Privacy Policy

1. Who we are

This practice is operated by Dr. Nayana Singhekar under the brand "Dr. Tiny Tots" from Bengaluru, Karnataka, India. We are the data fiduciary for all personal data described here.

2. Information we receive

We only collect what you voluntarily submit or what is required to confirm a booking or payment:

• Contact details such as your name, email address, and phone number.
• Child and family information you share to help us prepare for a teleconsultation or workshop.
• Payment references from PhonePe PG (transaction ID, payment status, payer name). No card numbers are collected or stored by us.
• Email or chat messages you send for scheduling or follow-up support.

We do not run behavioural analytics, remarketing pixels, or cross-site tracking tools. Cloudflare, our hosting provider, records basic security logs (IP, user agent) which are automatically rotated.

3. Why we use your data

• Consultations and workshops: To schedule sessions, understand your child’s needs, and document recommendations shared with you.
• Payment confirmation: To acknowledge successful payments or issue refunds through PhonePe PG.
• Support: To respond to questions you send by email or messaging apps.

These purposes rely on your consent and the medical obligations that apply to telemedicine in India. We do not use your data for advertising or automated profiling.

4. Who helps us deliver services

We work with a small set of providers. They only receive the data needed for their role and are bound by confidentiality commitments:

• Cloudflare Pages (India/Singapore edge): Hosts this website and keeps short-lived security logs.
• PhonePe PG (India): Processes card, UPI, and net-banking payments; shares only payment confirmations with us.
• Google Workspace (Global data centres): Provides the email inbox used to coordinate with you.
• Zoom (United States, optional): Used for video consultations when requested. Sessions are never recorded unless you ask in writing.

No other third parties receive your personal data. Access is managed directly by the doctor.

5. Your rights & how to reach us

Under the DPDP Act you can ask to access, correct, update, erase, or withdraw consent for the data we hold, and you may nominate another person to act on your behalf. To submit a request, use the verified privacy contact revealed above and include the subject line “DPDP Request”.

As a solo practice we process requests manually. Expect an acknowledgement within 7 days and a full response within 30 days. We may request limited identity proof before sharing or deleting records to keep your child’s information safe.

6. Escalating a complaint

If you are not satisfied with our reply, you can escalate the concern to the Data Protection Board of India once operational. Visit the official DPB portal (meity.gov.in) for the most current filing instructions. We will cooperate with the Board on any investigation.