commerce Dispensary Data (Commercial Transactions)

• Customer Identifiers: Legal full name, email address, telephone contact number, billing address, and physical shipping address.
• Order Transaction Data: Records of botanical products procured, pouch quantities, order serial numbers, fulfillment timestamps, and delivery tracking metadata.
• Financial Payment Metadata: Confirmation of payment settlement, transaction IDs, payment gateway tokens, and masked card identifiers (we do not store raw credit/debit card numbers or CVVs).

B. Therapeutic Consultation & Health Intake Data (Sensitive Clinical Records)

• Health & Medical History: Self-disclosed physical health records, cardiovascular conditions, psychiatric history, history of psychiatric hospitalizations, and family psychological backgrounds.
• Pharmacological Declarations: Current prescription medications, psychiatric medications (SSRIs, SNRIs, MAOIs, tricyclics, mood stabilizers), supplements, and chemical dependency history.
• Therapeutic Objectives: Personal intentions, therapeutic goals (e.g., depression, anxiety, trauma processing, smoking cessation, existential exploration), and integration session notes recorded by our practitioners.

3. Legal Basis & Purposes of Processing

TRANCE THERAPEUTICS PRIVATE LIMITED processes your data strictly under recognized legal bases:

• Contractual Performance: Processing payments, packaging and dispatching physical botanical orders, generating invoices, and confirming appointment schedules.
• Explicit Consent (Special Category Health Data): Processing sensitive clinical information solely to assess physiological/psychiatric suitability and design personalized guidance protocols.
• Legal & Regulatory Compliance: Maintaining accounting, tax, and consumer transaction records mandated under national corporate laws.
• Legitimate Interests: Protecting the digital infrastructure against fraudulent transactions, cyber intrusions, and abuse.

4. Payment Security & Third-Party Service Providers

We partner only with verified, enterprise-grade service providers who adhere to strict confidentiality obligations and data security benchmarks:

• Payment Gateways: Payment transactions are transmitted using industry-standard Transport Layer Security (TLS 1.3 / AES-256) encryption. All card processing complies with PCI-DSS standards.
• Couriers & Logistics: Domestic shipping partners receive only the minimal data necessary (recipient name, contact number, delivery address) printed on plain, discrete outer packaging.
• Telehealth Platforms: Video consultations are conducted over end-to-end encrypted communication channels with zero public recording or cloud storage of session video.

5. Cookies & Tracking Technologies

Our website utilizes strictly necessary and functional cookies to ensure reliable navigation and shopping functionality:

• Session Cookies: Maintain your active shopping cart contents, session authentication, and language/currency settings.
• Security & CSRF Tokens: Guard forms and checkout submissions against Cross-Site Request Forgery attacks.
• Analytics Cookies: Aggregated, anonymized metrics to evaluate page loading speeds and interface performance. You may disable cookies through your browser preferences without affecting fundamental site readability.

6. Data Security, Retention & User Rights

6.1 Security Infrastructure: All databases, application files, and client records are protected behind enterprise firewalls, with strict role-based access control and cryptographic database hashing. Clinical records are segregated from commercial marketing systems.

6.2 Data Retention Periods: E-commerce purchase receipts are retained for standard tax and corporate compliance durations (typically 5 to 7 years). Health intake questionnaires and consultation records are securely archived and can be permanently deleted upon client request, subject to professional statutory duties.

6.3 Your Legal Rights: Under applicable privacy standards, you hold the right to: (a) request access to personal data held about you; (b) request prompt rectification of inaccurate data; (c) request permanent erasure of your profile (“Right to be Forgotten”); and (d) withdraw consent for future consultation processing.