Privacy Policy
At Pharma Assist, we respect your privacy and are committed to protecting the confidential business, license, and transactional data of our healthcare partners, retail pharmacies, and wholesale distributors.
Encrypted Data Transfer
All API endpoints and license database calls are secured using standard 256-bit SSL encryption.
Strict License Verification
Drug license credentials and GSTIN details are strictly used for regulatory authentication.
Razorpay PCI-DSS Security
Payment processing is handled via PCI-DSS certified gateway Razorpay; card data is never stored.
Radius Geo-Mapping
Location coordinates are used solely to match local retailers with nearest stocking distributors.
Introduction & Overview
Welcome to Pharma Assist ("Platform", "we", "us", or "our"). This Privacy Policy explains how Pharma Assist collects, processes, stores, and protects confidential data when you access or use our B2B portal, mobile application, APIs, and associated pharmaceutical services.
Our services facilitate stock discovery, order matching, distributor inventory mapping, and credit fulfillment exclusively for licensed retail pharmacies, authorized pharmaceutical distributors, and registered manufacturers. By registering an account or placing orders via Pharma Assist, you consent to the practices described in this document.
Information We Collect
To ensure regulatory compliance and facilitate B2B trade, we collect the following categories of information:
- Business & License Identifiers: Entity name, pharmacy name, Drug License numbers (Form 20/21/20B/21B), GSTIN registration, FSSAI licenses, and owner/pharmacist credentials.
- Contact Information: Primary email addresses, official phone numbers, store street address, pin code, state, and district details.
- Inventory & Transaction Data: Stock levels, unit pricing, batch numbers, expiry dates, order items, invoice totals, and payment status histories.
- Financial & Payment Information: Payment transaction reference numbers and Razorpay payment identifiers. We do not store credit/debit card numbers, CVVs, or online banking passwords.
- Technical & Usage Metrics: IP addresses, browser specifications, login timestamps, device type, API usage logs, and system error diagnostics.
How We Use Your Data
We process your business and personal information for the following legitimate purposes:
Account Verification
Validating drug licenses with government regulatory databases before enabling B2B medicine purchasing.
Order Execution
Routing purchase orders, generating digital invoices, and notifying distributors for stock dispatch.
Geo-Location Search
Displaying nearby distributors based on pin code and live radius coordinates to minimize delivery lag.
Platform Security
Detecting unauthorized login attempts, preventing counterfeit trade, and monitoring API rate limits.
Order & B2B Data Sharing
Pharma Assist operates strictly as a B2B marketplace. We do not sell your personal or financial data to third-party advertisers. Data sharing is limited to the following operational contexts:
- Trading Partners: When a retailer submits an order, relevant pharmacy contact details and shipping addresses are shared with the selected wholesale distributor to complete fulfillment.
- Third-Party Payment Processors: Transaction parameters are securely submitted to Razorpay Software Private Limited for online checkout, subscription management, and refund processing.
- Logistics Providers: Shipping coordinates and dispatch manifests are shared with verified pharmaceutical logistics partners when transport assistance is requested.
- Legal & Regulatory Authorities: We may disclose records to Drug Inspectors, State Licensing Authorities, or Law Enforcement if required by applicable pharmaceutical legislation (e.g., Drugs and Cosmetics Act).
Location Services & Interactive Mapping
Our platform incorporates OpenStreetMap and Leaflet geographic rendering tools to help retail pharmacies locate nearby distributor hubs within radius ranges (e.g., 5 km, 10 km, 25 km).
Location data is collected based on store address geocoding or optional browser GPS permissions. You can disable browser location sharing at any time; however, manual pin code selection will remain required for localized inventory search.
Data Security Safeguards
We enforce multi-tiered administrative, physical, and technical safeguards to protect your business records against loss, theft, and unauthorized access:
π‘οΈ Technical Control Measures:
- TLS 1.3 protocol encryption for all data in transit.
- Bcrypt hash salt algorithms for storing account passwords.
- Session cookie flags (`HttpOnly`, `SameSite=Strict`, `Secure`).
- Role-based access control (RBAC) separating Retailer, Distributor, Admin, and Superadmin permissions.
Retention & Legal Compliance
We retain user account information for as long as your account remains active. Transaction logs, order invoices, and batch records are archived for a mandatory minimum period of 5 years to satisfy statutory tax and pharmaceutical audit mandates under Indian law.
Upon account deactivation request, non-statutory records will be purged or anonymized within 30 business days.
Cookies & Storage Policy
Pharma Assist utilizes standard HTTP session cookies and browser `localStorage` items solely for functional operation:
- Session Cookies: Maintain your active login state and security token across portal pages.
- Preference Storage: Save UI preference settings such as grid/list view selection and filter values.
Partner Rights & Controls
As a registered partner on Pharma Assist, you possess the following data rights:
- Access & Export: Request a copy of your account profile, order history, and uploaded drug licenses.
- Correction: Update outdated GSTIN numbers, contact details, or address information directly via your account settings.
- Communication Opt-Out: Unsubscribe from non-essential promotional communications while retaining transactional email alerts.
Contact Privacy Desk
If you have questions, grievances, or requests regarding this Privacy Policy or our data management practices, please reach out to our dedicated Data Protection Desk:
Pharma Assist Data Compliance Officer
π§ Email: privacy@pharmaassist.com
π Phone: +91 (022) 4000-8800
π’ Address: Corporate Tech Park, Suite 402, BKC, Mumbai, MH - 400051