Privacy policy

This website is operated by Nirmal Lifecare, a sole proprietorship of Shashi Singh, licensed pharmaceutical wholesaler at Shop No. 34, Ground Floor, Suchitra Complex, Dr Ambedkar Marg, Navyug Market, Ghaziabad, Uttar Pradesh 201001, India. For personal data collected through this website, Nirmal Lifecare is the Data Fiduciary under the Digital Personal Data Protection Act, 2023.

Information you give us when you use our enquiry, quote, contact or licence-request forms:

• Name and title, firm or pharmacy name, and buyer type (for example pharmacy, hospital or distributor)
• Mobile number and, if you provide it, email address
• Country, and whether you would like us to contact you on WhatsApp
• Your requirement — products, strengths and quantities
• Your drug licence number, when you request copies of our licences

Information collected automatically. We do not use analytics, advertising or tracking tools. Our hosting provider records basic technical logs (such as IP address, browser type, the page requested and the time) to keep the website running and secure.

We do not ask for, and you should not send us, sensitive data such as health records, prescriptions of patients, passwords or bank card details through this website.

• To reply to your enquiry with rates, availability and dispatch details
• To verify that you are a licensed buyer — the Drugs and Cosmetics Rules, 1945 allow us to sell only to persons holding the required licence
• To contact you by phone, email or WhatsApp about your enquiry or order
• To keep business, tax and regulatory records as the law requires
• To protect the website and our business against misuse and fraud

We do not use your data for unrelated marketing without asking you first.

We process your data on the basis of the consent you give when you submit a form, for the specific purposes listed above. Where the law requires us to keep or share data — for example, records under GST law or the Drugs and Cosmetics Act — we rely on the legitimate uses permitted by Section 7 of the Digital Personal Data Protection Act, 2023. You may withdraw your consent at any time (see Your rights); this does not affect anything done before you withdrew it.

We share personal data only as needed to run this website and our business:

• Service providers who host this website and store enquiries in a secure cloud database (Supabase), acting on our instructions.
• Google, if you view the map on our Contact page — the embedded map is provided by Google and governed by Google’s privacy policy.
• WhatsApp (Meta), only if you choose to message us on WhatsApp.
• Government authorities — such as drug control, tax or law-enforcement agencies — when we are required by law.

We never sell, rent or trade your personal data.

Our service providers may store data on servers located inside or outside India. Any transfer outside India is made only as permitted by Indian law, and never to a country restricted by the Government of India.

• Enquiries that do not lead to an order: up to 24 months from your last contact, then deleted.
• Records linked to orders and invoices: for as long as GST and drug laws require us to keep them.
• Technical logs: kept by our hosting provider for a short period for security.

When data is no longer needed, we delete it or make it anonymous.

The website is served over an encrypted (HTTPS) connection. Enquiries are stored in an access-controlled database that only authorised staff can read, protected by individual logins. We take reasonable security measures as required by the Information Technology Act, 2000 and the DPDP Rules, 2025. No method of transmission or storage is completely secure, but if a personal data breach affects you we will inform you and the Data Protection Board of India as the law requires.

Under the Digital Personal Data Protection Act, 2023 you can:

• Ask for a summary of the personal data we hold about you and how we use it
• Ask us to correct, complete or update it
• Ask us to delete it, unless we must keep it by law
• Withdraw your consent — as easily as you gave it
• Nominate another person to exercise your rights if you die or become incapable
• Raise a grievance with us, and then with the Data Protection Board of India

To use any of these rights, contact our Grievance Officer (below). We may ask you to confirm your identity, and we aim to respond within 30 days.

This website does not use advertising, analytics or tracking cookies. A login cookie is used only on the staff admin area, to keep authorised users signed in. The Google map on our Contact page may set its own cookies when it loads.

This website is meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their data, contact us and we will delete it.

We may update this policy as our website or the law changes. Significant changes will be highlighted on this page.

For questions, requests or complaints about your personal data, contact: