# PRIVACY POLICY
## 1. INTRODUCTION
Welcome to SurgeStore.in ("Website"), operated by Jindal Medi Surge ("JMS", "Company", "we", "our", "us").
We are committed to protecting the privacy, confidentiality, and security of personal information entrusted to us by our customers, visitors, healthcare professionals, distributors, hospitals, clinics, business partners, and other users.
This Privacy Policy explains how we collect, use, store, disclose, transfer, and protect personal information when you access or use the Website, purchase products, contact us, or otherwise interact with our services.
By using the Website, you acknowledge that you have read and understood this Privacy Policy.
---
# 3. SCOPE OF THIS POLICY
This Policy applies to:
* Website visitors
* Customers
* Patients
* Healthcare professionals
* Surgeons
* Hospitals
* Clinics
* Dealers
* Distributors
* Vendors
* International customers
* Business partners
This Policy applies to information collected through:
* Website usage
* Product purchases
* Customer support communications
* Marketing interactions
* Email communications
* Social media interactions
* Business relationships
---
# 4. INFORMATION WE COLLECT
We may collect the following categories of information.
## A. Identity Information
* Full name
* Business name
* Professional title
* Hospital affiliation
* Medical registration details (where applicable)
* User account information
## B. Contact Information
* Email address
* Telephone number
* Mobile number
* Billing address
* Shipping address
## C. Transaction Information
* Order history
* Product purchases
* Payment status
* Delivery information
* Returns and refunds
## D. Technical Information
* IP address
* Browser type
* Device identifiers
* Operating system
* Website usage logs
* Session information
## E. Compliance Information
Where required by law or product restrictions:
* Prescriptions
* Professional licenses
* Hospital authorizations
* Regulatory approvals
* Import documentation
## F. Communication Information
* Emails
* Customer support requests
* Feedback
* Product inquiries
* Survey responses
---
# 5. INFORMATION WE DO NOT INTENTIONALLY COLLECT
We do not intentionally request or require:
* Medical records
* Diagnostic reports
* Treatment records
* Sensitive patient information
unless voluntarily provided by users for support or regulatory purposes.
Users should avoid sharing unnecessary patient-identifiable information.
---
# 6. HOW WE COLLECT INFORMATION
Information may be collected through:
* Website forms
* Account registration
* Product purchases
* Customer support interactions
* Newsletter subscriptions
* Cookies
* Analytics tools
* Third-party integrations
* Business communications
Information may also be received from:
* Payment processors
* Logistics providers
* Regulatory authorities
* Business partners
* Authorized distributors
---
# 7. PURPOSES OF PROCESSING
We may process information for:
## Order Fulfillment
* Processing orders
* Shipping products
* Managing returns
* Providing customer support
## Account Management
* Creating user accounts
* Authentication
* Security monitoring
## Business Operations
* Inventory management
* Product improvement
* Internal reporting
* Compliance activities
## Marketing
* Product updates
* Promotional campaigns
* Educational content
Users may opt out of marketing communications at any time.
## Legal Compliance
* Regulatory obligations
* Tax compliance
* Product traceability
* Product recalls
* Fraud preventio
---
# 8. LEGAL BASIS FOR PROCESSING
Where required by applicable law, processing may be based on:
* User consent
* Contract performance
* Legal obligations
* Legitimate business interests
* Protection of legal rights
---
# 9. COOKIES AND TRACKING TECHNOLOGIES
The Website uses:
* Cookies
* Analytics tools
* Web beacons
* Pixels
* Similar tracking technologies
Users should review our Cookies Policy for detailed information.
Browser settings may allow management of cookie preferences.
---
# 10. DISCLOSURE OF INFORMATION
We may disclose information to:
### Service Providers
* Payment processors
* Logistics providers
* Hosting providers
* IT service providers
* Security vendors
### Business Partners
* Authorized distributors
* Manufacturers
* Suppliers
### Regulatory Authorities
Where legally required.
