Privacy Policy
This page explains what information Pharma TPM collects when you use this website or send us an enquiry, why we collect it, who we share it with, how long we keep it, and what you can ask us to do about it.
01Who we are and what this covers
Pharma TPM is a B2B directory. We connect pharma, ayurvedic, nutraceutical and cosmetic marketing companies with third party manufacturers in India. We are not a manufacturer and we do not sell medicine.
This website is owned and operated by Pharmatpm, with its registered office at SCO 207, 2nd Floor, Sector 14, Panchkula - 134113, Haryana. In this policy, "we", "us" and "our" mean that entity. "You" means anyone who visits pharmatpm.com, sends an enquiry, or lists a manufacturing unit with us.
This policy applies to this website and to the enquiries you send us through it, over WhatsApp, or by phone and email. Under India's Digital Personal Data Protection Act, 2023, we act as the Data Fiduciary for the personal data described here — meaning we decide why and how it gets processed, and we are answerable for it.
The one-line version
You send us an enquiry, we pass it to manufacturers who can fulfil it, and they contact you. That sharing is the entire point of the service. Everything below explains it properly.
02Information we collect
We keep this deliberately small. If we do not need it to route your enquiry, we do not ask for it.
Information you give us
- Contact details — your name, mobile number, email address and company name, taken from our enquiry forms.
- Business requirement details — the dosage form, compositions, quantity, packing preference and location you tell us about. This is commercial information rather than personal data, but we treat it as confidential either way.
- Manufacturer listing details — if you list a unit with us: company name, plant location, contact person, licence and certification details, and the product list you want listed.
- Anything you write to us — the content of your emails, WhatsApp messages and enquiry notes.
Information collected automatically
- Technical data — IP address, browser type, device type, operating system and screen size.
- Usage data — pages you viewed, how you arrived here (search, ad, referral or direct), and how long you stayed.
- Cookie data — see section 7.
Please do not send us health information
This is a business-to-business platform. We have no reason to hold anyone's medical or health details, and we do not want them. Do not send us prescriptions, patient records, diagnoses or any information about an individual's health. If you send it anyway, we will delete it.
03How we collect it
- Enquiry forms on this website, including the quote form and the pop-up enquiry form.
- WhatsApp, when you message the number listed on this site. WhatsApp's own privacy terms apply to the message in transit; ours apply once it reaches us.
- Phone and email, when you contact us directly. Our team may write down what you told us so the enquiry can be routed.
- Cookies and analytics scripts, automatically as you browse.
- Advertising platforms, when you submit a lead form on an ad we have run.
04Why we use your information
Under the DPDP Act we must tell you the purpose before we process your data, and we may only use it for that purpose. Here is the full list.
| What we do | What we use | Basis |
|---|---|---|
| Route your enquiry to suitable manufacturers | Name, mobile, email, company, requirement details | Your consent, given when you submit the form |
| Call or message you back about your enquiry | Name, mobile, email | Your consent |
| Verify and list a manufacturing unit | Company details, licences, certifications, contact person | Your consent / performing the listing you asked for |
| Answer support questions and resolve complaints | Contact details, message history | Your consent / legitimate use |
| Keep the website working and secure | IP, device and usage data | Legitimate use |
| Understand which pages and campaigns work | Aggregated analytics data | Your consent for non-essential cookies |
| Send you offers or updates you asked for | Email, mobile | Your consent — opt out any time |
| Meet tax, accounting and legal obligations | Transaction and correspondence records | Legal obligation |
We do not sell your personal data. Sharing an enquiry with a manufacturer so they can quote you is not selling — no money changes hands for your contact details, and it only happens because you asked us to find you a manufacturer.
05Sharing your enquiry with manufacturers
This is the most important section on the page, so read it before you send an enquiry.
When you submit an enquiry, we share it with third party manufacturers listed with us whose licence, dosage form and capacity match what you asked for. What we pass on is your name, contact number, email, company name and the requirement you described.
We usually send it to more than one manufacturer, so you get competing quotes instead of a single take-it-or-leave-it rate. That means more than one unit may call you about the same enquiry. If you would rather we approach only one unit, or a specific unit, tell us in the enquiry notes or on the phone and we will follow that.
Once a manufacturer has your details
They become an independent Data Fiduciary for the copy of the data they hold. They use it under their own privacy practices, and their handling of it is their responsibility, not ours. We require listed manufacturers to use enquiry data only to respond to that enquiry — but we cannot police what a separate company does inside its own systems, and we will not pretend otherwise.
If a manufacturer contacts you in a way you did not ask for, tell us at [email protected] and we will take it up with them and, where it is warranted, remove them from the directory. To have your data erased from a manufacturer's records, you will need to ask that manufacturer directly — we can tell you who we shared it with so you know where to write.
About your composition list
Your compositions go to manufacturers so they can quote. We do not publish them, and we do not hand them to your competitors. But a composition is a generic molecule, not a trade secret — if a formulation is genuinely confidential to you, raise an NDA with the manufacturer before you share the detail. Do not rely on this policy for that protection.
06Other parties we share with
- Hosting and IT providers — the companies that run our servers, email and CRM. They process data on our instructions only.
