PRIVACY POLICY

PRIVACY POLICY 

1. General

GNH India Pharmaceuticals Limited (“us”, “we”, or “our”) operates the website https://www.gnhindia.com/

This privacy policy (“Privacy Policy”) together with the Legal Notice/Terms of Use, which can be accessed at Legal Notice/Terms of Use governs your use of the Website and informs you of our policies and procedures in respect of the collection, use, disclosure, processing, transfer, and storage of the information/data provided to us by you on or through the Website and the choices you have associated with that information/data. 

We use your information/data to provide and improve the Website. By browsing, accessing and using the Website or by otherwise giving us your information:

  1. You confirm that you have the capacity to enter into a legally binding contract under the Indian Contract Act, 1872.
  2. You have read, understood and agree to be bound by the terms of this Privacy Policy. 
  3. You consent to the collection, use, storage, possession, handling, dealing, disclosure or transfer of your Personal Information (defined hereinafter) or Sensitive Personal Data or Information (defined hereinafter) in accordance with this Policy, without exceptions. 

(Personal Information and Sensitive Personal Data or Information may hereinafter collectively be referred to as “Information”)

You may at any time choose not to provide any Information or to withdraw your consent for the collection, use, storage, possession, disclosure or transfer of your Information. However, if you choose not to provide any Information or to withdraw your consent, you will not be able to access our Website and we will not be able to provide you with the corresponding service for which consent was required. We further clarify that the withdrawal of consent will not affect the processing of the Information, based on previous consent given prior to the withdrawal.

Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meaning as in our Terms and Conditions. 

This document is an electronic record and is governed by the provisions of the Information Technology Act, 2000 and the rules made thereunder as may be applicable. This electronic record is generated by a computer system and does not require any physical or digital signatures.

2. Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Website for you. You may be asked to provide Information anytime you visit, access, use or browse the Website. You shall provide Information, which shall be true, correct, accurate and upto date. You agree that you are providing all Information to us voluntarily.

Types of Information/Data Collected

Personal Information

While using our Website, we may ask you to provide us with certain personally identifiable information that can be used individually or in combination with other pieces of information available with us to contact or identify you (“Personal Information”). Personal Information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City
  • Gender
  • Date of birth

Sensitive Personal Data or Information 

We may also collect, receive, process or store certain sensitive personal data or information consisting of but not limited to – 

  • physical, physiological and mental health condition
  • medical records and history  
  • medical prescription and other health related information
  • any detail relating to the above Information categories as provided to us for providing service 

(“Sensitive Personal Data or Information”)

Usage Data

We may also collect information how the Website is accessed and used (“Usage Data”). This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Website that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Webssite and hold certain information. 

Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. 

Examples of Cookies we use:

  • Session Cookies. We use Session Cookies to operate our Service.
  • Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
  • Security Cookies. We use Security Cookies for security purposes.

Tracking technologies also used are beacons, tags, and scripts to collect and track information. The use of cookies and other tracking technologies allows us to improve and analyze our Website and to improve your experience. 

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Website or take full advantage of all the offerings on our Website.

Use of Information

We use the collected Information for various purposes:

  • To carry out our obligations arising from your requests for services on the Website
  • To provide and maintain the Website. 
  • To notify you about changes to our Website. 
  • To allow you to participate in interactive features of our Website when you choose to do so.
  • To provide customer care and support.
  • To provide analysis or valuable information so that we can improve the Website. 
  • To monitor the usage of the Website. 
  • To detect, prevent and address technical issues.
  • To comply with any legal or regulatory requirement or request from any governmental, regulatory or judicial authority.
  • To resolve any request, dispute, grievance, complaint raised by you in respect to your use of the Website.
  • To monitor or detect any fraudulent or illegal activity on the Website.

3. Transfer of Data

Your Information may be transferred to, stored and maintained or processed on computers located outside of your state, province, country or other governmental jurisdiction in which you access the Website, where the data protection laws may differ from those in your jurisdiction. If you are located outside India and choose to provide Information to us, please note that we transfer the same, to India and process it there.

By using the Website and your consent to this Privacy Policy followed by your submission of such Information represents your agreement to that transfer.

We will take all steps reasonably necessary to ensure that your Information is treated securely and in accordance with this Privacy Policy and no transfer of your Information will take place to an organization or a country unless there are adequate controls in place including the security of your Information.

4. Disclosure of Data

Third Party Service Providers 

We may employ/engage third party companies and individuals to facilitate operation of our Website and provision of our service (“Service Providers”) and/or to provide the service on our behalf, to perform service-related services or to assist us in analyzing how our service is used. In this regard, we may from time to time be required to disclose the Information collected from you to such Service Providers only to perform these tasks on our behalf and they are obligated not to disclose such Information further or use it for any other purpose. By accessing and/or using this Website, you consent to such disclosure, of your Information to and storage and processing of the same by such Service Providers.

In particular, we use ZOHO CORPORATION B. V.’ s servers for storage of all our data including the Information. Zoho adheres to generally accepted industry and security standards with respect to such Information and you can find more information about their privacy policy here https://www.zoho.com/security.html. 

