TERRAPHA BIOTECH LLP — PRIVACY POLICY

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

This Privacy Policy is governed by and compliant with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

We use your personal data to provide and improve our Service. By using the Service, you consent to its collection and use as described in this Privacy Policy. The Company may modify the Website or these Terms at any time without notice; you are advised to review them periodically.

“Personal Data” means any information that can identify you, directly or indirectly, including name, address, email, or phone number. Some features may be unavailable if you choose not to provide certain Personal Data. All personal data you provide will be handled according to this Privacy Policy

Minors

This website is not intended for children under 18. We do not knowingly collect Personal Data from anyone under 18 without parental consent. Parents or guardians may request access to or deletion of their child’s information. Minors should obtain parental permission before sharing any Personal Data online.

Identity and Contact Details of the Data Controller

The data controller is Terrapha Biotech LLP, 203, Millenium Plaza, Sakinaka, Opp. Star Industrial Estate, Andheri East, Mumbai, Maharashtra – 400072. You may contact the data controller by mail or email info@terrapha.com.

The personal information we collect from you when you visit our website

On this website, we may request Personal Data about you. Examples of Personal Data that we may collect that directly identifies you includes your name, contact information, email address, and other information in combination with these identifiers. We may also collect certain Personal Data that does not directly identify you by name, but could be used to identify that a specific computer or device has accessed our website, activity data.

Personal information we collect when you report a possible side effect associated with one of our products may include information such as your gender, date of birth and information about your health.

Use personal information – We use personal information for the purposes described below, or as otherwise described at the time of collection:

Responding to Requests or Inquiries – We use the information you provide to respond to your requests — including medical inquiries, product questions, account registration, or newsletter subscriptions. Based on your request, we may collect your contact details, preferences, and any information you choose to share. We process this data under our legitimate interest to assist you, and if your request involves sensitive personal data, we do so only with your explicit consent.

Provide our Services – We use personal information to operate and provide our Services, including account registration and access to scientific and pharmaceutical information. If a contract exists, we use your data to fulfill our contractual obligations.

Communicate with you about our Services – It is in our legitimate business interests to use personal information to respond to your requests, provide support, and communicate with you about our Services, including by sending announcements, updates, security alerts and support and administrative messages.

Personalizing Your Experience – We may collect information about your preferences and past interactions to understand your interests and serve you better. This may include your contact and product preferences, language choices, marketing preferences, and demographic details. When collected automatically, this data is processed under our legitimate business interests; otherwise, it is processed based on your consent.

Website Analytics and Tracking – Where permitted by law, we may combine your Personal Data with information from our website, resources, or offline records. Cookie data may be transferred internationally per our Global Data Transfer policy. Non-essential cookies require your consent under Indian law. Automatically collected data is processed for legitimate business interests; all other data is processed with your consent.

Tracking and Monitoring Adverse Events and Pharmacovigilance – Certain sections of our website may collect Personal Data related to adverse events for pharmacovigilance purposes. This information is essential for public health and is used to detect, assess, and prevent adverse events or other medicine-related issues.

To Run and Maintain our website – We automatically collect information such as your IP address, location, and accessed resources to operate, maintain, and secure our website, network systems, and other assets as part of our legitimate business interests.

Compliance and protection – We may use personal information to comply with legal obligations or protect our rights and interests, including safeguarding safety and property, auditing compliance, enforcing Terms of Service, preventing fraud or cyberattacks, and responding to lawful requests. Processing is based on legal requirements or our legitimate business interests.

Cookies and Other Web Trackers – Terrapha Biotech LLP uses non-essential cookies only with your clear and affirmative consent, as required under Indian law. You may withdraw your consent at any time. Our website may also collect basic technical information (such as device or browser data) that does not directly identify you but helps us operate, secure, and improve the site and tailor content to your preferences. Most such data is collected automatically for our legitimate business purposes.

You may choose to accept or decline cookies. Declining cookies may affect certain website features. You can manage or disable cookies through your browser settings—refer to your browser’s Help menu for instructions.

Use of Data for Marketing – We do not sell or share your Personal Data with non-affiliated entities for direct marketing without your explicit consent. We may send you marketing communications about products or services that may interest you, either based on your consent or, where permitted by law, our legitimate business interests. We also work with advertising partners, including third-party and social media companies, who may use cookies or similar technologies to serve relevant ads. Where required by law, such advertising will only occur with your consent.

Information Sharing / Recipients of Personal Data

We may share your Personal Data with Terrapha Biotech’s global affiliates, who will use it for the same purposes as us. We may also share it with third parties, including service providers, regulators, governments, law enforcement, advisors, and auditors, for purposes such as:

• Supporting business transactions;
• Maintaining our websites and platforms;
• Facilitating mergers, reorganizations, or financial arrangements;
• Complying with legal or regulatory requests;
• Conducting audits or addressing complaints or security threats.

International Transfers of Your Personal Data – All international transfers are conducted using appropriate safeguards such as Standard Contractual Clauses (EU), UK IDTA, contractual protections, and industry-standard security measures. Any such transfer will be conducted in compliance with applicable law.

If your Personal Data is covered by the GDPR: Under the Digital Personal Data Protection Act, 2023 and IT Act, 2000, personal data may be transferred outside India in compliance with Section 16 of the DPDPA 2023 and applicable safeguards (e.g., Standard Contractual Clauses, UK IDTA, or DPDPA framework). Terrapha Biotech ensures international recipients maintain adequate data protection. Personal data is never sold or traded; sharing occurs only for legitimate business, regulatory, or operational purposes.

Links to Other Websites – Our Service may include links to third-party websites. We are not responsible for their content, privacy policies, or practices. We recommend reviewing the privacy policy of any site you visit.

Retention / Storage Period of Your Personal Data – We retain personal information only as long as necessary to fulfill the purposes for which it was collected, in line with applicable laws, regulations, and our retention policies, or until you withdraw consent (where applicable). In determining retention periods, we consider the nature and sensitivity of the data, potential risks, processing purposes, your permissions, and legal requirements.

Your Rights

Under data privacy laws, you may:

• Access the personal information we hold;
• Request corrections or deletion;
• Restrict or object to processing;
• Withdraw consent (where processing is consent-based);
• Request transfer of your data in a machine-readable format;
• Complain to your local data protection authority.

To exercise your rights, contact us as described in the ‘Contact Us’ section. Note: erasure or restriction applies only if processing is based on consent or legitimate interest. Withdrawal of consent does not affect the lawfulness of prior processing. We may retain a copy of your data for record-keeping and to prevent re-entry into our systems

Data Security – No system is completely secure. Terrapha Biotech, its service providers, and partners take reasonable measures to protect Personal Data from loss, misuse, or unauthorized access. However, we make no guarantees and disclaim liability for breaches or damages beyond our reasonable control. Users are advised to take precautions when submitting Personal Data.

Notification of Breach – Data breaches will be notified as per DPDPA, CERT-In Rules, and other applicable international laws. Not only the customers, but the data processors will also have to notify the controllers, the moment they get to know there is a breach.  Processors must notify Terrapha immediately upon discovering a breach.

Updates to This Privacy Notice – From time to time, we may revise this Privacy Notice. Any such changes to this Privacy Notice will be reflected on this page. Terrapha Biotech recommends that you review this Privacy Notice regularly for any changes. The date on which this notice was last revised is located at the top of this notice

Contact Us 

Grievance Officer (Mandatory under IT Rules 2011 and DPDPA 2023):

Name: Ashish Vadgama

Designation: Executive Director

Email: grievances@terrapha.com

The Grievance Officer will acknowledge and respond to complaints within the statutory timelines.