Privacy Policy
Company Name: Laxmi Drug House
Last Updated: 3 July 2025
1. Scope
This policy applies to all users (CFAs, stockists, retailers) of and services, in compliance with:
- Digital Personal Data Protection Act (DPDPA), 2023.
- Information Technology (Reasonable Security Practices) Rules, 2011.
2. Data We Collect
- Business Information: Drug license numbers, GSTIN, business address.
- Order Details: Product quantities, payment records, shipping addresses.
- Automated Data: IP address, device type (if website analytics are used).
3. How We Use Data
- To process orders, verify licenses, and comply with the Drugs and Cosmetics Rules.
- For regulatory reporting (e.g., maintaining sales records as per law).
- To prevent fraud and communicate delivery updates.
4. Data Sharing
We share data only with:
- CFAs/Stockists: For order fulfilment within their territories.
- Logistics Partners: To enable deliveries (subject to confidentiality agreements).
- Regulators: If mandated by DCGI/State FDA audits.
- We do not sell data to third parties.
5. Data Retention
- Business records retained for a minimum of 7 years (per pharma laws).
- Inactive accounts are deleted after 2 years, unless legal hold applies.
6. Security Measures
- Encrypted storage of sensitive documents (e.g., drug licenses).
- Role-based access to data (e.g., sales team vs. accounts).
7. Your Rights
- Access/Correct Data: Request updates via [email].
- Opt-Out: Unsubscribe from marketing emails (transactional emails excluded).
- Note: Deletion requests may be limited by legal retention requirements.
8. Cookies
We use only essential cookies (e.g., login sessions)—no third-party tracking.
9. Updates
Policy changes will be posted 15 days in advance. Continued use implies consent.
10. Contact
For grievances or data requests:
- Email:info@biomechhealthcare.com
- Company Address: Laxmi Drug House, 56/08/01, Lasudiya Mori, Near Dhaniyawale godown, Pipliya Kumar, Indore, Madhya Pradesh, 452010.
Pharma-Specific Additions
- Regulatory Disclosures: We may disclose buyer data to regulatory authorities during inspections or recalls.
- Cold Chain Compliance: Shipping partners may collect temperature logs for sensitive products; such data is shared with buyers only.
- Wholesale Restrictions: Data misuse (e.g., resale to unlicensed entities) will result in termination and legal action.