Privacy policy

1. Who I am

This website, breastfeedingwithease.com, belongs to Breastfeeding with Ease, the lactation practice of Mansi Shah, IBCLC, at 1105, Oberoi Maxima, JVLR, Jogeshwari East, Mumbai, Maharashtra, India.

I decide how your personal data is used, which makes me the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023. When this policy says "I", "me" or "my", it means Breastfeeding with Ease.

2. What I collect

I only collect information you choose to give me. Here's exactly what each form asks for:

Along with each form, the website also records the date and time it was sent and which page it came from. I do not store your IP address with your details. For spam protection, the server briefly keeps a scrambled (hashed) version of your IP address that can't be turned back into the address, and deletes it within a day.

If you call, WhatsApp or email me, I receive whatever you send that way, like any phone call or message.

Facebook and Instagram adverts: if you fill in a lead form on one of my Facebook or Instagram adverts, Meta shares the details you entered (usually your name and phone number, plus any answers on that form) and which advert you responded to. I add these to the same private records as website enquiries, and treat them in exactly the same way.

During a consultation, I may also note things about your feeding, your health and your baby's growth, so I can care for you properly. These consultation notes are kept separately from this website.

3. Why I use it

• To reply to you by phone, WhatsApp or email, about the question or request you sent.
• To arrange your consultation, and to prepare for it.
• To give you the free guide you asked for, and occasionally follow up with a helpful note. You can ask me to stop at any time.
• To keep the website safe from spam and misuse.
• To meet legal obligations, for example keeping records the law requires.

I do not use your details for anything else, and I never sell, rent or trade them.

4. Your consent

When you send a form, you agree to me using the details in it for the purposes above. You can withdraw your consent at any time by contacting me (see section 13). I'll then stop using your details and delete them, unless the law requires me to keep something. Withdrawing consent doesn't affect anything done before you withdrew it.

5. Where it's stored and how it's protected

Form submissions are not sent to any outside database, CRM or spreadsheet service. They're saved as files on this website's own hosting server, in a folder that sits outside the public part of the website, so it can't be opened from a browser.

• The website uses HTTPS, so what you type is encrypted on its way to the server.
• Only I can see submissions, through a password-protected admin area. The password is stored only in scrambled (hashed) form, and the login locks after repeated wrong attempts.
• A copy of each new submission is emailed to my practice inbox so I can reply quickly.
• The server keeps a daily backup of submissions for up to 30 days, in case of technical problems.
• I sometimes download submissions as a spreadsheet to manage bookings. I keep these files on my own password-protected devices.

No system is perfectly secure, but I take reasonable steps to protect your data. If there were ever a breach affecting your personal data, I would inform you and the Data Protection Board of India as the law requires.

6. Who else is involved

I don't share your details with anyone for their own use. A few services are involved in running this website and my practice:

Some of these companies may process data outside India. I may also share information if the law requires it, or to protect someone's safety in an emergency.

7. Cookies, analytics and ads

The website itself doesn't need cookies to work. The only exception is the admin login, which only I use.

If I switch on Google Analytics, the Google Ads tag or the Meta (Facebook/Instagram) Pixel, these tools set their own cookies. They record things like which pages you visit and whether a form was sent successfully. I use this to understand which pages help people, and whether my adverts reach the right mothers. They never receive your name, number, email or anything you write in a form.

You can block or delete cookies in your browser settings, and manage ad personalisation in your Google and Meta account settings.

8. How long I keep it

• Enquiries that don't lead to a consultation (questions, call-backs, guide downloads): up to 2 years, then deleted.
• Clients' booking details: for as long as I'm supporting you, and afterwards only as long as reasonably needed for your care or required by law.
• Server backups: overwritten after 30 days.

When you ask me to delete your data, I remove it from the website's records, its log and its backups.

9. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Know what personal data I hold about you and how I use it
• Correct anything that's wrong or out of date
• Delete your data (erasure) when it's no longer needed, or when you withdraw consent
• Withdraw consent at any time
• Nominate someone to exercise these rights for you if you're unable to
• Raise a grievance with me, and if you're not satisfied, with the Data Protection Board of India

To use any of these rights, contact me (see section 13). I may need to confirm it's really you before sharing or changing anything. I'll reply as soon as I can, and within 30 days at the latest.

10. Information about your baby

Some forms ask about your baby, such as their age. This information comes from you as the parent or guardian, and is used only to support you and your baby. This website isn't meant for children to use, and I don't knowingly collect data from children, or use anyone's data for tracking or targeted advertising aimed at children.

11. Health information and advice

Please only share what you're comfortable sharing in a form. It's fine to keep details for our conversation. Anything health-related you tell me is treated as confidential.

The articles on this website are general information, not medical advice for your situation. In an emergency, contact your doctor or go to the nearest hospital.

12. Changes to this policy

I may update this policy if the website or the law changes. The date at the top shows when it was last updated. If I make a significant change to how I use your data, I'll make it clear on this page.

13. Contact and grievances

For any question, request or complaint about your personal data, please contact me directly. I act as the grievance contact for this website.

If you're not satisfied with my response, you can complain to the Data Protection Board of India.