Draft — to be reviewed by a qualified lawyer before publication. Items in brackets must be completed by the owner.
Legal
Privacy notice
How we collect, use and protect the personal data you share with us through this website, written to follow India's Digital Personal Data Protection Act, 2023 and the DPDP Rules.
Last updated: [Owner to confirm: date of publication]
1. Who we are
The Vision Doctor Academy and Eye Care Services ("we", "us") decides why and how your personal data is processed, and is the Data Fiduciary for the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act").
Contact: thevisiondoctor6.6@gmail.com · +91 95141 62051. Legal entity name and registered address: [Owner to confirm: legal entity name and registered address].
2. What we collect
We only collect what you type into our enquiry forms, and what you choose to send us directly.
Academy enquiry form
- Your name, phone or WhatsApp number and, optionally, your email address
- What your enquiry is about, the program or specialities you're interested in, and your career stage
- Optionally, your qualification, your organisation (for institutional training) and a message
- How you would like us to contact you
Eye care enquiry form
- Your name, phone or WhatsApp number and, optionally, your email address
- The service you need, who the appointment is for, your preferred place and time
- The age and gender of the person the appointment is for
- Your area or locality and, optionally, your pincode
- Optionally, a short message about arranging the visit
We do not ask for medical history, symptoms or date of birth through this website. Please don't include medical details in a form or message — we discuss these with you directly.
If you contact us by WhatsApp, phone or email, we receive whatever you choose to send through that channel. WhatsApp is operated by WhatsApp LLC under its own privacy policy.
3. Why we use it
- To reply to your enquiry and answer your questions
- To share program dates, eligibility and fees you have asked about
- To arrange and confirm an eye care appointment
We process this data on the basis of your consent, which you give when you tick the consent box on a form. You can withdraw consent at any time by contacting us (section 7). Withdrawal does not affect processing that took place before it. We do not sell your data or use it for advertising.
4. How long we keep it
We keep enquiry data for [Owner to confirm: retention period, e.g. 12 months after our last contact], or until you ask us to erase it, unless the law requires us to keep it for longer. After that we delete it.
5. Who processes it for us
We use a small number of service providers (Data Processors) who handle data only on our instructions:
- Email delivery of enquiries: [Owner to confirm: email provider, e.g. Resend]
- Enquiry log: [Owner to confirm: e.g. Google Workspace / Google Sheets]
- Website hosting: [Owner to confirm: hosting provider]
- Spam protection, if enabled: Cloudflare Turnstile
- Website analytics, only if you allow it: [Owner to confirm: Google Analytics 4 or Plausible]
Some providers may store data outside India. Where they do, we rely on the transfer being permitted under the DPDP Act. [Owner to confirm: list of countries, if any]
6. Children's data
Enquiries about a child must be made by the child's parent or lawful guardian, who gives consent on the child's behalf. The eye care form asks the person enquiring to confirm they are the child's parent or guardian. We do not knowingly collect personal data directly from children, and we do not track or target children with analytics or advertising.
7. Your rights
Under the DPDP Act you can ask us to:
- tell you what personal data we hold about you and how we use it
- correct, complete or update it
- erase it, where we no longer need it for the purpose you gave it for
- nominate another person to exercise your rights if you die or become unable to
To make a request, email thevisiondoctor6.6@gmail.com with the subject "Data request". We may need to confirm your identity before acting on it.
8. Grievances
If you have a concern about how we handle your data, contact our grievance contact: [Owner to confirm: name, email and phone of the grievance officer]. We will respond within [Owner to confirm: response period required by the DPDP Rules]. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
9. Cookies, browser storage and analytics
We do not use advertising cookies. We only load analytics after you choose "Allow analytics" on the banner, and we never send names, contact details, messages or health information to analytics.
- tvd_consent (browser local storage) remembers your analytics choice. Clear your browser storage for this site to change it.
- tvd_path (browser session storage) remembers whether you chose "learn" or "eye care" on the home page, until you close the tab.
- If you allow analytics, the analytics provider may set its own cookies to count visits: [Owner to confirm: cookie names and duration for the chosen provider]
10. Security
Enquiries are sent over an encrypted connection (HTTPS) and are only available to the people who reply to them. No method of transmission or storage is completely secure; if a personal data breach affects you, we will tell you and the Data Protection Board as the DPDP Rules require.
11. Changes to this notice
We will update this page if our practices change, and show the date of the latest version at the top. See also our terms of use.