Legal

Privacy Policy

How Vashin Group collects, uses, and protects your information.

1. Who we are

This Privacy Policy is issued by Suraj Biswas, sole proprietor of Vashin Group, operating from Delhi, India ("we," "us," "our," or "Vashin Group").

Suraj Biswas operates publicly under the preferred name Sooraj Biswas for branding and identification on certain Vashin Group websites. Both names refer to the same individual and the same legal entity.

Suraj Biswas holds a Master's degree in Psychology with a specialisation in Clinical Psychology and works as a Psychology Consultant. He is not registered with the Rehabilitation Council of India (RCI). Services offered through Vashin Group are consultative in nature and are not a substitute for clinical diagnosis, psychiatric care, or treatment of mental disorders requiring RCI-registered or licensed practitioners. Where a client's situation appears to require clinical-level care, Suraj Biswas will refer the client to appropriately qualified professionals.

2. Sites covered by this policy

This Privacy Policy applies to all websites and online services operated by Vashin Group, including but not limited to:

• ventnvibe.vashin.in — Vent & Vibe (India), an emotional support service
• vnvstudio.vashin.in — Vent & Vibe (International)
• soorajbiswas.vashin.in — Psychology consultation services (India)
• psysooraj.vashin.in — Psychology consultation services (International)
• vashin.in — Vashin Group corporate site
• Any future Vashin Group websites or sub-brands

If you book a session, send an enquiry, or otherwise interact with any of these websites, this policy applies to that interaction.

3. Information we collect

Information you give us directly

• Booking information — your name, email address, phone number, time-zone, and any responses you provide on cal.id booking forms or intake questionnaires
• Communications — content of emails, WhatsApp messages, or other communications you send to us
• Payment information — processed by our payment partners (Razorpay for India, PayPal for International). We do not directly store your card or bank details
• Information shared during sessions — content you choose to share verbally during a Discovery Conversation, Consultation, Express, Deep, or other paid session

Information we collect automatically

• Device and connection data — IP address, browser type and version, operating system, device type, screen resolution, language preferences
• Usage data — pages visited, time spent on pages, scroll depth, clicks, navigation paths, referring URL
• Approximate location — derived from your IP address (used for currency selection and geo-routing between India and International sites)
• Session recordings — anonymised mouse-movement and click recordings of website visits, captured by Microsoft Clarity (this does not include audio/video of any consultation session)
• Cookies and similar technologies — see Section 7

4. How we collect it

• When you fill out a booking form on cal.id linked from our websites
• When you make a payment via Razorpay or PayPal
• When you email, message, or call us
• Automatically, through tracking tools embedded on our websites (see Section 6)
• Through information you share during paid sessions

5. Why we collect it

We use the information we collect to:

• Schedule, deliver, and administer the consultation, emotional support, or other services you book
• Process payments and issue receipts or refunds
• Communicate with you about your bookings, including reminders and follow-ups
• Display the appropriate currency and content based on your geographic location
• Improve our websites, content, and services through analytics
• Run, measure, and optimise advertising campaigns on platforms such as Meta (Facebook and Instagram) and Google
• Detect, prevent, and respond to fraud, abuse, or technical issues
• Comply with legal obligations under Indian law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, the Mental Healthcare Act, 2017, and applicable tax laws

6. Tracking and analytics tools

Our websites use the following third-party tools to understand visitor behaviour and to operate advertising campaigns:

• Meta Pixel (provided by Meta Platforms, Inc.) — tracks page visits, content views, button clicks, and booking events to measure advertising effectiveness and build audiences for Meta advertising
• Google Analytics 4 (provided by Google LLC) — measures website traffic, user engagement, and conversion patterns
• Microsoft Clarity (provided by Microsoft Corporation) — captures anonymised heatmaps and session recordings of website usage
• Google Search Console — measures how our sites appear in Google Search results
• ipapi.co — provides approximate country-level geolocation from IP addresses for currency and content routing
• cal.id (booking and scheduling platform) — handles all booking forms and may include its own tracking

Each of these tools has its own privacy policy. By using our websites, you consent to data being processed by these third parties as described in their respective policies.

7. Cookies

Our websites use cookies and similar technologies for the following purposes:

• Strictly necessary cookies — required for site functionality (for example, the geo-redirect that prevents repeated checks within a single session)
• Analytics cookies — set by Google Analytics, Microsoft Clarity, and Meta Pixel
• Advertising cookies — set by Meta to attribute ad clicks and measure conversions

You can disable cookies through your browser settings. Disabling cookies may affect site functionality. You can also opt out of personalised advertising via Meta's ad preferences (facebook.com/adpreferences) and Google's ad settings (adssettings.google.com).

