Privacy Policy

Lotus Pro — Spa, Salon & Academy (“Lotus Pro”, “we”, “us”) is the Data Fiduciary for the personal data described in this notice, under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

Our studio is at New Mukundwadi Railway Station Road, Kamgar Chowk, Near Modak Hotel, N-2 Cidco, Aurangabad, Maharashtra 431001. You can reach us on 8007399644 or at anitasindeas31@gmail.com.

Enquiry and booking details — your name, phone number, email address, the service or course you are interested in, and any preferred date or note you choose to send us through a form on this site, by phone or on WhatsApp.

Appointment records — the services booked, dates, amounts paid and any skin or hair sensitivities you tell us about so that we can treat you safely.

Academy records — for students, admission details, attendance and assessment results, which are needed to issue a certificate.

Photographs and video — images of work carried out at our studio and of academy sessions. These are treated as personal data and are used only with your consent (see “Photographs” below).

We do not collect payment card details on this website. This site sets no advertising or tracking cookies.

To respond to your enquiry, confirm availability, quote a price and manage your booking.

To carry out the service safely, including noting allergies or sensitivities you have disclosed.

To administer academy admissions, attendance and certification.

To keep the accounting and tax records that Indian law requires us to keep.

We do not use your personal data for any purpose other than the one you gave it for, and we do not sell it.

We process your personal data on the basis of the consent you give when you submit an enquiry form, make a booking or enrol in a course. That consent is specific to the purpose set out at the point of collection.

Where the DPDP Act permits a legitimate use — for example, data you voluntarily provide for a service you have asked for, or records we must retain by law — we rely on that instead.

You may withdraw consent at any time. Withdrawing consent is as easy as giving it: write to anitasindeas31@gmail.com or call 8007399644. Withdrawal does not affect processing already carried out, and we may be unable to continue with a booking once it is withdrawn.

Right to information — to ask what personal data of yours we hold, how we are processing it, and who we have shared it with.

Right to correction and erasure — to have inaccurate or incomplete data corrected or updated, and to have data erased where it is no longer needed for the purpose it was collected for and we are not required by law to keep it.

Right to grievance redressal — to raise a complaint with our Grievance Officer, who will respond within a reasonable period.

Right to nominate — to nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these, write to anitasindeas31@gmail.com with the phone number you booked under so we can locate your record. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Some of our academy applicants are under 18. Where an applicant is a child under the DPDP Act, we take verifiable consent from a parent or lawful guardian before processing their personal data or admitting them to a course.

We do not carry out tracking, behavioural monitoring or targeted advertising directed at children, and we do not process a child's data in any way likely to cause a detrimental effect on their wellbeing.

A parent or guardian may withdraw consent and ask for their child's data to be erased at any time, subject to any records we must retain by law.

We photograph and film work in the studio and sessions at the academy. Those images may appear on this website, in our portfolio and on our social media.

We ask for your consent before publishing an image in which you are identifiable. If you would prefer not to appear, tell us in writing before or after the session and we will not publish it — and will remove it if it is already published.

For students under 18, this consent is taken from a parent or guardian.

We keep enquiry and booking records within our own systems. Where a service provider processes data on our behalf — for example website hosting — they act only on our instructions and may not use your data for their own purposes.

We disclose personal data to third parties only where the law requires it, or where you have asked us to.

We do not sell, rent or trade your personal data.

Enquiries that do not lead to a booking are erased once they are no longer needed to respond to you.

Booking and academy records are kept for as long as needed to serve you and to meet the accounting, tax and certification-record requirements that apply to us, and are erased after that.

You may ask for erasure sooner; we will comply except where a law requires us to keep the record.

We apply reasonable security safeguards to prevent personal data breaches, including limiting access to booking and student records to the people who need them.

If a personal data breach occurs, we will notify the Data Protection Board of India and each affected person as required by the DPDP Act.