{
  "url": "https://www.pinnacleblooms.org/privacy-policy",
  "title": "Privacy Policy",
  "version": "2026-10-01.1",
  "effectiveOn": "2026-10-01",
  "operator": "Bharath Healthcare Laboratories Private Limited",
  "ownerAuthorisedEdition": true,
  "independentLegalReviewClaimed": false,
  "privacyGrievanceOfficer": "Mr. Gokul Krishna Rao",
  "contact": {
    "email": "care@pinnacleblooms.org",
    "phone": "9100 181 181"
  },
  "text": "Who handles your information Pinnacle Blooms Network is operated by Bharath Healthcare Laboratories Private Limited (BHCL). In these policies, “we”, “us” and “our” mean BHCL in its operation of Pinnacle Blooms Network. This notice covers Pinnacle’s public website, enquiries and the information we handle to arrange and provide our services. An additional notice or consent form may apply to a particular assessment, programme, application, research activity or publication. We will explain that purpose before asking for the relevant information. Information and purposes Contact and enquiry details: your name, contact number, location, preferred centre or service and the information you choose to provide, so our team can respond and discuss suitable arrangements. Service information: a child’s age, developmental or health history, assessment and care records, observations and relevant family or school information where necessary for the agreed service. Health and medical information receives sensitive-information treatment. Billing and transaction records: invoice, payment reference, amount and status needed to administer a transaction, accounts or a billing query. Do not email full payment credentials. Website information: technical, security and performance information and, with your optional analytics choice on managed pages, coarse page and action events. See our Cookie Policy. Publication and research information: any proposed identifiable story, image, recording or research use requires its own explanation and appropriate permission or other lawful basis; enrolment is not blanket permission to publish. A publicity choice cannot authorise publication prohibited by law; raw clinical records and sensitive health information must not be published. We seek only information relevant to a stated, lawful purpose. A public enquiry is not a request to upload an entire clinical history. We obtain appropriate written consent before collecting sensitive personal information and explain when withholding information may prevent a particular service. Children, guardians and consent An adult parent, lawful guardian or authorised caregiver should make a child-related enquiry. We distinguish the adult’s contact details from the child’s service information. Before an assessment, recording, information exchange or other activity needs additional consent, the team must explain its purpose and obtain the appropriate permission. Public website browsing is not therapy consent. We do not treat an adult’s disability as proof that the person lacks capacity or has a guardian. A representative’s authority must be established for the relevant decision. Children’s identifiable information must not be used in public marketing merely because their family enrolled. Access, sharing and external providers Relevant authorised personnel may use information for the agreed enquiry, care, administration or support purpose. Service providers may process the information necessary for hosting, communications, authorised measurement, payments or other specified tasks. Information may also be disclosed when law requires it. A school, teacher or other care provider should receive identifiable child information only with appropriate permission or another applicable lawful basis. Transfers of sensitive information must meet applicable protection and consent or contractual requirements. This notice does not claim that every system is hosted only in India. See our Third-Party Integration Policy. Retention and safeguards Retention depends on the service purpose, care and continuity needs, accounting and statutory duties, consent, disputes and applicable record requirements. We do not retain information indefinitely merely because it was collected. You may ask which criteria apply to your record; an erasure request is assessed against lawful retention duties. We require confidentiality, appropriate access restrictions and reasonable security safeguards for the information handled. No website notice promises absolute security. Report a suspected disclosure or security concern through the contact below; avoid sending the affected child’s records to public social-media channels. Your choices and privacy requests You may ask to review or correct information, withdraw consent for a consent-based purpose, or request deletion where applicable. Optional publication or marketing permission can be declined without turning it into consent for care. Withdrawal does not automatically erase records lawfully required to be retained or undo processing already lawfully completed. Email care@pinnacleblooms.org with the subject “Privacy request — Grievance Officer”, a way to contact you and the information needed to understand your request. You can call 9100 181 181 for guidance. Do not send passwords, OTPs, full card details or unnecessary child records. Privacy Grievance Officer: Mr. Gokul Krishna Rao, Bharath Healthcare Laboratories Private Limited. Contact: care@pinnacleblooms.org · 9100 181 181. Tell us the request and relevant relationship to the record. We may request proportionate identity or authority information before disclosing or changing a child’s record. Retain your sent email for