Privacy Policy | Medonica Healthcare

Medonica Healthcare Pvt. Ltd. (“Medonica”, “we”, “us”) respects your privacy. This Privacy Policy explains how we process your Personal Data when you use www.medonicahealthcare.com (the “Website”), and is published in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it (together, the “DPDP Act”), and the Information Technology Act, 2000 and the rules made under it, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as in force from time to time (together, the “IT Act”).

Last updated: 16 October 2026.

1. Who we are

Medonica Healthcare Pvt. Ltd. is the Data Fiduciary for the Personal Data described in this policy. Our registered address is Plot No. 5, 6 and 9, Prabha Vihar, Mauza Mohammadpur, Near UPSIDC, Agra, Uttar Pradesh 282007, India. You can contact us at info@medonicahealthcare.com.

In this policy, “Personal Data”, “Data Principal”, “Data Fiduciary”, “Data Processor” and “processing” have the meanings given in the DPDP Act. “You” means the Data Principal.

2. Personal Data we collect

We collect Personal Data only when you choose to give it to us, through the Enquiry form, the Contact form or by email. This may include:

your name, organisation, role or designation, email address, telephone number and city;
the products you are interested in, the quantity, the type of enquiry and the message you write;
for job or partnership applications sent to us, the information in your CV or expression of interest.

We do not ask for sensitive Personal Data. Please do not include patient or health information in your message.

When you submit a form, our systems also use a short-lived, irreversible technical fingerprint of your connection to limit spam and misuse. We do not store your IP address in the enquiry record.

3. Purposes of processing

We process your Personal Data for the following specified purposes:

to respond to your enquiry, provide product information and prepare quotations;
to communicate with you about your enquiry, including an automatic acknowledgement;
to evaluate distributor, partner and job applications;
to keep records, protect the Website against spam and misuse, and comply with applicable law.

We process your Personal Data on the basis of your consent, which you give by ticking the consent box on the form or by writing to us, and for the legitimate uses permitted by the DPDP Act. We do not use your Personal Data for any other purpose without fresh consent, and we do not sell it.

4. Disclosure and Data Processors

Access to your Personal Data within Medonica is restricted to our authorised IT personnel and the members of our board of directors. We may share it with the following Data Processors, who process it on our behalf and only for the purposes above:

our web hosting and email service providers;
Google (Gmail), where enquiry emails are forwarded to a central mailbox;
Cloudflare, Inc., which provides the Turnstile security check on our forms and may provide network services for the Website.

We may also disclose Personal Data where required by law, a court or a competent authority. Our Data Processors are bound by contract or terms to protect your Personal Data.

5. Transfer outside India

Some of our Data Processors may store or process Personal Data on servers outside India. We transfer Personal Data outside India only as permitted by the DPDP Act and subject to any restriction notified by the Central Government.

6. Retention

We retain Personal Data from enquiries and applications for six (6) months from the date we receive it. After that, we erase it from our Website database and delete the related emails from our mailboxes, unless we must keep it to comply with law or to establish, exercise or defend a legal claim, or you have entered into a commercial relationship with us, in which case we keep the records that the relationship requires.

7. Security safeguards

We implement reasonable security safeguards to protect Personal Data, including encrypted (HTTPS) connections, restricted access as described above, automated spam protection, and limits on how long data is kept. No system is completely secure, but we review our safeguards periodically.

8. Cookies and similar technologies

The Website does not set cookies and does not use advertising or analytics tools. Your enquiry list is held in your own browser’s local storage until you send it, and you can clear it at any time. The Turnstile security check may use technical browser storage to verify that a visitor is a person. Videos and maps are loaded from YouTube and Google only after you click to play or load them, and are then governed by those providers’ own policies.

9. Your rights as a Data Principal

Under the DPDP Act you have the right to:

obtain a summary of the Personal Data we process about you and the processing activities, and the identities of those with whom we have shared it;
request correction, completion or updating of your Personal Data;
request erasure of your Personal Data, unless we are required by law to retain it;
withdraw your consent at any time, as easily as you gave it;
seek grievance redressal; and
nominate another person to exercise your rights in the event of your death or incapacity.

To exercise any right, write to info@medonicahealthcare.com or contact our Grievance Officer below. We may need to verify your identity before acting on a request. Withdrawing consent does not affect processing already done, and we may need to stop providing a response or quotation that depends on the data.

10. Grievance redressal

If you have a concern about how we process your Personal Data, please contact our Grievance Officer:

Mr. Dhiraj Kumar Gupta, Grievance Officer
Medonica Healthcare Pvt. Ltd., Plot No. 5, 6 and 9, Prabha Vihar, Mauza Mohammadpur, Near UPSIDC, Agra, Uttar Pradesh 282007
Telephone: +91 79064 57348
Email: info@medonicahealthcare.com

We acknowledge a grievance within three (3) working days and aim to resolve it within thirty (30) days, and in any case within the period prescribed by law. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

11. Personal Data breach

If a Personal Data breach occurs, we will notify the Data Protection Board of India and affected Data Principals in the manner and within the time required by the DPDP Act.

12. Children

The Website is intended for businesses and healthcare professionals. We do not knowingly process the Personal Data of a child (a person under 18 years) without verifiable consent of a parent or lawful guardian. If you believe we have done so, please contact us and we will erase it.

13. Third-party links

The Website may link to other sites, such as our LinkedIn page. We are not responsible for their privacy practices.

14. Changes to this policy

We may update this policy from time to time. The “Last updated” date shows when it was last changed. Material changes will be notified on the Website.

15. Governing law

This policy is governed by the laws of India. Subject to applicable law, the courts at Agra, Uttar Pradesh have jurisdiction.