Analytics

We may also use third-party Service Providers to monitor and analyze the use of our Website such as Google Analytics. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Website. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the advertisements of its own advertising network. You can opt-out of having made your activity on the Website available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms webpage: https://policies.google.com/privacy?hl=en

Legal Requirements

We may also disclose your Personal Information when we, in our sole discretion in the good faith belief deem that such action is necessary to:

  • comply with a legal obligation
  • protect and defend our rights or property 
  • prevent or investigate possible wrongdoing in connection with the use of the Website or provision of the service
  • protect the personal safety of users of the Website or the public
  • protect against legal liability

5. Security of Information 

The security of your Information is important to us. We have implemented security policies, rules and technical measures to protect the Information from unauthorised access, improper use or disclosure. While we strive to use commercially acceptable means to protect your Information, you acknowledge and agree that no method of transmission over the Internet, or method of electronic storage is 100% secure and we cannot guarantee its absolute security. You agree not to hold us responsible for any breach of security or for action of any third parties that receive your Information or events that are beyond our reasonable control, including but not limited to acts of government, computer hacking, unauthorised access to computer data and storage devices, breach of security, computer crashes etc. 

6. Retention of Information 

We will retain your Information and any data for the period necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted under applicable law.

7. Links to Other Sites

Our Website may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every third party site you visit.

We have no control over and assume no responsibility for such third party links present on our Website or the content, privacy policies or practices of any third party sites or services.

You acknowledge and agree that we are not responsible for any collection of or disclosure of your Information by any third party sites and the presence of any third party links on our Website cannot be construed as a recommendation, endorsement or solicitation for the same. You further acknowledge and agree that We are not liable for any loss or damage which may be incurred by you as a result of the collection and/or disclosure of your Information via third party links.

8. Children’s Privacy

Use of our Website and is available only to persons who can form a legally binding contract under the Indian Contract Act, 1872. Our Website does not address anyone under the age of 18 (“Child”).

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with any personally identifiable information please contact us. If we become aware that we have collected personally identifiable information from any Child without verification of parental consent, we take steps to remove that information from our servers.

9. Changes to this Privacy Policy

We reserve the right to update or amend our Privacy Policy from time to time. The Privacy Policy as and when updated or amended, shall be posted on this page. Any continued use of the Website and our services following any such amendments to the Privacy Policy, will be deemed as an implicit acceptance of the Privacy Policy in its amended form.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10. Updating of Personal Information

You can always contact us on the below mentioned email/number in order to update or amend the Information that you have provided to us.

11. GDPR and Your Rights Within the EU

As per GDPR, if you are in the EEA and use our services from within the EEA, in addition to what is set out elsewhere in this Privacy Policy, you may be entitled under circumstances to the following – 

Rights

As per GDPR, you will have the Right to Information and access to personal data, Right to rectification, Right to erasure, Right to restriction of processing, Right to data portability, Right to object and Rights in relation to automated decision making and profiling.

If you wish to exercise any of the above rights, please contact us using the contact details set out below. For the protection of your privacy and security, our team shall take every reasonable step to ensure that your identity is verified before granting access, or rectification, or deletion.

Notification of Breach

As per GDPR, breach notification will be sent if there is a breach within a period of 72 hours. 

Data Controller

GNH India Pharmaceuticals Limited is the controller of your personal information.

Disclosure under Law

It is possible that we may need to disclose personal data when required by law. We will disclose such data wherein we have a good-faith belief that it is necessary to comply with a court order, ongoing judicial proceeding, or other legal process served on us or to exercise our legal rights or defend against legal claims.

12. Additional notice to California residents – your California privacy rights

This section supplements the description of our information collection and sharing practices elsewhere in this Privacy Policy to provide certain disclosures to California residents whose personal information we may process pursuant to the California Consumer Privacy Act (“CCPA”).  Please note that these disclosures do not apply to information that is not processed under the CCPA.

If you live in California, you may access the personal information we hold about you, request details about how we process your personal information, ask us to delete your data or request that we no longer “sell” (as defined in the CCPA) your personal information.  Please submit your request at the contact details below. 

However, please note that these rights are not absolute and we may not delete information we are required to retain for regulatory reasons, certain internal business purposes, or where otherwise provided for by law.  In addition, we will not respond to a request if we cannot verify you as the requestor.

13. Grievance Redressal 

If you have any questions, grievance or complaints about this Privacy Policy, please contact us on the below mentioned details:

14. Governing Law

The terms of this Privacy Policy shall be governed and construed in accordance with the laws of India. Any dispute or difference arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in Mumbai, Maharashtra.

15. Severability

Each clause of this Privacy Policy shall be and remain separate from and independent of and severable from all and any other clauses herein. In the event any clause of this Privacy Policy is held to be invalid or unenforceable, such clause shall be ineffective only to the extent of such invalidity or unenforceability, without invalidating the remaining of the clauses of the Privacy Policy. 

This Privacy Policy was last updated on 16.12.2021 and is effective from such date