User Data Deletion Policy – Cradle Children’s Hospital

Effective Date: July 1, 2026

1. Overview

Cradle Children’s Hospital respects your right to control your personal data. This policy explains what data we collect through our digital services and Meta-connected applications, and how you can request its deletion.

This policy applies to data collected via:

1. Our Facebook Page and Messenger interactions
2. Instagram Direct Messages
3. WhatsApp Business communications
4. Our website and any connected web applications

We do not sell your personal data to any third party. Data is collected solely to provide you with healthcare communication services.

2. What Data We Hold

The following types of personal data may be held by us:

Data Type Description Deletable on RequestContact DetailsName, phone number, email address Yes Meta User IDFacebook/Instagram profile identifierYesMessage HistoryChat records via Messenger, WhatsApp, Instagram DMsYesAppointment RecordsBooking details, dates, reminders sentPartial*Patient Reference InfoChild’s name, age provided by parent/guardianYesMedical RecordsClinical data maintained in hospital systems Governed by Medical LawUsage LogsInteraction timestamps, system logsPartial*

*Partial deletion applies where data must be retained for legal, audit, or regulatory compliance. See Section 5.

3. How to Request Deletion

You may submit a data deletion request by emailing us at:

1. privacy@cradlechildrenshospital.com
2. Subject line: Data Deletion Request

Please include the following in your email:

1. Your full name
2. The phone number or email address associated with your account
3. Your Facebook or Instagram username (if applicable)

A clear statement: “I request deletion of all personal data held by Cradle Children’s Hospital”

Alternatively, you may write to us at our hospital address listed at the bottom of this page.

4. Deletion Process & Timeline

Once we receive your deletion request, we follow this process:

Step 1 — Request Received

We acknowledge your request via email within 2 business days.

Step 2 — Identity Verification

We may verify your identity to ensure the request is from the authorised account holder or guardian.

Step 3 — Data Identification

We identify and locate all personal data associated with your account across our systems.

Step 4 — Deletion Executed

Eligible data is deleted from our active databases and messaging systems within 30 days of verification.

Step 5 — Confirmation Sent

We send you a written confirmation once deletion is complete, along with a reference number for your records.

Total timeline: We aim to complete all deletion requests within 30 days. Complex cases may take up to 45 days, and we will notify you if this applies.

5. Exceptions & Retained Data

Certain data may be exempt from deletion where required by law or for legitimate operational purposes, including:

1. Medical records — governed by applicable Indian healthcare regulations and must be retained for a minimum statutory period
2. Financial transaction records — retained for audit and tax compliance
3. Legal obligations — data required to comply with court orders, regulatory investigations, or fraud prevention
4. Anonymised data — aggregate, non-identifiable data used for statistical analysis may be retained

In such cases, we will clearly communicate what data is retained and the reason for retention.

6. Data Held by Meta

When you interact with us via Facebook, Instagram, or WhatsApp, Meta independently processes your data as a separate data controller. Our deletion request covers only the data we hold on our own systems.

To request deletion of data held by Meta, please use Meta’s own tools:

1. Facebook: Settings → Your Facebook Information → Deactivation and Deletion
2. Instagram: Settings → Account → Delete Account
3. Meta Privacy Centre: facebook.com/privacy/center

Deleting your data from our systems does not automatically delete data from Meta’s servers. Both requests must be made separately.

7. Confirmation of Deletion

Upon successful completion of your data deletion request, you will receive:

1. A confirmation email stating that your data has been deleted
2. A unique reference number for your records
3. Details of any data that was retained and the reason for retention

If you do not receive a confirmation within 35 days of submitting your request, please follow up with us at the contact details below.

8. Contact Us

Cradle Children’s Hospital — Privacy Officer

Email: cradlejpr@gmail.com

Website: https://cradlehospital.com/

We acknowledge all requests within 2 business days and resolve them within 30 days.