Legal
Privacy policy
What personal data we collect, why we collect it, who we share it with, and the rights you have over it.
Last updated: 7 October 2026
1. Who we are
Twelve Meridian is a pain relief and recovery centre at M10, Ground Floor, Sector 11, Noida, Uttar Pradesh 201301, India. The business is operated by Firstore Private Limited.
We decide how and why your personal data is used. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) we are the "Data Fiduciary". Under the EU General Data Protection Regulation (GDPR) we are the "controller".
2. When you use this website
This website has no forms, and its fonts and images are served from our own website. It uses Google Analytics and Google Ads only if you agree in the cookie banner. If you click "Reject", or make no choice, neither of them loads.
| Tool | What it does | Cookies and how long they last |
|---|---|---|
| Google Analytics (analytics) | Counts visits, which pages are viewed, which buttons are tapped (Call, WhatsApp, Directions), and roughly where visitors are and what device they use | _ga and _ga_…: up to 2 years. Google keeps the analytics data for 14 months |
| Google Ads (advertising) | Tells us when someone who came from one of our Google ads taps Call or WhatsApp, so we can see which ads work. It also lets Google show our ads to people who have visited this website | _gcl_au and _gcl_aw: up to 90 days |
- Legal basis: your consent (DPDP Act, section 6; GDPR Article 6(1)(a), and the ePrivacy rules on cookies). You can accept one and refuse the other.
- What we don't send: your name, phone number, messages or any health details. Google receives your IP address, browser details and the pages you visit.
- Changing your mind: use "Cookie settings" at the bottom of any page. Withdrawing your consent removes these cookies from your browser. Your choice itself is stored in your own browser (not a cookie, and not sent to us) for 12 months, after which we ask again.
The Google Map in the "Find us" section also loads from Google, which receives your IP address and may set its own cookies when the map appears.
Like every website, our hosting provider's servers automatically record basic technical details when a page is requested: your IP address, browser type, the page requested and the time. These server logs are used only to keep the website secure and working. They are not used to identify you or for marketing.
3. When you contact us
You can contact us by phone, WhatsApp or email. When you do, we receive the details you choose to share, such as your name, phone number and a description of your pain.
- Why we use it: to answer your question and book your session.
- Legal basis: your consent, given when you contact us (DPDP Act, section 6). Under the GDPR: steps taken at your request before entering into an agreement (Article 6(1)(b)), and your explicit consent for any health details you share (Article 9(2)(a)).
WhatsApp messages are also processed by WhatsApp (Meta) under its own privacy policy. If you'd rather not use WhatsApp, please call or email us instead.
4. When you visit the centre
To work with you safely, we record your name, phone number, the areas that hurt, any health details you choose to share (for example pregnancy, blood-thinning tablets or a recent fall), and notes from each session.
- Why we use it: to plan and provide your sessions safely, and to follow up with you.
- Legal basis: your consent, which we ask for before your first session. You can withdraw it at any time, although we may then be unable to continue your sessions safely.
- Payments: we keep a record of what you paid for, as required for tax and accounting.
We never sell your personal data, and we never use health information for advertising.
5. Who we share data with
We share personal data only where it's needed to run the centre:
| Who | What for |
|---|---|
| Our website hosting provider (Hostinger) | Hosting this website and storing its server logs |
| Google (Google Analytics and Google Ads), only if you agree | Measuring visits and which of our ads work (see section 2) |
| WhatsApp (Meta), phone and email providers | Carrying the messages and calls you send us |
| Our accountant, and authorities where the law requires it | Tax, accounting and legal obligations |
Some of these providers may process data outside India or outside your country. Where that happens, we rely on the safeguards the law requires, such as the European Commission's standard contractual clauses for data from the EU.
Google Analytics, Google Ads and the map on this website are provided by Google, and links to Google Maps or WhatsApp take you to those services. Google's and WhatsApp's own privacy policies apply to what they collect. Google may process data in the United States.
6. How long we keep it
- Enquiries that don't lead to a booking: Kept for 6 months, then deleted.
- Client records: Kept for 3 years after your last session, then deleted, unless the law requires us to keep them longer.
- Payment records: as long as tax law requires, currently up to 8 years in India.
- Server logs: for a short period set by our hosting provider, for security only.
- Google Analytics and Google Ads: as set out in section 2 (cookies up to 2 years and 90 days; analytics data 14 months).
7. Your rights
Everyone
You can ask us to:
- tell you what personal data we hold about you and how we use it
- correct, complete or update it
- delete it, unless we're required by law to keep it
- withdraw your consent at any time. This is as easy as giving it: just call, message or email us
If you're in India (DPDP Act)
You can also nominate another person to exercise your rights if you die or become unable to. If you're not satisfied with how we handle a complaint, you can complain to the Data Protection Board of India.
If you're in the EU, EEA or UK (GDPR)
You can also ask us to restrict or stop using your data, object to how we use it, and receive a copy of it in a portable format. You can complain to the data protection authority in your country.
We'll reply to every request within 30 days. We may need to confirm your identity first.
8. Children
This website isn't aimed at children. We work with anyone under 18 only with the consent of a parent or guardian, who must be present at the session.
9. Security
This website is served only over an encrypted (HTTPS) connection. Client records are kept securely, and only the people who work with you or run the centre can see them. If a personal data breach affects you, we'll tell you and the relevant authorities as the law requires.
10. Changes to this policy
If we change how we use personal data, we'll update this page and the date at the top. If a change needs your consent, we'll ask for it first.
11. Contact and grievance officer
For any question, request or complaint about your personal data, contact our grievance officer:
Utkarsh Singh
Twelve Meridian, M10, Ground Floor, Sector 11, Noida, Uttar Pradesh 201301
Email: contact@twelvemeridian.com
Phone: 098713 10315