Privacy Policy

DARC – Dr. Aaditya's Rehab Centre ("DARC", "we", "us", "our") is a paediatric therapy centre with two locations in Chennai, Tamil Nadu, India. We provide occupational therapy, speech and language therapy, sensory integration therapy, behavioural therapy, special education, physiotherapy, and parent coaching to children and families.

This Privacy Policy explains how we collect, use, and protect personal information when you visit darcglobal.com ("the Website") or interact with us.

We ask for your consent before placing any non-essential cookies. The cookie banner appears when you first visit the site.

Essential cookies — These keep the site functional (e.g., keeping you logged in to the parent portal). They are always active.

Meta Pixel — If you accept cookies, the Meta Pixel collects data about your visit and shares it with Meta Platforms, Inc. This allows us to run relevant ads on Facebook and Instagram and to measure which ads led families to contact us. You can manage your Meta ad preferences at facebook.com/ads/preferences.

Revoking consent — To remove your consent, clear your browser's local storage for darcglobal.com (DevTools → Application → Local Storage → delete "darc_cookie_consent"). The banner will reappear on your next visit.

We do not sell your personal data. We share data only in the following limited circumstances:

- Meta Platforms, Inc. — via the Meta Pixel, when you have given consent, to measure ad performance and reach relevant audiences. - Vercel Inc. — our hosting provider, which processes server logs and delivery data to operate the website. - Supabase Inc. — our database provider, which stores parent portal data in encrypted form on servers in the EU/US. - Legal requirement — if required by a court order, government authority, or applicable law in India.

All third-party providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

DARC serves children with developmental needs. We collect information about children only from their parents or legal guardians. We do not knowingly collect personal data directly from children under the age of 18.

Clinical data relating to a child's therapy — assessments, session notes, progress reports — is treated with the highest level of confidentiality and is shared only with the child's treating therapists and the registered parent or guardian.

DARC may collect UPI transaction references, payment screenshots, payment method labels, or related booking notes when you choose to share them for appointment verification.

DARC does not ask for or store your UPI PIN, card number, CVV, net banking password, or full bank account credentials on this website. Please do not send such sensitive credentials through forms or WhatsApp.

Payment references are used only to verify appointment payments and resolve billing questions.

Enquiry data (consultation forms) is retained for up to 12 months, after which it is deleted unless you have become a client.

Payment verification references related to consultations may be retained with the appointment record for accounting, dispute resolution, and audit purposes.

Clinical records for active clients are retained for the duration of the therapeutic relationship and for 7 years thereafter, in accordance with standard healthcare record-keeping practice in India.

Cookie consent preferences are stored in your browser's local storage and are cleared when you clear your browser data.

Under the Digital Personal Data Protection Act 2023 (India) and applicable law, you have the right to:

- Access — request a copy of the personal data we hold about you - Correction — ask us to correct inaccurate information - Erasure — request deletion of your data where we have no legal obligation to retain it - Withdrawal of consent — withdraw marketing or cookie consent at any time without affecting prior lawful processing - Grievance redressal — raise a complaint with us or the Data Protection Board of India

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

We take reasonable technical and organisational measures to protect your data against unauthorised access, disclosure, or loss. Parent portal data is encrypted in transit (TLS) and at rest. Access to clinical records is restricted to authorised DARC staff only.

No method of transmission over the internet is completely secure. If you have concerns about a specific data incident, please contact us immediately.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the updated policy.