Introduction

Saksham Innovations Private Limited ("Medgini", "we", "our", or "us") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you access or use our websites, mobile applications, and digital platforms, including www.medgini.com, the Medgini Chemist App, Cipla Prime+, and any other applications, portals, products, or services operated by Medgini (collectively referred to as the "Platform").

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, your personal information will be processed only with your consent or another lawful basis permitted by law.

Information We Collect

We may collect the following categories of personal information when you use the Platform or interact with us:

• Personal Information: Name, Email address, Mobile phone number, Business or organization name, Hospital, distributor, or chemist code, Postal or delivery address.
• Account Information: Username, OTP-based login information, Account preferences, Registration details.
• Business & Transaction Information: Uploaded invoices, Prescriptions (Rx), Purchase information, Loyalty points earned, Redemption history, Reward or gift delivery information.
• Customer Support Information: Customer enquiries, Complaint details, Survey responses, Feedback submitted by you.
• Communication Information: SMS communications, WhatsApp communications, Email communications, Marketing preferences.
• Technical Information: We automatically collect certain technical information, including: Device type, Device identifiers, IP address, Browser type, Operating system, App version, Usage logs, Cookies and similar technologies, Diagnostic and crash information.

How We Use Your Information

We use your personal information to:

• Create and manage your account.
• Verify your identity.
• Respond to customer support requests.
• Operate and improve the Platform.
• Process invoices, prescriptions, and other uploaded documents.
• Calculate and administer loyalty rewards and promotional campaigns.
• Deliver gifts, rewards, and promotional items.
• Personalize content and services.
• Send transactional communications.
• Send promotional emails, SMS, and WhatsApp communications where permitted by law or where you have provided consent.
• Detect security incidents, fraud, abuse, or unauthorized activity.
• Comply with applicable legal and regulatory obligations.
• Protect our legal rights and enforce our Terms of Use.

You may opt out of marketing communications at any time by following the unsubscribe instructions or contacting us.

Automated Processing and AI-Assisted Technologies

Certain documents uploaded to the Platform, including invoices and prescriptions, may be processed using automated technologies such as:

• Optical Character Recognition (OCR)
• AI-assisted document extraction
• Validation and fraud-detection tools

These technologies help verify uploaded documents, extract relevant information, improve processing accuracy, and identify potentially fraudulent submissions.

Where appropriate, significant account actions and reward decisions are subject to human review. We do not make decisions based solely on automated processing that produce legal or similarly significant effects without providing an opportunity for appropriate human review where required by applicable law.

Sharing of Personal Information

We do not sell your personal information.

We may share personal information only where necessary with:

• Cloud hosting and infrastructure providers.
• Technology service providers supporting our Platform.
• OCR and AI processing providers.
• SMS, email, and WhatsApp communication providers.
• Logistics and fulfilment partners delivering rewards or promotional items.
• Pharmaceutical companies or program sponsors associated with campaigns in which you voluntarily participate.
• Professional advisors, auditors, or consultants.
• Government authorities, regulators, law enforcement agencies, or courts where required by law.
• Successors in the event of a merger, acquisition, corporate restructuring, or sale of assets.

All third-party service providers are required to process personal information only for authorized purposes and to implement appropriate security measures.

International Data Transfers

Certain Medgini applications may support users outside India, including users located within the European Economic Area (EEA).

Where personal information is transferred internationally, we implement appropriate contractual, technical, and organizational safeguards in accordance with applicable law.

For users located in the EEA, we aim to comply with the General Data Protection Regulation (GDPR), including respecting applicable rights and ensuring lawful international data transfers.

Data Retention

We retain personal information only for as long as necessary to:

• Provide our services.
• Maintain active user accounts.
• Process rewards and transactions.
• Resolve disputes.
• Comply with legal, accounting, taxation, or regulatory obligations.

When personal information is no longer required, it is securely deleted, anonymized, or otherwise disposed of in accordance with our internal retention policies.

Data Security

We implement appropriate technical and organizational security measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

These measures include, where appropriate:

• Encryption of data during transmission.
• Access controls based on business need.
• Secure hosting environments.
• Firewalls and network security controls.
• Authentication and authorization mechanisms.
• Security monitoring and logging.
• Periodic security assessments and vulnerability testing.

While we take reasonable steps to safeguard personal information, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Breach Response

If a personal data breach occurs, we will investigate the incident, take appropriate measures to mitigate any impact, and notify affected individuals and applicable regulatory authorities where required by law.

Cookies and Similar Technologies

Our Platform may use cookies, local storage, SDKs, and similar technologies to:

• Maintain user sessions.
• Remember preferences.
• Improve Platform functionality.
• Measure usage and performance.
• Enhance user experience.
• Support analytics.

You may disable cookies through your browser or device settings. However, some Platform features may not function correctly if cookies are disabled.

Third-Party Links

The Platform may contain links to third-party websites or services.

We are not responsible for the privacy practices, security, or content of such third-party services. Users are encouraged to review the privacy policies of those websites before providing personal information.

Your Responsibilities

You are responsible for ensuring that the information and documents uploaded to the Platform are accurate, lawful, and that you have the necessary authority to submit them.

You should not upload personal information or confidential information belonging to another individual unless you are authorized to do so.

Your Rights

Subject to applicable law, you may have the right to:

• Access your personal information.
• Correct inaccurate information.
• Update your information.
• Delete your personal information.
• Withdraw consent where consent is the legal basis for processing.
• Restrict certain processing activities.
• Object to certain processing activities.
• Receive a copy of your personal information in a portable format where applicable.
• Opt out of marketing communications.

Users located in India may also have rights under the Digital Personal Data Protection Act, 2023 (DPDP Act).

Users located within the European Economic Area may have additional rights under the General Data Protection Regulation (GDPR).

Requests relating to privacy rights may be submitted using the contact details provided below.

Children's Privacy

The Platform is intended for business users, pharmacies, healthcare professionals, distributors, and other authorized users.

It is not directed toward individuals under the age of 18 years, and we do not knowingly collect personal information from children.

Applicable Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India.

Any disputes arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts in Hyderabad, Telangana, India, unless otherwise required under applicable law.

Where applicable, Medgini also complies with:

• Digital Personal Data Protection Act, 2023 (India)
• Information Technology Act, 2000 and applicable rules
• General Data Protection Regulation (GDPR) for applicable EEA users

Changes to this Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in legal requirements, business operations, technologies, or services.

The updated version will be published on this page together with the revised "Last Updated" date. Continued use of the Platform after publication constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal information, please contact us:

Saksham Innovations Private Limited (Medgini)
Website: https://www.medgini.com
Email: info@medgini.com

For privacy-related requests, please mention "Privacy Request" in the subject line of your email.