reference. Privacy/SPDI grievances are to be addressed expeditiously and within one month of receipt under the currently applicable SPDI Rules. DPDP transition as at 1 October 2026 The Digital Personal Data Protection Act, 2023 and Rules, 2025 have phased commencement. Institutional provisions are in force; consent-manager provisions are scheduled for November 2026, and the main notice, consent, safeguards, children’s-data and individual-rights provisions are scheduled for May 2027. We are preparing for those phased requirements. This notice does not claim that all provisions already apply or that publication establishes completed compliance. The future children’s-data framework includes verifiable parental or lawful-guardian consent and restrictions on detrimental processing, targeted advertising and behavioural tracking. Limited healthcare-related exceptions are purpose-specific; we do not claim a blanket exemption. The current SPDI grievance timeframe is not replaced by the future DPDP grievance ceiling. Updates and related notices This edition is effective from 1 October 2026. It replaces the previous public website wording for this subject. Material changes will be dated here. It does not retrospectively introduce charges or remove rights under an existing agreement. Nothing in this policy removes a right, remedy, complaint route or protection that applicable law gives you. Booking-specific written terms must be disclosed before you agree; they cannot override mandatory law. Cookies and controls · Children and guardians · Stories and publication",
  "markdown": "## Who handles your information\n\nPinnacle Blooms Network is operated by Bharath Healthcare Laboratories Private Limited (BHCL). In these policies, “we”, “us” and “our” mean BHCL in its operation of Pinnacle Blooms Network.\n\nThis notice covers Pinnacle’s public website, enquiries and the information we handle to arrange and provide our services. An additional notice or consent form may apply to a particular assessment, programme, application, research activity or publication. We will explain that purpose before asking for the relevant information.\n\n## Information and purposes\n\n- Contact and enquiry details: your name, contact number, location, preferred centre or service and the information you choose to provide, so our team can respond and discuss suitable arrangements.\n\n- Service information: a child’s age, developmental or health history, assessment and care records, observations and relevant family or school information where necessary for the agreed service. Health and medical information receives sensitive-information treatment.\n\n- Billing and transaction records: invoice, payment reference, amount and status needed to administer a transaction, accounts or a billing query. Do not email full payment credentials.\n\n- Website information: technical, security and performance information and, with your optional analytics choice on managed pages, coarse page and action events. See our Cookie Policy.\n\n- Publication and research information: any proposed identifiable story, image, recording or research use requires its own explanation and appropriate permission or other lawful basis; enrolment is not blanket permission to publish. A publicity choice cannot authorise publication prohibited by law; raw clinical records and sensitive health information must not be published.\n\nWe seek only information relevant to a stated, lawful purpose. A public enquiry is not a request to upload an entire clinical history. We obtain appropriate written consent before collecting sensitive personal information and explain when withholding information may prevent a particular service.\n\n## Children, guardians and consent\n\nAn adult parent, lawful guardian or authorised caregiver should make a child-related enquiry. We distinguish the adult’s contact details from the child’s service information. Before an assessment, recording, information exchange or other activity needs additional consent, the team must explain its purpose and obtain the appropriate permission. Public website browsing is not therapy consent.\n\nWe do not treat an adult’s disability as proof that the person lacks capacity or has a guardian. A representative’s authority must be established for the relevant decision. Children’s identifiable information must not be used in public marketing merely because their family enrolled.\n\n## Access, sharing and external providers\n\nRelevant authorised personnel may use information for the agreed enquiry, care, administration or support purpose. Service providers may process the information necessary for hosting, communications, authorised measurement, payments or other specified tasks. Information may also be disclosed when law requires it.\n\nA school, teacher or other care provider should receive identifiable child information only with appropriate permission or another applicable lawful basis. Transfers of sensitive information must meet applicable protection and consent or contractual requirements. This notice does not claim that every system is hosted only in India. See our Third-Party Integration Policy.\n\n## Retention and safeguards\n\nRetention depends on the service purpose, care and continuity needs, accounting and statutory duties, consent, disputes and applicable record requirements. We do not retain information indefinitely merely because it was collected. You may ask which criteria apply to your record; an erasure request is assessed against lawful retention duties.