Privacy Policy — KAYELLE

01Who We Are

KAYELLE is an international patient facilitation platform that connects overseas patients with Kerala's healthcare ecosystem. KAYELLE is not a medical provider and does not engage in the practice of medicine.

For the purposes of data protection law, KAYELLE acts as the data controller for personal information collected through this website and associated communications.

Contact: arjun@kayelle.in

02What Data We Collect

We collect only the information necessary to provide our facilitation services. This includes:

Identity data — your full name as provided in our inquiry form.
Contact data — email address, phone number, and WhatsApp number.
Location data — your country of residence (selected from a dropdown).
Health-related data — a brief description of your healthcare need or medical query, as voluntarily provided by you. This is classified as special category data under GDPR.
Technical data — basic browser and device information collected automatically when you visit our website (IP address, browser type, pages visited).
Communication data — records of any correspondence between you and KAYELLE via email or WhatsApp.

We do not collect payment card details, government identification numbers, or any data beyond what is stated above.

03How We Use Your Data

We use your personal data for the following purposes:

To respond to your healthcare inquiry and provide coordination services.
To connect you with appropriate hospitals or healthcare facilities in Kerala.
To communicate with you throughout the facilitation process.
To comply with our legal obligations.
To improve our services through aggregated, anonymised analytics.

We do not use your data for automated decision-making, profiling, or direct marketing without your explicit consent.

04Legal Basis for Processing

Under GDPR and UK GDPR, we rely on the following legal bases to process your personal data:

Consent (Art. 6(1)(a) GDPR) — for processing health-related information you voluntarily provide in your inquiry.
Legitimate interests (Art. 6(1)(f) GDPR) — to respond to general inquiries and facilitate communication between you and partner hospitals.
Legal obligation (Art. 6(1)(c) GDPR) — where we are required to retain or disclose data by law.

For special category health data, we rely on your explicit consent (Art. 9(2)(a) GDPR). You may withdraw consent at any time by contacting us at arjun@kayelle.in.

05Who We Share Your Data With

KAYELLE does not sell your personal data. We may share your information in the following limited circumstances:

Partner hospitals in Kerala — only with your knowledge and for the purpose of facilitating your medical inquiry. Hospitals receiving your data are bound by their own privacy obligations under Indian law.
Service providers — third-party platforms used to operate this website (e.g. Netlify for form submissions). These processors are contractually bound to process data only on our instructions.
Legal authorities — where required by law, court order, or regulatory requirement.

Where data is transferred outside the European Economic Area (EEA) or UK — including to India — we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR.

06How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes for which it was collected:

Inquiry and facilitation data: retained for up to 2 years from the date of last contact.
Health-related data: retained only for the duration of active facilitation, then deleted unless you request otherwise.
Technical/analytics data: retained for up to 12 months in anonymised form.

You may request early deletion of your data at any time (see Section 7).

07Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data KAYELLE holds about you.

Right to Rectification

Ask us to correct inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data ("right to be forgotten").

Right to Restriction

Ask us to restrict processing of your data in certain circumstances.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or direct marketing.

Withdraw Consent

Withdraw consent at any time for processing based on consent, without affecting prior processing.

To exercise any of these rights, email us at arjun@kayelle.in. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority — for example, the ICO (UK), BfDI (Germany), AP (Netherlands), or CNIL (France).

08Cookies

This website uses a minimal cookie approach. We use only a single first-party cookie (kayelle_cookie_consent) to store your cookie consent preference. This cookie contains no personal data and is stored in your browser's local storage.

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics that identify individual users. If this changes, this policy will be updated and your consent re-requested.

09Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include HTTPS encryption for all data in transit and access controls limiting who can view submitted inquiry data.

No method of transmission over the internet is completely secure. If you believe your data has been compromised, contact us immediately at arjun@kayelle.in.

10Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will always indicate the most recent revision. For material changes, we will take reasonable steps to notify you directly where we hold your contact details.