Privacy Policy

1. Who We Are — the Data Fiduciary

AK Pharma Group (“we”, “our”, or “us”), headquartered in West Bengal, India, operates the website akpharmagroup.com(the “Website”). Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), AK Pharma Group is the Data Fiduciary for any personal data collected through this Website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website or contact us through it.

By using our Website, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use our Website.

2. Information We Collect

We collect only what is necessary to respond to an enquiry or fulfil a supply request:

• →Contact Information: Name, email address, phone number, and organisation name provided when you use our contact form or send us an email enquiry.
• →Enquiry Details: Product requirements, procurement details, and other information you voluntarily provide in your enquiry.
• →Technical Data: IP address, browser type, pages visited, and time spent on our Website — collected automatically via standard server logs for security, fraud prevention, and performance purposes.
• →Cookies: Small data files stored on your browser for basic website functionality. We do not use cookies for advertising or cross-site tracking.

We do not ask for, and you should not submit, sensitive personal, medical, financial, or government-ID information through this Website. Pharmaceutical enquiries should refer to product names and quantities, not patient-level data.

3. Lawful Basis Under the DPDP Act

We process your personal data on one or more of the following lawful bases recognised by the DPDP Act:

• →Consent: When you voluntarily submit a contact form or enquiry, you consent to us using your details to respond to that enquiry.
• →Legitimate Use: To respond to communications you initiate, manage institutional supply relationships, maintain records of business correspondence, and ensure the security of this Website.
• →Legal Obligation: To comply with the Drugs and Cosmetics Act, 1940, GST requirements, and other applicable Indian regulations.

4. How We Use Your Information

We use the information we collect to:

• ✓Respond to your enquiries regarding pharmaceutical products, procurement, or partnerships
• ✓Process and fulfil institutional supply orders and related correspondence
• ✓Send relevant information about our products, services, or certifications when requested
• ✓Improve our Website and user experience
• ✓Comply with applicable laws and regulatory requirements under Indian law
• ✓Maintain records as required under the Drugs and Cosmetics Act, 1940 and related regulations

We do not sell, rent, or trade your personal information. We do not use your details for unrelated marketing without your consent.

5. Information Sharing

We do not share your personal information with third parties except in the following limited circumstances, in which the recipients act as Data Processors or independently regulated entities:

• →Logistics and courier partners who require delivery information to fulfil orders
• →Payment processing partners for order transactions (no card data is stored by us)
• →Regulatory authorities as required under the Drugs and Cosmetics Act or other applicable law
• →Professional advisers (legal, accounting) bound by confidentiality obligations

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry records are typically retained for a period of 3 years. Supply and transaction records are retained as required under the Drugs and Cosmetics Act and GST regulations, after which data is deleted or anonymised.

7. Data Security

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction — HTTPS encryption in transit, access controls on our inbox, and security headers on every page. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights as a Data Principal

Under the DPDP Act, you (as a Data Principal) have the right to:

• ✓Access the personal data we hold about you
• ✓Request correction or updating of inaccurate or incomplete data
• ✓Request erasure of your personal data (subject to legal retention obligations)
• ✓Withdraw consent at any time, where consent is our lawful basis
• ✓Nominate another individual to exercise your rights in the event of your death or incapacity
• ✓Raise a grievance with our Grievance Officer (see section 12)
• ✓Approach the Data Protection Board of India if your grievance is not satisfactorily resolved

To exercise any of these rights, email [email protected] with the subject “Privacy request”. We will respond within a reasonable timeframe and in any case within the statutory period.

9. Cookies and Tracking

Our Website uses only cookies that are strictly necessary for the Website to function. We do not use advertising cookies, third-party analytics cookies, or tracking pixels that share data with external parties. Where consent is required for any non-essential cookies, you will see a banner inviting you to accept or decline. You may also configure your browser to refuse cookies at any time, but this may affect certain Website functionality.

10. Third-Party Links

Our Website may contain links to third-party websites (such as the GeM portal or regulatory authority websites). We are not responsible for the privacy practices of those websites and recommend reviewing their privacy policies separately.

11. Children's Privacy

Our Website is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us for its immediate deletion.

12. Grievance Officer

In accordance with the DPDP Act and the Information Technology Act, 2000, the following officer is designated to receive privacy-related grievances:

We will acknowledge grievances within 7 working days and aim to resolve them within 30 days, in line with statutory expectations.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated “last updated” date, and material changes will be highlighted at the top of the page. Continued use of our Website after changes constitutes acceptance of the revised Policy.

14. Governing Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Any disputes shall be subject to the exclusive jurisdiction of the courts of West Bengal, India.

15. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: