Privacy Policy

Bloomfy is a brand operated by Vordyn Technologies Private Limited (CIN: U62099DC2026PTC471432, GSTIN: 07AAMCV2371E1Z9), registered at C. 13/39.VE-6, FF, Varinder Nagar, Janakpuri B-1, New Delhi – 110058. Bloomfy is an online platform that connects parents and guardians of teenagers with qualified mental health professionals in India. References to "we", "us" or "Bloomfy" refer to Vordyn Technologies Private Limited.

We collect the following categories of personal data: **Parent/guardian data:** Full name, email address, phone number, relationship to teenager, billing information (processed by Razorpay — we do not store card details). **Teenager data:** Preferred name, age, location (city), preferred language, mental health concerns (as selected during onboarding). We do NOT collect teenagers' surnames, school details, or government identifiers. **Session data:** Appointment dates, times, session type, booking references, and session notes (visible only to the assigned counsellor and the booking parent). **Technical data:** IP addresses, browser type, device identifiers, and usage analytics for platform improvement.

We use your data to: - Match your teenager with appropriate counsellors - Process appointment bookings and payments - Send appointment confirmations and reminders - Provide customer support - Comply with legal obligations - Improve the platform We do NOT sell your data to third parties. We do NOT use teenager data for advertising or profiling.

Under the DPDP Act 2023, we process personal data on the following bases: - **Consent:** You provide consent when you register and when you book an appointment - **Contractual necessity:** To deliver the booking and session services you have requested - **Legal obligation:** Where we are required to retain data by law - **Legitimate interests:** For platform security and fraud prevention

Mental health information is a special category of sensitive personal data. We apply additional protections including: - Access controls: only the assigned counsellor and the booking parent can access session-specific clinical notes - Encryption at rest and in transit - Data minimisation: we collect only what is necessary for the service - No sharing with third parties except as required by law or in safeguarding situations

We share data with: - **Counsellors:** Only the information necessary to conduct your teenager's session - **Razorpay:** Payment processing (their own Privacy Policy applies) - **Supabase:** Database hosting (data stored in secure cloud infrastructure) - **Law enforcement:** Where required by Indian law or court order - **Safeguarding bodies:** Where we are required to report a concern about a minor's safety We do not share data with marketing companies, data brokers, or social media platforms.

Under the DPDP Act 2023, you have the right to: - **Access** the personal data we hold about you - **Correct** inaccurate data - **Erase** your data (subject to legal retention requirements) - **Withdraw consent** at any time - **Data portability** in a structured, machine-readable format - **Nominate** a person to exercise these rights on your behalf To exercise these rights, contact: hello@bloomfy.in

We retain personal data for the following periods: - Account data: for the duration of your account plus 3 years - Appointment records: 7 years (for professional liability purposes) - Payment records: 7 years (tax and regulatory requirements) - Safeguarding records: as required by applicable law After the retention period, data is securely deleted or anonymised.

Bloomfy's service is for teenagers aged 13–19, accessed through their parents or guardians. We do not allow teenagers to register directly or access the platform independently. All data relating to teenagers is managed by the parent/guardian account holder.

For privacy-related enquiries or to exercise your rights: hello@bloomfy.in For urgent safeguarding concerns, contact us at safeguarding@bloomfy.in or call 112 for an emergency.