8. Third parties we share data with

We share information with third parties only in the following circumstances:

• Service providers who help us operate the business — including Hostinger (hosting), cal.id (booking), Razorpay and PayPal (payments), Meta, Google, and Microsoft (advertising and analytics as described above)
• Legal authorities when required by law, court order, or to protect our legal rights
• Emergency services or qualified professionals in situations involving an imminent risk of harm to a person's life or safety (see Section 11)

We do not sell your personal information to anyone. We do not share session content (verbal or written content you share during a paid session) with any third party except as described in Section 11.

9. Payment processing

Payments for India-based services are processed by Razorpay. Payments for International services are processed by PayPal. We receive a confirmation of payment and a transaction reference number. We do not receive or store your card number, bank account number, UPI ID, or other payment credentials. Razorpay and PayPal handle that information under their own security and privacy frameworks.

10. Sensitive personal data and confidentiality

The Digital Personal Data Protection Act, 2023, treats certain categories of personal data with special care. The fact that you have engaged with our consultation or emotional support services may itself constitute sensitive information about your personal life.

We treat all such information as confidential. Specifically:

• Sessions are not recorded. No audio, video, or transcript of any Discovery Conversation, Consultation, Express, Deep, or other paid session is captured by Suraj Biswas, Vashin Group, or any party acting on our behalf
• Any notes Suraj Biswas takes during or after a session are kept privately and are not shared with anyone except as described in Section 11
• The fact of your booking, the topics discussed, and any personal information you share are held in confidence
• We do not discuss specific clients or their situations publicly, in marketing, in case studies, or in any identifiable way without explicit prior written consent

While Suraj Biswas is not RCI-registered, he commits to and operates under standard professional ethics expected of psychology consultants, including confidentiality, honesty about scope and limitations, and appropriate referral when situations exceed the scope of consultation.

11. Limits of confidentiality

Confidentiality has limits in the following narrow situations:

• Imminent risk of harm — if there is a credible and immediate risk of harm to your life or to the life of another person, we may contact emergency services, family members, or other parties as necessary to help protect that life
• Legal compulsion — if compelled by a court order, subpoena, or other legally binding instrument issued by a competent authority in India or your jurisdiction
• Child or vulnerable adult protection — if information shared indicates ongoing abuse, neglect, or endangerment of a child or vulnerable adult, where reporting is legally required or ethically warranted
• Threats against the practitioner — if there is a credible threat against Suraj Biswas or any team member

Outside these specific situations, your information remains confidential.

12. Crisis and emergency disclaimer

13. Data retention

We retain personal data only as long as necessary for the purposes set out in this policy, or as required by law:

• Booking records, payment records, and related communications: 3 years from the date of the relevant booking or transaction
• Tax and accounting records: as long as required by Indian tax law (currently a minimum of 6 years)
• Website analytics and tracking data: retained according to the policies of the relevant tools (Meta, Google, Microsoft)
• Marketing-related data and audiences: retained until you withdraw consent or until the related campaign ends, whichever is earlier

After the applicable retention period, we delete or anonymise the data, except where longer retention is required by law.

14. International data transfers

Several of the third parties we use (Meta, Google, Microsoft, PayPal, cal.id) are based outside India and may process your information on servers located in the United States, the European Union, or other jurisdictions. By using our websites and services, you consent to your information being transferred to and processed in these jurisdictions.

Where required, we rely on standard contractual safeguards and the privacy frameworks operated by these providers to protect your information during such transfers.

15. Security measures

We take reasonable technical and organisational measures to protect your information, including:

• HTTPS encryption on all our websites and booking pages
• Use of payment processors that comply with PCI DSS standards
• Limited access to personal information — only Suraj Biswas and any directly authorised personnel
• Use of strong, unique passwords on accounts that hold personal information
• Regular review of third-party tool settings and access

No method of transmission over the internet is fully secure. While we work to protect your information, we cannot guarantee absolute security.

16. Your rights

Under the Digital Personal Data Protection Act, 2023, and applicable Indian law, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Erasure — request that we delete your personal information, subject to legal retention requirements
• Withdrawal of consent — withdraw any consent you have given for processing, where processing is based on consent
• Grievance redressal — raise concerns about how we handle your data with our Grievance Officer (Section 19)
• Nominate — nominate another person to exercise these rights on your behalf in the event of your death or incapacity

To exercise any of these rights, email connect@vashin.in. We will respond within a reasonable period and within timeframes required by law.

17. Children

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at connect@vashin.in and we will take steps to delete that information.

18. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will update the "Last updated" date at the bottom of this page and, where appropriate, post a more prominent notice on our websites. We encourage you to review this policy periodically.

19. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000, the Grievance Officer for Vashin Group is:

If you have any concern about how your personal information is being handled, please contact the Grievance Officer. We aim to acknowledge receipt within 7 days and resolve grievances within 30 days, or sooner where required by law.

20. Contact us

For any question about this Privacy Policy, our data practices, or to exercise any of your rights, please contact:

Last updated: 8 June 2026