Privacy Policy
How Little’s Clinic collects, uses and protects the personal information of parents and children.
Last updated 29 September 2026
1. Who we are
Little’s Clinic – Pediatric and Child Centre operates this website and the clinic at Choyal Tower, Manipal County Rd, below ICICI Bank, opposite Princeton Apartments, AECS B Block, Wellington Paradise, Singasandra, Bengaluru, Karnataka 560114. In this policy, "we" and "the clinic" mean Little’s Clinic, and "you" means the parent or guardian using this site.
We are the data fiduciary for the information described below under India’s Digital Personal Data Protection Act, 2023 (the DPDP Act) and the Digital Personal Data Protection Rules, 2025, to the extent and from the dates those provisions come into force.
Questions about this policy, or about the personal data we hold, can be sent to littlesclinicbengaluru@gmail.com.
2. Information we collect
Through this website we collect only what you type into the enquiry form:
- Your name and phone number, so reception can call you back.
- Your email address, if you choose to give one.
- Your child’s first name and approximate age band, if you choose to give them.
- The service you are asking about, your preferred doctor, and a preferred day or time.
- Anything you write in the message field.
3. Website and technical information
When you visit this website, technical information may be collected automatically by our hosting infrastructure and by the analytics services described in section 9 — for example your IP address, browser and device type, the pages you visit, and the date and time of your visit.
We do not use this technical information, or anything submitted through the enquiry form, to build advertising profiles of children.
4. Children’s health information
The DPDP Act treats health information as sensitive personal data, and information about a child more carefully still. The enquiry form on this website is not the place for clinical detail, and we ask you not to enter diagnoses, test results or medication in it.
A child’s medical record — consultation notes, prescriptions, vaccination history — is created at the clinic during care, not on this website. It is held in the clinic’s own system, separately from anything the website collects.
We ask for a parent or guardian’s explicit, verifiable consent before storing a child’s health information, and we record the date and the version of the consent text you agreed to. By submitting a child’s information you confirm that you are the child’s parent or lawful guardian, or are otherwise authorised to act for them; we may ask for reasonable information to verify this.
We do not knowingly use a child’s personal data for targeted advertising, behavioural monitoring, or profiling for unrelated commercial purposes, and we take reasonable steps to see that processing a child’s data does not cause a detrimental effect on their well-being.
5. How we use it, and on what basis
Enquiry details are used only to contact you about your enquiry and to arrange an appointment. Child health information is used only to prepare for and provide a consultation, keep the resulting clinical record, and communicate with you about that care. We do not use information for a purpose unrelated to the one it was given for.
We rely on your consent for the information you choose to give us, and, for clinical records, on the basis reasonably necessary to provide healthcare and to meet the record-keeping obligations of a medical practice in India.
- We do not sell your information.
- We do not share it with advertisers or data brokers.
- We do not use it to send marketing you did not ask for.
6. Consent and withdrawing it
Where we rely on consent, we ask for it through a clear affirmative action — submitting the enquiry form, or agreeing to the consent wording presented before a child’s health information is stored. Merely browsing the website is not treated as consent.
You may withdraw consent at any time by writing to littlesclinicbengaluru@gmail.com. Withdrawal does not undo processing that already happened lawfully, and it may mean we can no longer progress your enquiry or, for a clinical record we are legally obliged to keep, that we continue to retain it despite the withdrawal, as the law permits.
7. Data minimisation
We collect only what a booking enquiry or a consultation reasonably needs. Please do not enter into any website form — including the free-text message field —
- Aadhaar or other government ID numbers
- passwords or login credentials
- bank, UPI or card details
- unrelated medical records or photographs of documents
8. Who can see it inside the clinic
Access follows the job. Reception staff see appointment and contact details so they can schedule you. Doctors see the clinical record of the children they treat.
Reception staff cannot see prescriptions, consultation notes or any medical record. This is enforced by the system itself, not left to staff discretion.
Every time a medical record is opened, the system logs who opened it and when. That log is append-only and cannot be edited.
9. Service providers, analytics and cross-border processing
A small number of providers process data on our behalf, under contract and only for the purposes we set: our hosting provider and our email delivery provider. Each is bound to use the data only to deliver that service, and none is authorised to use it for their own purposes.
We use Google Analytics and Google Search Console to understand website traffic and search performance. These tools collect the technical information described in section 3; we do not configure them to receive the name, phone number, email address or child details you enter in the enquiry form.
Our Contact and Home pages embed a Google Map so you can find the clinic. Loading that map sends your IP address and browser information to Google, who process it under their own privacy policy.
Some of these providers may process or store information outside India. Where that happens, we expect the provider to maintain appropriate security and to process data only for the authorised purpose, in line with applicable Indian law.
We do not sell personal data, and we disclose it to no one else except where reasonably necessary to provide the care or service requested, to comply with the law, or to respond to a lawful request from a government authority.
10. How long we keep it
Enquiries that do not lead to an appointment are kept only as long as needed to follow up, and are then deleted. Medical records are retained for the period required of a medical practice in India and are never deleted to tidy up records. Different categories of information are therefore kept for different lengths of time.
12. Security and breaches
Data is transmitted over HTTPS, passwords are stored hashed, and access to clinical records is restricted by role and logged. No system is perfectly secure, but we treat children’s medical documents as the most sensitive thing we hold and build accordingly.
If we become aware of a personal data breach affecting you, we will assess it and, where the law requires notice, tell you what happened, what we are doing about it, and what you can do to protect yourself. Where required, we will also notify the Data Protection Board of India within the time the law prescribes.
13. Your rights
Under the DPDP Act you may ask us to confirm what personal data we hold about you or your child, to correct anything inaccurate or incomplete, to erase data we no longer need a lawful basis to keep, and to withdraw a consent you previously gave. Where the law provides for it, you may also nominate another individual to exercise these rights on your behalf.
To exercise any of these, write to littlesclinicbengaluru@gmail.com from the email address or phone number we hold for you, so we can be sure the request is genuinely yours. If the request concerns a child, we may ask for reasonable verification that you are the parent or lawful guardian. We will respond within a reasonable period.
Withdrawing consent, or asking for erasure, does not require us to delete a medical record we are obliged to retain, and it may mean we can no longer provide care through this system.
14. Grievance redressal
If you have a concern about how we handle personal data, write to littlesclinicbengaluru@gmail.com with your name, contact details, and a description of the concern, and we will review and respond within the period the law requires. If you remain dissatisfied, you may have the right to approach the Data Protection Board of India or another competent authority.
15. Changes and contact
If this policy changes we will update the date at the top of this page. Material changes will be brought to your attention.
Questions about this policy can be sent to littlesclinicbengaluru@gmail.com or raised on +91 70192 04982.
Questions about this policy?
Our reception desk would rather answer a question than leave you guessing. Call us or send an email and we will come back to you.