\n\nWe require confidentiality, appropriate access restrictions and reasonable security safeguards for the information handled. No website notice promises absolute security. Report a suspected disclosure or security concern through the contact below; avoid sending the affected child’s records to public social-media channels.\n\n## Your choices and privacy requests\n\nYou may ask to review or correct information, withdraw consent for a consent-based purpose, or request deletion where applicable. Optional publication or marketing permission can be declined without turning it into consent for care. Withdrawal does not automatically erase records lawfully required to be retained or undo processing already lawfully completed.\n\nEmail [care@pinnacleblooms.org](mailto:care@pinnacleblooms.org) with the subject “Privacy request — Grievance Officer”, a way to contact you and the information needed to understand your request. You can call [9100 181 181](tel:+919100181181) for guidance. Do not send passwords, OTPs, full card details or unnecessary child records.\n\nPrivacy Grievance Officer: Mr. Gokul Krishna Rao, Bharath Healthcare Laboratories Private Limited. Contact: [care@pinnacleblooms.org](mailto:care@pinnacleblooms.org) · [9100 181 181](tel:+919100181181). Tell us the request and relevant relationship to the record. We may request proportionate identity or authority information before disclosing or changing a child’s record. Retain your sent email for reference. Privacy/SPDI grievances are to be addressed expeditiously and within one month of receipt under the currently applicable SPDI Rules.\n\n## DPDP transition as at 1 October 2026\n\nThe Digital Personal Data Protection Act, 2023 and Rules, 2025 have phased commencement. Institutional provisions are in force; consent-manager provisions are scheduled for November 2026, and the main notice, consent, safeguards, children’s-data and individual-rights provisions are scheduled for May 2027. We are preparing for those phased requirements. This notice does not claim that all provisions already apply or that publication establishes completed compliance.\n\nThe future children’s-data framework includes verifiable parental or lawful-guardian consent and restrictions on detrimental processing, targeted advertising and behavioural tracking. Limited healthcare-related exceptions are purpose-specific; we do not claim a blanket exemption. The current SPDI grievance timeframe is not replaced by the future DPDP grievance ceiling.\n\n## Updates and related notices\n\nThis edition is effective from 1 October 2026. It replaces the previous public website wording for this subject. Material changes will be dated here. It does not retrospectively introduce charges or remove rights under an existing agreement.\n\nNothing in this policy removes a right, remedy, complaint route or protection that applicable law gives you. Booking-specific written terms must be disclosed before you agree; they cannot override mandatory law.\n\n[Cookies and controls](/cookie-policy) · [Children and guardians](/age-restriction-policy) · [Stories and publication](/endorsement-and-testimonial)\n",
  "legalSources": [
    {
      "title": "Information Technology SPDI Rules, 2011",
      "url": "https://emb.mes.gov.in/Common/help/gsr3_10511.pdf"
    },
    {
      "title": "Digital Personal Data Protection Act, 2023",
      "url": "https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf"
    },
    {
      "title": "DPDP commencement notification, 2025",
      "url": "https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf"
    },
    {
      "title": "Digital Personal Data Protection Rules, 2025",
      "url": "https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf"
    }
  ],
  "policyTextSha256": "d68d321d272d637cb051d104bf00d662bff80e2f88907b99900d102f2adc800d",
  "htmlSha256": "6a187b0ea7510ae8e49dba19a012f601d9dddaa51667b7cd857ecafa826b4012",
  "historicalSource": {
    "status": "Historical prior public wording; not the current edition",
    "url": "https://www.pinnacleblooms.org/privacy-policy",
    "retrievedAt": "2026-09-30T22:01:08.794900+00:00",
    "htmlSha256": "5c0e9b1c1353fb9501a2c6ba72c819e82cba572a7d1ab5f5eca107752506e3db",
    "textSha256": "7123fb6e35a4ec01b7f59c954a3972b224942e66eb83e67f009ab54fad5b1465",
    "printedRevision": null,
    "text": "PRIVACY POLICY - Pinnacle Blooms Network unit of Bharath Healthcare Laboratories Pvt. Ltd. Pinnacle Blooms Network, a specialized unit of Bharath HealthCare Laboratories Pvt. Ltd. (\"Pinnacle\"), is managed and operated by Bharath HealthCare Laboratories P LIMITED (\"Company\"). We offer a range of specialized Multi-Sensory, Multi-Disciplinary, and Integrated Autism Therapy Services (\"Services\"). Upholding the privacy and security of your personal information is of paramount importance to us. This Privacy Policy serves as a comprehensive guide detailing how we collect, utilize, disclose, and safeguard your personal information across various platforms including our website (\"Site\"), mobile application (\"App\"), and in-person consultations. By engaging with our Site, App, or any of our Services, you are affirming that you have thoroughly read, understood, and consented to the terms laid out in this Privacy Policy. ## 1. Information Collection 1.1. We collect personal information directly from you when you use our services, interact with our Site, App, Co-Workers, or communicate with us. The personal information collected may include, but is not limited to: - Your name, contact details, whatsapp account, telegram account, postal address, and email address. - Health-related information and medical history provided during appointments and consultations. - Payment and transaction details if you make a purchase through the