Effective Date: 24 August 2026

Last Updated: 24 August 2026

SUBHAG HealthTech Private Limited ("SUBHAG HealthTech", "we", "us", or "our") operates shop.subhag.in ("Website"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or use our Website, create an account, place an order, request a demonstration, submit an enquiry or quotation request, contact us, or otherwise interact with our services.

This Privacy Policy should be read together with our Terms and Conditions, Shipping Policy, Refund and Cancellation Policy, Warranty Policy, and other applicable policies published on the Website.

Where applicable, we process personal data in accordance with applicable Indian data protection and privacy laws, including the Digital Personal Data Protection Act, 2023 and applicable rules, notifications, and amendments.

1. Information We Collect

Depending on how you interact with the Website, we may collect information that you provide directly to us, information generated through your use of the Website, and information received from service providers or other lawful sources.

1.1 Account and Contact Information

• Full name
• Email address
• Mobile number
• Account/login information
• OTP verification information
• Communication preferences

1.2 Business and Professional Information

Where relevant to a product enquiry, demonstration, quotation, procurement request, or business relationship, we may collect:

• Clinic or hospital name
• Professional role or designation
• City and business location
• Organisation information
• Procurement requirements
• GST or business information where required for invoicing
• Information provided in enquiry, quotation, or demonstration forms

1.3 Billing and Delivery Information

For order fulfilment, invoicing, delivery, and repeat purchases, we may collect:

• Recipient name
• Clinic, hospital, company, or organisation name
• Billing address
• Shipping address
• Landmark
• City
• State
• Country
• PIN or ZIP code
• Mobile number
• Address type
• GST and tax information where applicable

1.4 Order and Transaction Information

When you place an order, we may collect and maintain:

• Order ID
• Products purchased
• SKU and product information
• Quantity
• Order value
• Discounts and applicable charges
• GST and tax information
• Payment status
• Transaction or payment reference information
• Invoice information
• Delivery information
• Shipment and AWB information
• Return, refund, cancellation, or replacement information

1.5 Enquiry and Communication Information

If you contact us or request a service, we may collect:

• Your message or enquiry
• Product interests
• Demo preferences
• Procurement requirements
• Quotation requirements
• Communication history
• Information provided through email, telephone, WhatsApp, forms, or other authorised communication channels

1.6 Technical and Usage Information

We may automatically collect certain information when you use the Website, including:

• IP address
• Browser type and version
• Device type and information
• Operating system
• Pages visited
• Referring URL
• Date and time of access
• Website interaction information
• Cookies and similar technologies
• UTM parameters and marketing source information where available

2. Purpose of Processing

We may use personal information for purposes including:

• Creating and managing customer accounts
• Verifying email addresses and mobile numbers
• Sending OTPs and account-security notifications
• Processing and fulfilling orders
• Processing payments and payment reconciliation
• Generating invoices and maintaining accounting records
• Arranging shipment and delivery
• Providing shipment tracking
• Processing cancellations, returns, replacements, and refunds
• Processing repeat orders and reorders
• Managing saved delivery addresses
• Responding to enquiries and support requests
• Arranging product demonstrations and training
• Preparing quotations and procurement responses
• Providing technical and after-sales support
• Managing warranty and service requests
• Preventing fraud, abuse, duplicate transactions, and unauthorised activity
• Maintaining business and transaction records
• Improving our Website, products, and services
• Analysing Website usage and performance
• Maintaining Website and information-security controls
• Complying with applicable legal, tax, accounting, regulatory, and contractual requirements

3. Legal Basis and Consent

Depending on the nature and purpose of processing, we may process personal data where permitted or required under applicable law, including where necessary to provide a service requested by you, fulfil an order or contract, comply with a legal obligation, protect our legitimate business interests, prevent fraud or misuse, or where you have provided consent.

Where processing is based on consent, we will provide an appropriate mechanism for providing and, where applicable, withdrawing consent.

Withdrawal of consent will not affect processing that we are otherwise permitted or required to carry out under applicable law.

4. Account and OTP Verification

We may use email or mobile OTP verification to confirm account ownership, verify contact information, protect accounts, reduce fraudulent activity, and complete specific Website actions.

OTP delivery may be handled through authorised third-party communication providers.

You are responsible for keeping OTPs, passwords, and account credentials confidential and should not share them with another person.

5. Saved Addresses

If you choose to save a delivery address to your account, we may retain that address to make future purchases and reorders easier.

You may update or delete saved addresses through your account where such functionality is available.

You are responsible for ensuring that saved addresses remain accurate and current.

6. Payment Information

Payments may be processed through third-party payment gateways, banks, UPI providers, payment processors, or other authorised payment service providers.

We generally do not store complete payment card numbers, CVV information, passwords, UPI PINs, or other sensitive payment credentials on our own systems unless specifically required and lawfully permitted.

Payment providers may independently process payment information in accordance with their own privacy policies, terms, and applicable laws.

7. Order Processing and Internal Systems

When an order is placed, relevant order information may be made available to authorised personnel responsible for payment verification, order processing, invoicing, packing, dispatch, shipping, customer support, warranty, and after-sales service.

Order information may also be transmitted to authorised internal business systems used for operational processing, reporting, customer support, and order management.

8. Google Sheets and Business Integrations

For internal order management, reporting, operational processing, reconciliation, and failed-order recovery, certain information may be transmitted to internal business systems, including Google Sheets through a configured webhook, API, automation, or integration.

Information transmitted may include customer information, order information, product information, payment status, order status, shipping information, and technical or failure information necessary for operational processing.

Such information may be processed by the relevant service provider subject to its applicable terms, privacy practices, and contractual arrangements.

