Privacy Policy
1. Introduction
Arraymed (“Arraymed,” “we,” “us,” or “our”), operated by [ArrayMed.Private Limited], is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at [WEBSITE URL] (the “Site”) or purchase medical equipment and related products from us.
This Policy is designed to align with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable data protection laws in India.
By using the Site or providing us with your personal data, you consent to the practices described in this Policy.
2. Who We Are (Data Fiduciary)
For the purposes of the DPDP Act, Arraymed acts as the Data Fiduciary responsible for determining how and why your personal data is processed. Our contact details are provided in Section 12.
3. Information We Collect
We may collect the following categories of personal data:
Information you provide directly
- Identity and contact details (name, business name, email address, phone number, billing and shipping addresses).
- Professional details (designation, medical registration or license numbers, institution name) where required to verify eligibility to purchase certain Products.
- Order and transaction information (products purchased, order history, payment-related details processed via our payment providers).
- Communications you send us (enquiries, support requests, feedback).
Information collected automatically
- Technical data (IP address, browser type, device information, operating system).
- Usage data (pages visited, time spent, referring URLs) collected through cookies and similar technologies.
We do not intentionally collect patient health records. Please do not share any patient’s personal or medical information with us.
4. How We Use Your Information
We use your personal data for the following purposes, relying on the legal bases indicated:
- To process and fulfil your orders, arrange delivery, and provide customer support (performance of contract / your consent).
- To verify your eligibility to purchase regulated medical devices (legal obligation / legitimate use).
- To communicate with you about orders, warranties, recalls, and safety notices (performance of contract / legal obligation).
- To manage payments and prevent fraud (legitimate use / legal obligation).
- To improve our Site, products, and services (legitimate use / consent).
- To send marketing communications where you have opted in (your consent).
- To comply with legal, regulatory, and record-keeping obligations (legal obligation).
5. Cookies and Tracking Technologies
Our Site uses cookies and similar technologies to enable core functionality, remember your preferences, and analyze site usage. You can manage cookie preferences through your browser settings or our cookie banner, where available. Some cookies are essential and cannot be disabled without affecting Site functionality. [Link to a separate Cookie Policy if you maintain one.]
6. How We Share Your Information
We do not sell your personal data. We may share it with:
- Service providers and processors who help us operate the business (payment processors, logistics and courier partners, IT and hosting providers), bound by confidentiality and data protection obligations.
- Manufacturers and suppliers, where necessary to fulfil orders, process warranty claims, or carry out recalls.
- Professional advisers such as auditors, lawyers, and accountants.
- Regulatory and government authorities, where required by law or to comply with the legal process.
- Successors in a business transfer, such as a merger, acquisition, or sale of assets, subject to this Policy.
7. Data Security
We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or loss. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach, we will notify the Data Protection Board and affected individuals as required under the DPDP Act.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, including satisfying legal, accounting, tax, warranty, and regulatory requirements applicable to medical device sales. When data is no longer required, we will delete or anonymize it in accordance with applicable law.
9. Your Rights
Subject to applicable law, including the DPDP Act, you have the right to:
- Access the personal data we hold about you and information about its processing.
- Correction of inaccurate or incomplete data, and updating or completion of your data.
- Erasure of your personal data, subject to legal retention requirements.
- Withdraw consent at any time, where processing is based on consent.
- Grievance redressal in respect of our processing of your data.
- Nominate another individual to exercise your rights in the event of death or incapacity.
To exercise any of these rights, contact us using the details in Section 12. We may need to verify your identity before responding.
10. Children’s Data
Our Site and Products are intended for businesses and professionals and are not directed at children. We do not knowingly collect personal data of children (as defined under the DPDP Act) without verifiable parental or guardian consent. If you believe we have collected such data, please contact us so we can take appropriate action.
11. International Data Transfers
Where we transfer personal data outside India (for example, to hosting or service providers located abroad), we will do so in accordance with the DPDP Act and applicable restrictions, and take reasonable steps to ensure your data remains protected.
12. Grievance Officer and Contact
If you have questions, concerns, or complaints about this Policy or our handling of your personal data, please contact our Grievance Officer:
Grievance Officer: Gaurav Keshav
Arraymed — ArrayMed.Private Limited
Email: gaurav@arraymed.co.in
Phone: 9606705675
We will acknowledge and respond to grievances within the timeframes required under applicable law.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on the Site with a revised “Last Updated” date. Where required by law, we will obtain fresh consent or provide notice of material changes.