Site. 1.2. Additionally, we may collect certain non-personal information automatically when you access the Site, such as IP addresses, browser type, operating system, and usage data. This information is used to enhance your user experience and improve the functionality of the Site. ## 2. Use of Information 2.1. The personal information collected is used for the following explicit purposes: - Providing Pinnacle Services with utmost care and accuracy. - Facilitating payment processing and issuing receipts for services purchased, maintaining full financial transparency. - Responding to your inquiries, requests, and feedback promptly and efficiently. - Sending appointment reminders and important updates related to our services, ensuring your convenience and satisfaction. - Improving the quality of our services and the functionality of the Site through continuous enhancement and innovation. - Complying with all legal obligations and regulations to ensure data privacy and protection. 2.2. The Company expressly reserves the unilateral right to utilize your personal information for objectives divergent from those initially disclosed, either in strict compliance with applicable legal mandates or as expressly permitted by statutory provisions, or upon securing your unequivocal, informed consent. ## 3. Information Sharing 3.1. We respect the confidentiality of your personal information and limit its sharing to a select group of trusted entities and professionals for specific purposes, including: - Administrative, Supportive healthcare, therapy professionals and staff at Pinancle directly involved in providing services to you, ensuring top-notch medical attention. - Third-party service providers engaged to assist in appointment scheduling, payment processing, and other necessary support services. - Legal and regulatory authorities, but only when required by law or to protect our rights and interests. 3.2. We will never sell, trade, or rent your personal information to third parties for marketing purposes or any unauthorized use. ## 4. Data Security 4.1. We take your data security very seriously and have implemented stringent technical and organizational measures to safeguard your personal information from unauthorized access, use, disclosure, alteration, or destruction. 4.2. Despite our efforts, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. However, we continually monitor and update our security practices to stay ahead of emerging threats. ## 5. Retention of Information 5.1. We will retain your personal information for only as long as necessary to fulfill the explicit purposes for which it was collected, as required by law, and to comply with our legal obligations. 5.2. Should you wish to have your personal information permanently removed from our records, please contact us, and we will expedite the process. Refer our Contact Information section. ## 6. Third-Party Links & Ads 6.1. The Site may contain links to third-party websites or advertisements. However, we are not responsible for the privacy practices or content of such third-party websites. We recommend reviewing the privacy policies of these websites before providing any personal information to them. ## 7. International Users 7.1. Pinnacle Site, App and Services are operated from India. By using our services and accessing the Site, App from outside India, you acknowledge and expressly consent to the transfer and processing of your personal information in India. Refer overall policies of Pinnacle as the most comprehensive amongst the policies would triump. ## 8. Children's Privacy 8.1 Refer our Age Restriction Policy ## 9. Changes to the Privacy Policy 9.1. We reserve the right to modify, update, or change this Privacy Policy at any time without prior notice. By continuing to use Pinnacle Service you agree for the updated terms of this Privacy Policy, By continuing to use Pinnacle Services, You forefiet your right to challenge this decision. We encourage you to review this Privacy Policy periodically. ## 10. Contact Information If you have any questions, concerns, or requests related to this Privacy Policy or the use of your personal information, please contact us at: You can refer our Contact Information section for updated contact info. ## 11. Language Versions 11.1. In the event of any discrepancy or inconsistency between translations of this Privacy Policy in different languages, the English version shall prevail. ## 12. Privacy Policy Acknowledgment 12.1. By accessing and utilizing the Site, Application, and associated services, you hereby affirm that you have meticulously read, comprehensively understood, and unequivocally consent to the terms stipulated in this Privacy Policy. Furthermore, you irrevocably forfeit any and all rights to challenge or dispute the validity or enforceability of any provision within this Privacy Policy ## 13. Entire Agreement 13.1. This Privacy Policy represents the complete and exclusive agreement between you and Pinnacle, with respect to the subject matter herein. This Policy supersedes all prior or contemporaneous understandings, communications, and proposals, whether verbal, written, or electronic, between you and Pinnacle concerning the collection, use, disclosure, and protection of your personal information. At Pinnacle, we strive to protect your privacy diligently and transparently. This Privacy Policy reflects our unwavering commitment to your data privacy and security. If you have any questions or concerns, please do not hesitate to contact us by refering our Contact Information section. Thank you for entrusting us with life empowering therapeutic needs for your kids."
  }
}