What I do with your information

Who I am

Mind n Mug is the private psychology practice of Jaanvi Desai, based in Kandivali West, Mumbai. For the purposes of India's Digital Personal Data Protection Act, 2023, I am the Data Fiduciary responsible for the information described here.

Contact: mindnmug@gmail.com or 7400196366

What I collect

When you book a session

Through the booking form: your name, age, email address, phone number, preferred session mode, and optionally a short note on what brings you to therapy. Age and contact details are needed to arrange sessions and to know whether parental consent applies. The note is optional and you can leave it blank.

During therapy

I keep brief clinical notes. These record what we worked on and anything relevant to your care. They are deliberately concise and are not verbatim transcripts.

When you visit this website

This site does not use tracking cookies or advertising pixels. The booking calendar is provided by Cal.com, which may collect basic technical data such as your browser type and approximate location as part of delivering that service.

Why I collect it

• To schedule, confirm and deliver sessions
• To contact you about appointments, including reminders
• To maintain adequate clinical records, as expected of any practitioner
• To determine whether parental consent is required

I will never add you to a mailing list without asking first, and I do not use your booking or clinical information for marketing of any kind.

If you sign up for a free resource

Downloading something like the anxiety toolkit is the one place where you can choose to receive emails from me. That is entirely separate from therapy: ticking that box is optional, it has no bearing on booking a session, and existing clients are never added to it.

If you do opt in, I will send you the resource and occasional emails about new ones. I will not share or sell your address, and every email has an unsubscribe link. You can also just reply and ask to be removed. Sign up details are held by Netlify, which processes them outside India.

If you write to me through Put It Down

The reflection page lets you write about how you're feeling. It asks for your name, age and a way to reach you. That is deliberate: I read what comes in, and if something concerns me I need to be able to check you are alright. Those details are seen only by me.

I read these, usually a few times a week, and I do not reply to them. They are stored securely through Netlify, kept separately from any clinical records, and are never shared, published or quoted. They are deleted after twelve months. If you left contact details and something you wrote genuinely worries me, I may reach out to check you are alright, which is the only circumstance in which I would use them.

Writing to that page does not make you a client and does not create a therapeutic relationship.

Where it's stored

Scheduling and booking information is held in Cal.com and Google Calendar, both of which apply their own security measures and privacy terms. Communication typically happens over WhatsApp (end-to-end encrypted) and email.

Clinical notes are kept securely and separately from scheduling data.

Being straightforward about this: because I use these third-party services, your scheduling data is stored on their systems and may be processed outside India. I've chosen widely used providers with established security practices, but I can't offer guarantees beyond what those providers themselves offer.

Who it's shared with

Nobody, in the ordinary course of things. I do not sell data, share it with advertisers, or discuss clients with other practitioners without your explicit permission.

The limited exceptions are the same as those in my practice policies: serious and immediate risk to your life, risk of serious harm to another person, concerns about a child's safety under the POCSO Act, or a valid court order.

If you're under 18, your parent or guardian consents to therapy and is kept informed in general terms about how it's going. They are not given detailed accounts of what you discuss.

How long it's kept

• Clinical notes: three years after our work ends, then deleted
• Booking and contact details: the same period
• Enquiries that never became sessions: deleted within six months

Your rights

You can ask to see what I hold about you, have it corrected, or have it deleted, and you can withdraw consent at any time. Just email mindnmug@gmail.com and I'll respond within 30 days.

Children's data

For clients under 18, verifiable parental or guardian consent is obtained before sessions begin. I do not use children's data for tracking, profiling or advertising of any kind.

If something goes wrong

If there is a data breach affecting your information, I will tell you and notify the Data Protection Board as required.

Changes to this policy

If this policy changes meaningfully, I'll update the date below and let current clients know.

Last updated: August 2026