Privacy Policy

Why This Privacy Policy Matters to Your Family

Every family that books an Online Pediatric Consultation through NeoKidsPro shares sensitive information about their child — symptoms, growth history, and sometimes deeply personal medical details. This Privacy Policy exists to be transparent about exactly what we collect, why we collect it, and how it stays protected at every step, from booking to prescription to follow-up.

We review this Privacy Policy periodically to stay aligned with evolving Indian data protection law, including the Digital Personal Data Protection Act, 2023, and it applies uniformly across every pediatrician on the NeoKidsPro network.

1. Who We Are

NeoKidsPro is a paediatric healthcare platform providing online teleconsultation, appointment booking, vaccination scheduling, and child health information services. This Privacy Policy covers all data collected through neokidspro.in and our appointment booking flow.

Shri Hari Child Clinic  ·  Borivali East, Mumbai — 400066, Maharashtra
Email: admin@neokidspro.in  ·  Phone: +91 98798 91082

1a. How Your Data Moves Through NeoKidsPro

To make this Privacy Policy easier to follow, here's a plain-language walkthrough of what actually happens to your information from the moment you book:

• Step 1 — Booking: When you book an appointment, we collect your child's identity data and your contact details. This information is encrypted in transit and stored on our secured servers.
• Step 2 — Payment: If you're booking a paid online teleconsultation, your payment is handled entirely by Cashfree, a PCI-DSS compliant gateway. NeoKidsPro never sees or stores your card number.
• Step 3 — Consultation: During the video call, the consulting pediatrician records clinical notes directly into our Electronic Medical Records (EMR) system, accessible only through authenticated, role-based logins.
• Step 4 — Prescription & records: Prescriptions and reports are generated as PDFs and served only through protected endpoints — never as publicly guessable links.
• Step 5 — Retention or deletion: Your data is retained per the schedule in Section 7, and you may request access, correction, or deletion at any point as described in Section 9.

Understanding this flow is part of what makes our Privacy Policy meaningful in practice, not just on paper — every stage of your child's data journey is covered by an explicit safeguard.

2. Information We Collect

To deliver safe, continuous pediatric care, our Privacy Policy requires us to collect the following categories of information:

• Identity data: Child's full name, date of birth, gender
• Parent / guardian data: Name, relationship, contact details
• Contact data: Mobile number, email address, home address
• Medical data (Sensitive Personal Data): Chief complaints, diagnosis, prescriptions, vaccination history, growth records, consultation notes
• Payment data: Transaction ID and payment status — card numbers are never stored; payments are processed via Cashfree, a PCI-DSS compliant gateway
• Technical data: IP address, browser type, device info, cookies, and usage logs
• Communication data: WhatsApp messages and emails related to consultations

3. How We Use Your Information

• To book, confirm, and manage appointments (online and in-clinic)
• To facilitate video consultations and generate Google Meet links
• To issue prescriptions, invoices, and medical reports in PDF format
• To send appointment reminders via WhatsApp and email
• To maintain Electronic Medical Records (EMR) for continuity of care
• To process payments and issue receipts
• To comply with legal and regulatory obligations under Indian law
• To improve platform quality using anonymised analytics only

4. Legal Basis for Processing

Under this Privacy Policy, and consistent with the Digital Personal Data Protection Act, 2023, we process your data on one or more of the following legal grounds:

• Consent: Obtained explicitly at the time of registration and booking
• Contract: Processing necessary to fulfil consultation and booking agreements
• Legal obligation: Compliance with National Medical Commission guidelines
• Legitimate interest: Maintaining medical records for continuity of paediatric care

5. Sensitive Personal Data (Medical Information)

Medical and health information is classified as Sensitive Personal Data or Information (SPDI) under Rule 3 of the IT (SPDI) Rules, 2011. We collect this data only with your explicit digital consent and use it solely for delivering healthcare services. This data is never sold, shared with advertisers, or disclosed to third parties except as outlined in Section 6.

6. Data Sharing

• Consulting doctors on the NeoKidsPro platform — for delivering medical care
• Cashfree Payments — for processing online consultation fees (PCI-DSS compliant)
• Google LLC — for generating Google Meet video consultation links
• Meta Platforms (WhatsApp Business API) — for appointment confirmations and notifications
• Regulatory authorities — if required by law, court order, or government directive

We do not sell, rent, or trade your personal or medical data to any third party. Payment-specific terms are also covered in our Refund & Cancellation Policy.

7. Data Retention

• Medical records & prescriptions: Minimum 7 years from last consultation (per National Medical Commission guidelines); for paediatric patients, until the child reaches 25 years of age
• Appointment & payment records: 8 years for tax and audit compliance
• Technical logs: 90 days
• Marketing preferences: Until you withdraw consent

8. Data Security

Protecting your family's data is central to this Privacy Policy. We maintain the following technical safeguards:

• Encrypted data transmission (TLS / HTTPS) on all pages and API calls
• Bcrypt password hashing (12 salt rounds) — passwords never stored in plaintext
• JWT-based authenticated access with role-based permissions (Admin, Doctor)
• Medical PDFs served only through authenticated, protected endpoints — not public URLs
• Server hosted on Hostinger VPS with firewall and access controls
• Regular security audits and vulnerability assessments

While no online platform can guarantee absolute security, this Privacy Policy commits us to a layered defence: encryption in transit, hashed credentials, restricted role-based access, and continuous monitoring, so that a single point of failure never exposes your child's medical history.

9. Your Rights Under This Privacy Policy

• Access the personal data we hold about you or your child
• Request correction of inaccurate data
• Withdraw consent for non-essential processing at any time
• Request deletion of data (subject to medical record retention requirements)
• Raise a complaint before approaching any regulatory authority, including the Data Protection Board of India under the Digital Personal Data Protection Act, 2023

Write to admin@neokidspro.in with the subject "Data Rights Request", or reach us via our Contact Us page. We will respond within 15 working days.

10. Cookies

Our website uses cookies for session management and analytics (Google Analytics). You may disable cookies in your browser settings, though some platform features may not function correctly without them.

11. Children's Data

As a paediatric platform, all patient data relates to minors, which is why this Privacy Policy applies extra care to how that data is handled. All data collection requires explicit consent from a parent or legal guardian. We do not process data for any patient under 18 without verified parental consent.

12. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. Any disputes shall be subject to the exclusive jurisdiction of courts in Mumbai, Maharashtra, India. This Privacy Policy should be read together with our Terms of Service.

13. Contact Us

NeoKidsPro — Data Protection Officer
Shri Hari Child Clinic, Borivali East, Mumbai — 400066
Email: admin@neokidspro.in  ·  Phone: +91 98798 91082
Or reach us anytime through our Contact Us page.

For official reference, the Digital Personal Data Protection Act, 2023 is published by the Ministry of Electronics and Information Technology, Government of India, and can be read in full on meity.gov.in.

14. Privacy Policy — FAQs

Our Privacy Policy is designed to give parents full confidence and clarity, whether you're booking your first online pediatric consultation or managing your child's ongoing care with NeoKidsPro.

© 2026 NeoKidsPro. All rights reserved. Last reviewed June 1, 2026.