- Analytics providers — such as Google Analytics, which receives usage data. See section 7.
- Advertising platforms — such as Google Ads and Meta, if you reached us through an ad or if we run remarketing.
- Professional advisers — accountants and lawyers, where they need the information to advise us.
- Authorities — where a court, regulator or law enforcement agency requires it under Indian law, or where we need to establish or defend a legal claim.
- A buyer or successor — if the business is sold or merged, your data may transfer as part of it. This policy would continue to apply until you are told otherwise.
08How long we keep your information
The DPDP Act says we must erase personal data once the purpose it was collected for is done, unless a law requires us to keep it. In practice:
- Enquiries that did not convert — kept for 24 months from your last contact with us, then deleted.
- Active client and manufacturer records — kept for as long as the relationship runs, and for 3 years after it ends.
- Accounting and tax records — kept for the period Indian tax law requires, currently at least 8 years for GST and income tax purposes.
- Analytics data — retained on the analytics platform for the period set there, typically 14 to 26 months.
- Marketing consent records — kept while you are subscribed, plus a record of your opt-out afterwards so we do not contact you again by mistake.
If you withdraw consent, we delete your data within a reasonable period, other than anything we are legally required to retain.
09How we protect your information
We use reasonable security safeguards appropriate to a business of our size: HTTPS encryption across the site, access controls so that only staff who need an enquiry can open it, password protection on our systems, and periodic review of who has access to what.
Being straight with you: no website can promise perfect security, and anyone who tells you otherwise is selling something. What we can promise is that if a personal data breach occurs, we will notify the Data Protection Board of India and every affected person, as the DPDP Act requires, and we will tell you what happened rather than quietly hoping you do not notice.
10Your rights
Under Chapter III of the DPDP Act, 2023, you have the following rights over your personal data. Exercising them is free and you do not need a reason.
To use any of these, write to our Grievance Officer at [email protected] with enough detail for us to find your record — the mobile number or email you used when you enquired is usually enough. We will respond within 30 days. We may ask you to verify your identity first, so that nobody else can access or delete your data by pretending to be you.
11Consent and how to withdraw it
When you submit an enquiry form, you are consenting to us using your details to find you a manufacturer and to contact you about it. That consent is specific to that purpose. We will not quietly reuse it for something else.
You can withdraw consent whenever you like:
- For marketing messages — use the unsubscribe link in any email, reply STOP to a WhatsApp message, or tell whoever calls you.
- For everything else — email [email protected] and say you are withdrawing consent.
Two honest caveats. Withdrawing consent stops future processing; it does not undo what was lawfully done while consent was in place. And if we have already forwarded your enquiry to a manufacturer, you will need to contact that manufacturer separately to have their copy deleted — we will tell you who they are.
12Children's data
This is a B2B service intended for businesses and for adults acting on their behalf. We do not knowingly collect personal data of anyone under 18, and we do not direct any advertising at children. If you believe a child has submitted data to us, write to [email protected] and we will delete it.
13Third-party websites and links
This site links out to manufacturer websites, our sister portals and other resources. Once you follow a link, you are on someone else's website, under their privacy policy, and we have no control over what they collect. We are not responsible for their practices. Read their policy before you hand over anything.
14Where your data is stored
Our servers and systems are located in India/Haryana/Panchkula. Some of our service providers — analytics and advertising platforms in particular — process data outside India on their own infrastructure. Where the DPDP Act or a Central Government notification restricts transfer to a particular country, we will comply with that restriction.
15What this website is not
Worth stating plainly, because it affects what you should expect from us.
- We are not a manufacturer. We do not make, stock, sell or dispatch any drug, and we do not hold a manufacturing licence.
- Nothing here is medical advice. The compositions and product information on this site are commercial reference material for pharma businesses, not guidance for treating anyone. Do not use this site to decide what medicine to take.
- Verification is not a guarantee. We check licences, GMP certificates and product lists before listing a unit. That is document verification, not an assurance of commercial performance, delivery timelines or product quality. Do your own due diligence before you place an order.
- Rates and MOQs on this site are indicative. They are not offers, and they are not binding on any manufacturer.
- We are not party to your contract. Any agreement you sign is between you and the manufacturer.
16Changes to this policy
We may update this policy when our practices change, or when the law does — the DPDP Act's rules are still being rolled out, so some of this will need revisiting. The "Last updated" date at the top of the page always reflects the current version. If a change materially affects how we use your data, we will do more than change the date quietly: we will notify you at the contact details we hold. Continuing to use the site after a change means you accept the updated policy.
17Grievance Officer and contact
The DPDP Act, 2023 and the Information Technology Act, 2000 require us to name someone you can complain to. That is our Grievance Officer, and every privacy question, rights request or complaint goes to them.
Grievance Officer
Write with enough detail for us to find your record — the mobile number or email you enquired with is usually enough.
If our Grievance Officer does not resolve your complaint to your satisfaction, you may escalate it to the Data Protection Board of India under the DPDP Act, 2023.
This policy is governed by the laws of India. Any dispute arising from it is subject to the exclusive jurisdiction of the courts at Panchkula.