Policies

Privacy Policy

How we collect, use and protect personal data — under the Digital Personal Data Protection Act, 2023.

Last updated: 1 June 2026 · Establishment period

Privacy & Data Protection

01

Scope of this policy

This Privacy Policy explains how the International Rehabilitation Workforce Alliance (IRWFA) collects, uses, stores and protects personal data submitted through irwfa.org and in the course of alliance membership.

An important boundary. This policy governs the IRWFA website and membership administration. It does not govern the clinical or child-developmental data processed by Bharath Healthcare Laboratories (BHCL) through the licensed PinnacleAI GPT-OS™ platform at Pinnacle Blooms Network® centres — that data is processed under the platform’s own clinical data terms and the applicable medical-device framework, not through this website.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law.

02

Who we are (Data Fiduciary)

For data submitted through this website, the Data Fiduciary is the International Rehabilitation Workforce Alliance, whose Anchor Institution & Secretariat is:

Bharath Healthcare Laboratories Private Limited (BHCL)
CIN U85110TG2019PTC132498 · operating Pinnacle Blooms Network®
Plot No. 50/A, Raghavendra Nagar Colony, Jeedimetla, Suchitra, Hyderabad – 500055, Telangana, India
Email: members@irwfa.org · Telephone: 9100 181 181

IRWFA is registered as a Section 8 (not-for-profit) company; statutory recognitions with the Rehabilitation Council of India are in process.

03

Personal data we collect

We collect only what is needed to respond to you and to administer membership:

Information you give usName; institution or organisation; role or designation; email address; telephone or mobile number; the courses or programmes your institution offers; city and state; and anything you choose to include in a message or membership enquiry.
Information collected automaticallyLimited, privacy-preserving usage information (for example, pages viewed and approximate region) gathered through cookieless analytics. See our Cookie Policy.
CorrespondenceRecords of email, telephone or messaging contact with the Secretariat, including outreach you have received and your responses or opt-out requests.

We do not seek sensitive personal data through this website, and we ask that you do not submit clinical, diagnostic or child-health information through the enquiry form.

04

Purposes & lawful basis

We process your personal data, on the basis of your consent or for the legitimate purpose for which you provided it, to:

  • respond to your enquiry and communicate with you about membership of the Alliance;
  • assess and administer applications for membership and maintain the member register;
  • send you information relevant to your role in the field, where you have agreed to receive it;
  • operate, secure and improve the website; and
  • comply with legal obligations.

You may withdraw consent at any time (see Your rights). Where you have received an invitation from us, every message includes a means to unsubscribe.

05

Children's data

The IRWFA website is intended for institutions, employers, faculty and students of the rehabilitation field — that is, for adults. It is not directed at children, and we do not knowingly collect personal data of children through this website.

Where the work of the Alliance and its anchor concerns children, any processing of a child’s personal data is carried out by the clinical anchor under the DPDP Act — including verifiable parental consent where required — and never through this website. The Alliance does not undertake tracking, behavioural monitoring or targeted advertising directed at children.

06

Disclosure & service providers

We do not sell personal data. We disclose it only:

  • to service providers (Data Processors) who operate the website and our communications under contract and on our instructions — for example, hosting and content delivery, email and messaging delivery, and analytics;
  • where required by law, regulation or a lawful request from a competent authority; and
  • to protect the rights, safety and property of the Alliance, its members or the public.

Our processors are engaged to handle personal data only for the purposes set out in this policy and to maintain appropriate security.

07

Cross-border transfer

Some of our service providers may process data outside India. Where this occurs, transfers are made consistent with the DPDP Act and only to jurisdictions not restricted by the Central Government, with appropriate safeguards in place.

08

Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, to maintain the member register, or to meet a legal obligation. When data is no longer required, it is deleted or anonymised. You may ask us to erase data we hold about you, subject to any legal retention requirement.

09

Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or loss, including encrypted transport (HTTPS) and access controls. Our anchor maintains an information-security management system certified to ISO/IEC 27001:2022. No method of transmission or storage is completely secure; we work to protect your data but cannot guarantee absolute security.

10

Your rights as a Data Principal

Subject to the DPDP Act, you have the right to:

  • access a summary of the personal data we hold about you and how it is processed;
  • correct, complete or update inaccurate or incomplete data;
  • erase personal data that is no longer necessary;
  • withdraw consent, and to unsubscribe from communications, at any time;
  • nominate another person to exercise your rights in the event of death or incapacity; and
  • grievance redressal (below), and to escalate to the Data Protection Board of India.

To exercise any right, write to the Grievance Officer using the details below. We may need to verify your identity before acting.

11

Grievance redressal

If you have a question or complaint about how your personal data is handled, contact our Grievance Officer:

Sourabh Sashank
Grievance Officer, Office of the Secretariat — International Rehabilitation Workforce Alliance
c/o Bharath Healthcare Laboratories Private Limited
Plot No. 50/A, Raghavendra Nagar Colony, Jeedimetla, Suchitra, Hyderabad – 500055, Telangana, India
Email: members@irwfa.org · Telephone: 9100 181 181

We will acknowledge and address grievances within the timelines required by law. If you are not satisfied, you may approach the Data Protection Board of India.

12

Changes

We may update this policy as the Alliance develops or as the law requires. The current version, with its effective date, is always published on this page. Material changes will be made prominent.

13

Contact

For any question about this Privacy Policy, write to members@irwfa.org or call 9100 181 181.

↑ Back to top

Join the Alliance

Become a Member

Membership is free until further announcement — everyone eligible should join sooner rather than later. Tell us who you are, and the Secretariat will open your way in.

or call 9100 181 181 · members@irwfa.org