Privacy Policy

1. Data Controller

Keroli Healthcare
Unit No. 202, Building No. 5, Viraj Industrial Estate, HDIL, Virar East, Palghar – 401305, Maharashtra, India
CIN: U24232XX2024PTC000000
Email: info@kerolihealthcare.com

2. What Data We Collect

We collect the following categories of personal data only when you voluntarily provide it:

• Identity data: Name, designation, professional registration number (for HCPs)
• Contact data: Email address, phone number, postal address
• Business data: Company name, drug licence number (for distributors)
• Enquiry data: Messages, products of interest, country of operation
• Pharmacovigilance data: Adverse event reports (collected under legal obligation)
• Technical data: IP address, browser type, device information, pages visited (via analytics cookies with consent)

We do not collect patient health data directly. We do not sell or rent any personal data to third parties.

3. Legal Basis for Processing

• Consent (DPDP Act s.6): For sending marketing communications and analytics cookies
• Contractual necessity: To process B2B enquiries and respond to you
• Legal obligation: Pharmacovigilance data collected and shared with CDSCO under Drugs & Cosmetics Act 1940
• Legitimate interests: Website security and fraud prevention

4. How We Use Your Data

• To respond to your enquiries and communications
• To process distributor, export, or institutional partner applications
• To fulfil our pharmacovigilance and regulatory obligations
• To improve our website and user experience (with consent)
• To send relevant product or company updates (only with explicit consent)

5. Data Sharing

We may share your data with:

• Service providers: Web3Forms (form processing), Google Analytics (website analytics — with consent), email providers
• Regulatory authorities: CDSCO, PvPI, and other Indian regulatory bodies where required by law
• Legal requirements: Where required by court order or applicable law

We do not share your data with advertisers or data brokers.

6. Data Retention

• Enquiry / contact data: 3 years from last interaction
• Pharmacovigilance records: Minimum 15 years as required by CDSCO guidelines
• Analytics data: 14 months (Google Analytics default)
• Legal and contractual records: As required by applicable law

7. Your Rights (DPDP Act 2023)

Under the Digital Personal Data Protection Act 2023, you have the right to:

• Access a summary of personal data held about you
• Correction of inaccurate or incomplete data
• Erasure of data (subject to legal retention requirements)
• Withdraw consent at any time (will not affect lawfulness of prior processing)
• Nominate a person to exercise rights on your behalf
• Grievance redressal via our Grievance Officer

To exercise any right, contact our Grievance Officer at: grievance@kerolihealthcare.com

8. Cookies

We use cookies for website functionality and (with your consent) for analytics. You can manage your cookie preferences at any time via our Cookie Policy. Refusing non-essential cookies will not affect the core functionality of the website.

9. Security

We implement appropriate technical and organisational measures to protect your personal data including HTTPS encryption, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.

10. Grievance Officer

In accordance with the IT Act 2000 and IT Rules 2021, our Grievance Officer is:

11. Changes to this Policy

We may update this Privacy Policy periodically. The updated version will be posted on this page with a revised "last updated" date. Continued use of the website after any changes constitutes acceptance of the updated policy.