Last updated: 17 August 2026
This policy explains what personal information [[ADD — registered legal entity name]] ("OrbitPharma", "we", "us") collects when you use this website or contact us, why we collect it, and what rights you have over it. It is written to align with the Digital Personal Data Protection Act, 2023.
1. Information we collect
We only collect what we need in order to answer you and supply equipment.
Information you give us
- Your name, phone number, and email address, when you submit the enquiry form or message us on WhatsApp.
- The product category you are interested in, and anything you write in the message field.
- Delivery address and, where applicable, the name of the patient or facility the equipment is for, once an order proceeds.
- Documents you choose to send us — for example a prescription or sleep study report — so that we can recommend the correct device and settings.
Information collected automatically
- This site loads fonts from Google Fonts. That request transmits your IP address and browser details to Google, which is governed by Google's own privacy policy.
- Our hosting provider keeps standard server logs (IP address, page requested, timestamp) for security and reliability.
We do not run advertising or tracking cookies of our own on this site. If that changes, we will update this policy and ask for your consent first.
A note on health information. A prescription, sleep study, or description of a patient's condition is sensitive. We use it only to recommend and configure the correct equipment, we share it only as described in section 3, and we do not use it for marketing. You can ask us to delete it at any time.
2. Why we use it, and on what basis
- To respond to your enquiry and prepare a quotation — this is the purpose for which you give us your details.
- To fulfil an order — delivery, installation, demonstration, and training at your premises.
- To provide service — warranty claims, repairs, spare parts, consumable refills, and annual maintenance contracts.
- To meet legal obligations — invoicing, tax records, and any record-keeping required of a medical device distributor.
We ask for your consent when you submit the form, and you can withdraw it at any time by writing to us. Withdrawing consent does not affect processing already carried out, and we may still need to keep records that law requires us to keep.
3. Who we share it with
We do not sell your personal data, and we do not share it for anyone else's advertising. We share it only with:
- Delivery and logistics partners — the name, address, and phone number needed to deliver.
- Manufacturers and authorised service centres — where a warranty claim, repair, or device registration requires it.
- Our technicians — the contact and site details needed to install and demonstrate the equipment.
- Our accountant, auditor, and payment provider — for invoicing and statutory records.
- Authorities — where we are legally required to disclose, or where disclosure is necessary to protect someone's safety.
4. How long we keep it
- Enquiries that do not become orders: up to 24 months, then deleted.
- Order, invoice, and warranty records: for as long as tax and medical device record-keeping rules require, currently eight years.
- Clinical documents you send us: deleted once the device is configured and the warranty period ends, or sooner on request.
5. Your rights
Under the Digital Personal Data Protection Act, 2023 you may:
- Ask what personal data of yours we hold and how we have used it.
- Ask us to correct or complete anything inaccurate.
- Ask us to erase your data, where we are not required to keep it.
- Withdraw consent you previously gave.
- Nominate someone to exercise these rights on your behalf if you are unable to.
- Raise a grievance with us, and escalate to the Data Protection Board of India if we do not resolve it.
Write to our Grievance Officer, [[ADD — grievance officer name]], at hello@orbitpharma.in. We will respond within 30 days.
6. Security
We restrict access to enquiry and order data to the staff who need it, and we keep it on password-protected accounts and devices. No system is perfectly secure, but if a breach affects your data we will notify you and the Data Protection Board as required.
7. Children
This site is intended for adults arranging equipment for themselves, a patient, or a facility. We do not knowingly collect data directly from anyone under 18. Where equipment is for a child, we expect a parent or guardian to be the one contacting us.
8. Changes to this policy
If we change how we handle personal data, we will update this page and change the "last updated" date above. Material changes will be communicated directly to customers with an open order.
How to reach us
For any question about this policy, or to exercise a right described above, contact us: