Privacy Policy

1

Who We Are

SDS Pharma Sourcing ("SDS Pharma", "we", "us", "our") is a B2B pharmaceutical ingredient sourcing platform operated from Vadodara, Gujarat, India. We operate the website accessible at sdspharma.com (the "Platform").

Our platform facilitates sourcing of Active Pharmaceutical Ingredients (APIs), Key Starting Materials (KSMs), Intermediates, Excipients, Fine Chemicals, and related pharmaceutical raw materials by connecting verified suppliers with pharma buyers.

SDS Pharma acts as an intermediary and sourcing facilitator. We are not a party to any transaction between buyers and sellers, but we do collect and process certain information to provide this service.

Registered Office: SDS Pharma Sourcing, Vadodara, Gujarat — 390001, India
Contact Email: info@sdspharma.com
Contact Phone: +91 98765 43210

2

Information We Collect

We collect different types of information depending on whether you are a buyer, a seller, or a visitor to our platform.

2.1 Information You Provide Directly

Buyers: Full name, company name, email address, mobile number, billing/shipping address, product inquiry details, and account credentials.
Sellers / Suppliers: Company name, legal entity name, GST/Tax ID, business registration number, year of establishment, website URL, product categories, certifications (GMP, ISO, etc.), factory and office addresses, primary contact details, and documents submitted during onboarding.
Contact Form: Name, email, phone number, company name, and message when you submit an inquiry through our contact page.
Account Credentials: Email address and hashed password for login and authentication purposes.

2.2 Information Collected Automatically

Browser type, operating system, IP address, and approximate geographic location.
Pages visited, time spent on pages, links clicked, and search queries entered on the platform.
Session data stored in cookies to maintain login state and preferences.
Referral source (how you arrived at our website).

2.3 Information from Third Parties

We may receive publicly available information about businesses from government databases, trade registries, or industry associations for the purpose of verifying supplier credentials.

3

How We Use Your Information

We use the information we collect for the following purposes:

Account Management: To create and manage your buyer or seller account, authenticate your login, and maintain your profile.
Sourcing Facilitation: To connect buyers' product inquiries with appropriate verified suppliers on our platform.
Seller Verification: To review and verify seller registrations, certifications, product listings, and business credentials before approval.
Order & Inquiry Processing: To manage product inquiries, quotation requests, sample requests, and order communications between parties.
Communication: To send transactional emails (OTP, order updates, inquiry alerts), platform notifications, and responses to your support queries.
Quality Assurance: To collect and store documentation (COA, MSDS, DMF) submitted by suppliers for quality verification purposes.
Platform Improvement: To analyse usage patterns and improve the platform's functionality, search, and user experience.
Legal Compliance: To comply with applicable laws, regulations, and government requirements in India including GST regulations and data protection obligations.
Security: To detect, prevent, and investigate fraudulent activity, unauthorised access, or violations of our Terms of Service.

Marketing Communications: We do not send promotional or marketing emails without your consent. You can opt out of any non-transactional communications at any time by contacting us at info@sdspharma.com.

4

Information Sharing & Disclosure

SDS Pharma does not sell, rent, or trade your personal information to any third party for marketing purposes. We share information only in the limited circumstances described below.

4.1 Between Buyers and Sellers (Platform Facilitation)

When a buyer submits a product inquiry or request for quotation, their name, company name, and contact details are shared with the relevant seller(s) to enable direct business communication. Similarly, seller product details, company profile, and contact information are visible to registered buyers on the platform.

4.2 With Our Team

Our internal sourcing and verification team at Vadodara may access your information to review registrations, verify credentials, process inquiries, and provide customer support. Access is restricted to authorised personnel only.

4.3 Legal & Regulatory Requirements

We may disclose your information to government authorities, courts, or law enforcement agencies when required to do so by law, court order, or valid legal process under applicable Indian law.

4.4 Business Continuity

In the event of a merger, acquisition, or sale of all or part of our business assets, user information may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

5

Data Security

We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These include:

All passwords are stored using industry-standard one-way hashing (bcrypt) — we never store passwords in plain text.
All sensitive data transmissions are protected using HTTPS/SSL encryption.
Database access is restricted to authorised server-side processes only.
OTP-based email verification is used for seller account creation.
Admin, buyer, and seller portals are access-controlled with separate session management.

While we take reasonable security measures, no system is completely immune to risk. You are responsible for maintaining the confidentiality of your login credentials. Contact us immediately if you suspect unauthorised access to your account.

6

Cookies & Tracking

Our platform uses cookies and similar technologies for the following purposes:

Session Cookies: Required to keep you logged in during your session on the platform. These expire when you close your browser.
Remember Me Cookies: If you choose "Remember Me" at login, a cookie stores your email for up to 30 days so you don't have to re-enter it.
Preference Cookies: To remember your filter and search preferences on the Products page.

We do not currently use third-party advertising cookies or tracking pixels. You may disable cookies via your browser settings, but doing so may affect the functionality of the platform, including your ability to stay logged in.

7

Data Retention

We retain your information for as long as it is necessary to provide our services and to comply with our legal obligations:

Active Accounts: Data is retained for the lifetime of your account on the platform.
Deleted/Closed Accounts: We retain basic account records for a period of 3 years after account closure for compliance and dispute resolution purposes.
Inquiry & Order Records: Business transaction records (inquiries, quotations, orders) are retained for 7 years in accordance with Indian financial and tax record-keeping requirements.
Contact Form Submissions: Retained for 2 years unless you request earlier deletion.
OTP Records: Deleted or marked used immediately after successful verification; expired unused OTPs are purged after 24 hours.

8

Your Rights

As a user of the SDS Pharma platform, you have the following rights regarding your personal data:

Access: Request a copy of the personal information we hold about you.
Correction: Request correction of any inaccurate or outdated information in your profile.
Deletion: Request deletion of your account and associated personal data, subject to retention obligations described in Section 7.
Portability: Request your data in a structured, machine-readable format where technically feasible.
Opt-Out: Opt out of non-transactional communications at any time.
Complaint: Lodge a complaint with the appropriate data protection authority in India.

To exercise any of these rights, please contact us at info@sdspharma.com or call +91 98765 43210. We will respond to all requests within 30 days.

9

Third-Party Links

Our platform may contain links to supplier websites, regulatory body websites, or other external resources. These third-party sites have their own privacy policies, and we have no control over their content or practices. We are not responsible for the privacy practices of any third-party website.

We encourage you to review the privacy policies of any external website you visit through links on our platform.

10

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or platform features. When we make material changes, we will:

Update the "Last Updated" date at the top of this page.
Notify registered users via email for significant changes that affect their rights.
Post a notice on the platform for 30 days after significant changes.

Your continued use of the SDS Pharma platform after changes are posted constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you should discontinue use of the platform and may request account deletion.

11

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please reach out to us:

Email: info@sdspharma.com
Phone / WhatsApp: +91 98765 43210
Address: SDS Pharma Sourcing, Vadodara, Gujarat — 390001, India
Business Hours: Monday–Friday: 9:00 AM – 7:00 PM | Saturday: 9:00 AM – 2:00 PM (IST)