WebHopers Infotech PVT LTD (“Company”, “we”, “us”) operates PharmaAdda (the “Platform”). This Privacy Policy explains how we collect, use, disclose, and protect personal and business data of Users, in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and applicable rules made thereunder.
1. Information We Collect
- Business identity data: company/firm name, business address.
- Contact person data: name, designation, phone number, email address, WhatsApp number.
- Account data: login credentials, account activity, inquiry/lead history.
- Listing data: product names, compositions, images, pricing, and marketing content uploaded by Manufacturers/Sellers.
- Technical data: IP address, device/browser type, cookies, and usage analytics.
- Communication data: messages exchanged through the Platform’s inquiry/contact forms.
2. Purpose of Processing
- To create and verify User accounts and display business/Listing profiles.
- To connect Buyers with Manufacturers/Sellers and facilitate inquiries (the core Platform function).
- To send transactional communication, service updates, and — where consented — marketing communication.
- To detect fraud, fake listings, or misuse, and to comply with legal/regulatory requests.
- To improve Platform performance through aggregated, anonymized analytics.
3. Lawful Basis & Consent
Personal data is processed based on User consent obtained at the time of registration, or for compliance with a legal obligation, in accordance with the DPDP Act, 2023. Users may withdraw consent at any time, subject to Clause 8, though this may limit Platform functionality.
4. Disclosure of Information
- To other Users: Business/Listing details of Manufacturers/Sellers are visible to Buyers (and vice-versa for inquiries) as this is the core purpose of the Platform.
- To service providers: hosting, analytics, payment gateway, or SMS/email providers engaged under confidentiality obligations.
- To authorities: when required under law, court order, or by drug regulatory authorities (CDSCO/State FDA) investigating a listed product.
- We do not sell personal data to third parties for unrelated marketing purposes.
5. Data Security
We implement reasonable security practices and procedures as mandated under Section 43A of the IT Act (read with applicable rules) and the DPDP Act, including encryption in transit, access controls, and periodic security review. No method of transmission or storage is 100% secure, and the Company cannot guarantee absolute security.
6. Cookies & Tracking
The Platform uses cookies and similar technologies to remember preferences, maintain login sessions, and analyze usage patterns. Users may disable cookies through browser settings; doing so may affect certain Platform features.
7. Data Retention
Personal and business data is retained for as long as the account is active and thereafter for a period necessary to comply with legal, accounting, or regulatory obligations (including record-keeping requirements under drug regulatory law), after which it is securely deleted or anonymized.
8. Your Rights
Subject to the DPDP Act, 2023, Users have the right to:
- Access a summary of personal data processed about them.
- Request correction or updating of inaccurate or incomplete data.
- Request erasure of personal data, subject to legal retention requirements.
- Withdraw consent and nominate another individual to exercise rights in the event of death or incapacity.
- File a grievance with the Company’s Grievance Officer, and thereafter with the Data Protection Board of India.
9. Cross-Border Transfer
Where data is processed by service providers located outside India (e.g., cloud hosting), such transfer will be carried out in compliance with the DPDP Act, 2023 and any restrictions notified by the Central Government from time to time.
10. Children’s Data
The Platform is intended solely for business use by adults and registered business entities. It is not directed at, and does not knowingly collect data from, individuals below 18 years of age.
11. Data Breach Notification
In the event of a personal data breach, the Company will notify affected Users and the Data Protection Board of India as required under the DPDP Act, 2023.
12. Changes to this Policy
This Policy may be updated periodically. Material changes will be notified via the Platform or registered email. Continued use of the Platform after such updates constitutes acceptance.
13. Contact
For privacy-related questions, write to info@pharmaadda.in.