9. Shipping and Logistics Providers

For order fulfilment and delivery, relevant information may be shared with Delhivery or another logistics provider selected for your order.

This may include:

• Name
• Mobile number
• Delivery address
• Order or reference number
• Shipment details
• AWB or tracking information

10. Shipment Tracking

Where shipment tracking is available, we may receive information such as shipment creation, pickup, transit, out-for-delivery, delivery, delivery exception, failed delivery, and return-to-origin status.

Tracking information may be displayed through your account, order history, tracking page, or communications sent to you.

11. Cookies and Similar Technologies

We may use cookies, pixels, local storage, analytics tools, and similar technologies to:

• Keep you signed in
• Maintain your shopping cart
• Remember preferences
• Improve Website functionality
• Maintain Website security
• Understand Website usage
• Measure marketing performance
• Improve user experience

You may control certain cookies through your browser or device settings, and through the cookie banner on this Website. Disabling certain technologies may affect Website functionality.

12. Marketing Communications

Where permitted by applicable law and where required consent has been obtained, we may contact you regarding:

• Products
• Offers and promotions
• Product demonstrations
• Webinars and training
• Educational resources
• Product updates
• Services and business updates

You may opt out of promotional communications through the available unsubscribe mechanism or by contacting us.

Transactional communications such as order confirmations, payment updates, shipment notifications, account-security messages, and important service communications may continue where necessary to provide the requested service or comply with applicable obligations.

13. Data Sharing

We do not sell personal information as a standalone product.

We may disclose or provide access to personal information where reasonably necessary to authorised service providers, business partners, professional advisers, regulators, government authorities, or other parties for legitimate and lawful purposes.

These parties may include providers involved in:

• Payment processing
• Shipping and logistics
• Email and OTP communication
• Website hosting
• Cloud infrastructure
• CRM and customer support
• Analytics
• Order management
• Business automation
• Fraud prevention and security
• Legal, accounting, audit, and compliance services

14. Business Transfers

If SUBHAG HealthTech undergoes a merger, acquisition, restructuring, sale of assets, financing transaction, or similar business transaction, personal information may be transferred or disclosed as part of that transaction, subject to applicable law and appropriate safeguards.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or as required or permitted by applicable law.

Retention periods may depend on the type of information and may be influenced by:

• Customer-account requirements
• Order and transaction requirements
• Warranty and support requirements
• Accounting and tax requirements
• Legal and regulatory requirements
• Dispute resolution
• Fraud prevention
• Business recordkeeping

16. Data Security

We use reasonable technical, administrative, and organisational measures designed to protect personal information against unauthorised access, misuse, alteration, disclosure, loss, or destruction.

Security measures may include access controls, authentication, restricted employee access, system monitoring, secure communications, backups, and other safeguards appropriate to the nature of the information.

However, no internet transmission, website, cloud system, or electronic storage method can be guaranteed to be completely secure.

17. Data Breaches and Security Incidents

If we become aware of a personal-data breach requiring notification under applicable law, we will take appropriate steps to contain, assess, investigate, and respond to the incident and provide notifications where required by applicable law.

18. Patient Information

The Website is intended primarily for product sales, procurement, demonstrations, enquiries, and related business services.

Please do not submit patient-identifiable information through general Website forms, including:

• Patient names
• Patient identification numbers
• Medical records
• Clinical reports containing identifiable information
• Patient photographs
• Genetic or reproductive records identifying an individual
• Other patient-identifiable medical information

If a specific authorised process requires patient information, such information should only be provided through the designated process and in accordance with applicable law and instructions provided by SUBHAG HealthTech.

19. Children's Privacy

Our Website and products are primarily intended for adults, healthcare professionals, clinics, hospitals, laboratories, businesses, and other customers.

We do not knowingly seek to collect personal data from children for independent commercial use except where permitted and handled in accordance with applicable law.

20. Your Privacy Rights and Requests

Subject to applicable law, you may have rights relating to your personal data, including rights to access, correction, updating, deletion, withdrawal of consent, or other rights available under applicable law.

Requests may be subject to identity verification and applicable legal limitations.

We may retain certain information where required or permitted by law, for legal claims, accounting, tax, fraud prevention, security, dispute resolution, or other legitimate purposes.

21. Grievance and Privacy Requests

For privacy-related requests, complaints, or grievances, please contact our designated privacy or grievance contact:

SUBHAG HealthTech Private Limited

Privacy/Grievance Email: support@subhag.in

Phone: +91 9036 490 490

Registered Office: 63, Floor 2, A and B, Municipal Industrial Estate, Dainik Shivneri Marg, Worli, Mumbai, Maharashtra 400018, India

We will review and respond to privacy requests in accordance with applicable law and our internal procedures.

22. Third-Party Websites and Services

The Website may contain links to third-party websites, payment services, logistics services, social media platforms, analytics services, or other external services.

Third-party services operate under their own terms and privacy policies. We are not responsible for the privacy practices of independent third parties.

You should review the applicable third-party privacy policy before providing information directly to that third party.

23. International Processing

Certain technology, cloud, communication, analytics, payment, or business-service providers used by us may process information from locations outside India.

Where personal data is processed outside India, such processing will be subject to applicable law and any restrictions or safeguards that may apply.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, legal requirements, or regulatory requirements.

The updated version will be published on this page with a revised "Last Updated" date.

25. Contact Us

For privacy-related questions, requests, or complaints, contact:

SUBHAG HealthTech Private Limited

Email: support@subhag.in

Phone: +91 9036 490 490

Registered Office: 63, Floor 2, A and B, Municipal Industrial Estate, Dainik Shivneri Marg, Worli, Mumbai, Maharashtra 400018, India

Website: https://shop.subhag.in/