Privacy Policy & Data Protection

1 Data Fiduciary Identity & Scope

This privacy policy governs the processing of personal and business information by Phexal Healthcare Private Limited ("Phexal Healthcare", "we", "us", or "our"), functioning as a statutory B2B medical equipment supplier, distributor, and emergency critical care equipment rental organization. We hold valid registration under the Central Drugs Standard Control Organization (CDSCO Form MD-42 Registration No: UP/GHA/MD42/2026/000142) with principal operations at 762, Makanpur, Nyay Khand I, Indirapuram, Ghaziabad, Uttar Pradesh - 201014.

This policy applies to all prospective purchasers, institutional hospital administrators, biomedical engineers, healthcare professionals, and retail equipment renters interacting with us through our website (phexalhealthcare.com), quotation submission forms, WhatsApp communication desks, and telephone lines.

2 Categories of Data Collected (Lead Forms & RFQs)

When you request an instant quotation, initiate an inquiry, or order equipment via our website, we collect only the minimum required information to provide an accurate proforma invoice and organize logistical delivery:

• Contact Identifiers: Name of authorized contact person, designated department, and institution/clinic name.
• Communication Details: Mobile phone number / WhatsApp number and corporate or individual email address.
• Procurement Requirements: Equipment model, desired SKU, requested units, delivery location (city and postal code), and optional technical notes.
• Billing Identifiers (upon confirmation): Goods and Services Tax Identification Number (GSTIN) and billing address for statutory compliance with Indian tax law.

3 Patient Telemetry & Clinical Data Non-Retention Guarantee

4 Lawful Purpose & Consent (Digital Personal Data Protection Act 2023)

Under the Digital Personal Data Protection Act 2023 (DPDP Act) of India, data captured through our forms is processed based on your voluntary consent for specific, lawful purposes:

• Generating commercial proforma invoices and official quotations.
• Facilitating direct communication via WhatsApp or phone call to confirm equipment specifications and availability.
• Coordinating delivery, bedside installation, and biomedical calibration by certified technicians.
• Complying with statutory reporting requirements under CDSCO Form MD-42 and GST regulations.

You have the right to withdraw consent at any time by emailing us at info@phexalhealthcare.com. Upon withdrawal, your lead records will be scrubbed, except where retention is mandated by statutory taxation or medical device tracing regulations.

5 Data Security & Third-Party Non-Disclosure

We do not sell, rent, monetize, or trade prospective client data to any marketing aggregators. Form data is protected via HTTPS/TLS 1.3 in-transit encryption. Access to lead and customer records is restricted strictly to authorized sales and dispatch personnel with role-based authentication.

6 Data Principal Rights & Grievance Redressal Officer

In accordance with the DPDP Act 2023, data principals have the right to access a summary of their personal data, request correction of inaccurate data, and seek grievance redressal.