ESTD 2017 • CHANDIGARH
1 Introduction & Corporate Commitment
UROCHEM BIOTECH (hereinafter referred to as "Urochem", "Company", "we", "us", or "our"), established in 2017 with corporate operations in Panchkula (Haryana) and Chandigarh, India, operates this website (urochembiotech.in) and associated portals including the PharmaFlow B2B platform.
We are committed to maintaining the highest ethical, legal, and regulatory standards regarding data protection, adhering to the Digital Personal Data Protection Act, 2023 (DPDP), the Information Technology Act, 2000, and healthcare data confidentiality guidelines applicable in India. This policy describes how we collect, process, retain, and protect your information when you visit our website, submit franchise enquiries, or interact with our sales and dispatch team.
2 Information We Collect
We collect information to provide seamless B2B pharmaceutical services, respond to franchise applications, verify distributor credentials, and process commercial orders:
- Personal Identifiers: Name, professional title, business name, postal address, email address, mobile number, and landline telephone numbers.
- Pharmaceutical & Regulatory Credentials (B2B): Drug License Number (Form 20B/21B), Goods and Services Tax Identification Number (GSTIN), Wholesale License copies, and territory authorization certificates.
- Commercial & Transactional Data: Order histories, quotation requests, invoice records, payment confirmations, and delivery addresses. We do not store sensitive credit/debit card numbers on our servers.
- Technical & Telemetry Data: IP address, browser type and version, operating system, pages visited, referral sources, time spent, and error logs collected automatically during browsing.
Mandatory Drug Licensing Norms
In adherence to the Drugs and Cosmetics Act, 1940 and Rules thereunder, Urochem Biotech collects and verifies valid Drug License and GST credentials from all prospective PCD franchise partners before supplying pharmaceutical formulations.
3 Purpose & Lawful Basis of Processing
We use collected information solely for legitimate commercial, regulatory, and operational purposes:
- To evaluate and grant district-wise monopoly franchise rights for PCD Pharma distribution.
- To process and dispatch product shipments, generate tax invoices, and provide batch analysis (COA) certificates.
- To answer product inquiries, provide visual aids, price lists, and promotional support materials.
- To maintain drug recall traceability logs as mandated by Indian pharmaceutical drug regulatory authorities.
- To enhance website user experience, detect security threats, and prevent fraudulent inquiries.
4 B2B Confidentiality & Proprietary Formulations
We treat all franchisee communication, order quantities, price quotes, and market intelligence with strict confidentiality. Urochem Biotech does not disclose our franchise partners' client lists, territorial sales volumes, or commercial agreements to third parties or competitor marketing entities.
6 Data Security, Storage & Retention
We employ robust administrative, technical, and physical security measures to protect your personal and commercial data against unauthorized access, loss, or misuse:
- SSL/TLS Encryption: All data transmissions between your browser and our servers are encrypted using modern 256-bit SSL protocols.
- Access Control: Only authorized personnel who require access to fulfill orders, invoices, or regulatory audits are permitted access to customer databases.
- Data Retention: Regulatory pharmaceutical records, invoices, and drug batch distribution logs are retained for the statutory period mandated by the Drugs & Cosmetics Rules (minimum 5 years from manufacture or expiry). Non-essential inquiry logs are purged periodically.
7 Information Sharing & Third-Party Disclosures
We never sell, rent, or trade your personal or business data to third-party marketing companies. Data is shared only under strict conditions:
- Authorized Logistics & Transport Partners: Safe express cargo carriers and cold-chain logistics providers solely for delivering consignments to your registered godown.
- Statutory & Law Enforcement Authorities: When required by court orders, Drug Control Departments, State Tax Authorities (GST), or central regulatory bodies.
- IT & Cloud Infrastructure Providers: Secure hosting and database management partners bound by non-disclosure agreements.
8 Your Rights Under Data Protection Laws
As a data principal under Indian data protection legislation, you are entitled to:
- Request confirmation and summary of personal data processed by Urochem Biotech.
- Request correction, updating, or rectification of inaccurate or outdated information.
- Request erasure of personal data that is no longer required for regulatory compliance or active contracts.
- Withdraw consent for optional communications, such as promotional newsletters or launch notifications.
9 Grievance Officer & Nodal Contact
In accordance with the Information Technology Act, 2000 and DPDP Act, 2023, the contact details of the Grievance & Compliance Officer for UROCHEM BIOTECH are provided below:
Designated Compliance & Grievance Redressal
We endeavor to acknowledge and resolve any grievance, data concern, or dispute within 30 working days from the receipt of written notification.