### Professional Advisors
* Lawyers
* Auditors
* Accountants
### Corporate Transactions
In connection with:
* Mergers
* Acquisitions
* Restructuring
* Asset sales
---
# 11. INTERNATIONAL DATA TRANSFERS
Because we serve customers worldwide, information may be transferred across national borders.
Information may be processed in countries where privacy laws differ from those in your jurisdiction.
By using the Website, you acknowledge and consent to such transfers where permitted by law.
---
# 12. DATA RETENTION
Information may be retained for as long as reasonably necessary for:
* Business purposes
* Regulatory compliance
* Tax requirements
* Legal claims
* Product traceability
* Warranty records (if applicable)
Retention periods may vary depending on applicable legal requirements.
---
# 13. DATA SECURITY
We implement commercially reasonable safeguards including:
* Access controls
* Encryption technologies where appropriate
* Secure hosting environments
* Monitoring systems
* Internal security procedures
However:
No website, server, network, database, software platform, or internet transmission can be guaranteed to be completely secure.
Users acknowledge and accept such risks.
---
# 14. USER RIGHTS
Subject to applicable law, users may have rights to:
* Access information
* Correct information
* Update information
* Request deletion
* Withdraw consent
* Restrict processing
* Object to processing
* Request portability
Certain requests may be limited by legal, regulatory, security, or operational requirements.
---
# 15. MARKETING COMMUNICATIONS
Users may receive:
* Product announcements
* Industry updates
* Promotional offers
* Educational content
Users may unsubscribe at any time using available opt-out methods.
Administrative and transactional communications may still be sent where necessary.
---
# 16. CHILDREN'S PRIVACY
The Website is not intended for children under 18 years of age.
We do not knowingly collect personal information from minors.
If such information is identified, reasonable efforts will be made to remove it.
---
# 17. THIRD-PARTY LINKS
The Website may contain links to third-party websites.
We do not control and are not responsible for:
* Privacy practices
* Security practices
* Content
* Products
* Services
of third-party websites.
Users access such websites at their own risk.
---
# 18. PRODUCT TRACEABILITY AND SAFETY
For medical device compliance and patient safety purposes, we may retain:
* Product identifiers
* Batch numbers
* Lot numbers
* Purchase records
* Distribution records
Such information may be used for:
* Product recalls
* Adverse event investigations
* Regulatory reporting
* Safety notifications
---
# 19. NO GUARANTEE OF ABSOLUTE PRIVACY
While we strive to protect information, we cannot guarantee:
* Absolute confidentiality
* Absolute security
* Continuous system availability
* Protection from all cyber threats
Users acknowledge that information transmission over the internet carries inherent risks.
---
# 20. LIMITATION OF LIABILITY
To the maximum extent permitted by applicable law:
Jindal Medi Surge, its affiliates, officers, directors, employees, contractors, suppliers, and agents shall not be liable for:
* Unauthorized access
* Data breaches
* Cyberattacks
* Service interruptions
* Technical failures
* Data loss
* Third-party actions
* Indirect damages
* Consequential damages
* Special damages
* Loss of profits
* Loss of business opportunities
Nothing in this Policy excludes liability that cannot legally be excluded under applicable law.
---
# 21. REGULATORY COMPLIANCE
We endeavor to comply with applicable privacy laws, including where relevant:
* India's Digital Personal Data Protection Act, 2023
* Information Technology Act, 2000
* GDPR
* UK GDPR
* CCPA/CPRA
* Other applicable privacy regulations
Compliance obligations may vary depending on jurisdiction and circumstances.
---
# 22. POLICY CHANGES
We reserve the right to amend, revise, replace, or update this Privacy Policy at any time.
Updated versions become effective upon publication on the Website unless otherwise required by law.
Continued use of the Website constitutes acceptance of the revised Policy.
---
By accessing or using the Website, you acknowledge that you have read, understood, and accepted this Privacy Policy.
