Privacy Policy

Last updated: [03-Jul-2026]

Introduction

Costacea (“Costacea”, “we”, “us”, or “our”) operates costacea.com (the “Site”), an independent hair transplant cost comparison and clinic directory for India. This Privacy Policy explains how we collect, use, share, and protect personal data of visitors and users of the Site, in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian law.

By using the Site, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Site.

Data Fiduciary Details

Costacea acts as the Data Fiduciary under the DPDP Act for personal data collected through the Site.

  • Entity / Individual responsible: Amit Kumar
  • Contact email: contact@costacea.com
  • Location: Chandigarh, India

Personal Data We Collect

We may collect the following categories of personal data:

  • Contact information you provide voluntarily (e.g. name, phone number, email address) when submitting a clinic enquiry or lead form.
  • Technical and usage data collected automatically via analytics tools (e.g. IP address, device type, browser, pages visited, time on page) through Google Analytics (GA4).
  • Cookies and similar tracking technologies, as described in Section 9.

We do not knowingly collect sensitive medical records, treatment history, or diagnostic information through the Site. Any health-related information you choose to share in an enquiry form is provided voluntarily and at your own discretion.

Purpose of Collection

We use personal data only for the following specific purposes:

  • To respond to enquiries submitted through contact or lead-generation forms.
  • To connect users, at their request, with third-party hair transplant clinics listed on the Site.
  • To analyse Site traffic and improve content quality and usability.
  • To comply with legal obligations where applicable.

We do not use personal data for automated medical decision-making, profiling for advertising to minors, or any purpose incompatible with the above.

Consent

Where required under the DPDP Act, we will obtain your clear, informed, and specific consent before collecting personal data, through a consent notice presented in plain language at the point of collection (e.g. before a form submission). You may withdraw consent at any time by contacting us at [contact@costacea.com]; withdrawal will not affect the lawfulness of processing carried out before withdrawal.

Sharing of Personal Data

If you submit an enquiry through a clinic lead-generation form, we will share the personal data you provide (e.g. name, contact details, enquiry details) with the specific clinic you have expressed interest in, solely for the purpose of responding to your enquiry.

We do not sell personal data. We do not share personal data with clinics for any purpose other than fulfilling a lead you have explicitly requested. Our referral relationships with clinics have no influence on which clinics are listed, how they are described, or how they are ranked on the Site; this editorial firewall is maintained irrespective of any data-sharing arrangement.

We may also share data with:

  • Service providers who process data on our behalf (e.g. hosting providers, analytics providers), under contractual confidentiality obligations.
  • Government or regulatory authorities, where required by law.

Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Enquiry/lead data is retained for [RETENTION PERIOD, e.g. 12 months] unless you request earlier deletion.

Your Rights Under the DPDP Act

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Correct or update inaccurate or incomplete personal data.
  • Request erasure of your personal data, where it is no longer necessary for the purpose collected.
  • Withdraw consent at any time.
  • Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
  • Lodge a grievance with our Grievance Officer, and subsequently with the Data Protection Board of India if unresolved.

To exercise any of these rights, contact our Grievance Officer at the details below.

Cookies and Analytics

The Site uses Google Analytics (GA4) to understand how visitors use the Site. GA4 may set cookies and collect technical data such as IP address (which may be anonymised), browser type, and pages visited. This data is used in aggregate and is not used to identify you personally.

You can control or disable cookies through your browser settings. Disabling cookies may affect Site functionality.

Grievance Officer

In accordance with applicable Indian law, the following person may be contacted regarding any privacy concerns or grievances:

Children’s Data

The Site is not directed at children. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a child has provided personal data to us, please contact us so we can delete it.

Data Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Cross-Border Data Transfer

Some service providers we use (e.g. Google Analytics, hosting infrastructure) may process data outside India. Where this occurs, we take reasonable steps to ensure such transfers comply with applicable data protection law.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date at the top of this page. Continued use of the Site after changes constitutes acceptance of the revised policy.

Contact Us

For any questions about this Privacy Policy, contact us at contact@costacea.com.

Scroll to Top