Privacy Policy
1. Who we are
This website is operated by Swanya Pharmaceuticals Pvt Ltd ("Swanya", "we", "us"), a sterile liquid pharmaceutical manufacturer located in Baddi, Himachal Pradesh, India. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Swanya is the Data Fiduciary for personal data processed through this website.
2. Data we collect
We collect personal data only when you choose to provide it or when it is generated by your use of the site:
- Enquiry and quotation forms — name, company, work email, phone / WhatsApp number, enquiry type, product of interest and your message.
- Career applications — name, email, phone, position applied for, experience, location, cover note and your CV file (PDF/Word).
- Product enquiries — the same fields as the enquiry form, plus the product page you came from.
- Technical data — IP address, browser type, device, pages visited, referring URL and approximate location, collected through server logs and analytics (see section 4).
- WhatsApp, phone and email — if you contact us through those channels, the information you share and the metadata of the conversation.
We do not knowingly collect data from children under 18, and this website is not directed at them.
3. Purpose and legal basis
We process your data for the following purposes, on the basis of your consent (given when you submit a form or accept cookies) or for legitimate uses permitted by the DPDP Act:
- Responding to enquiries, preparing quotations and arranging site visits.
- Evaluating job applications and communicating about recruitment.
- Running, securing and improving the website, including preventing spam and abuse (honeypot fields, rate limiting, optional reCAPTCHA).
- Measuring site usage in aggregate through analytics.
- Complying with legal obligations, including pharmaceutical regulatory requirements.
We do not sell personal data, and we do not use it for automated decision-making that produces legal effects.
4. Cookies and analytics
This site uses a small number of cookies and similar technologies:
- Strictly necessary — session and security cookies required for forms and rate limiting. These cannot be switched off.
- Analytics — Google Tag Manager and Google Analytics 4 (GA4) set cookies such as
_gato measure visits, pages viewed and interactions such as form submissions, PDF downloads and WhatsApp/phone clicks. IP addresses are anonymised where the tool permits.
You can block or delete cookies in your browser settings; the site will continue to work, but some conveniences may be unavailable.
5. Third-party services
- Google Analytics 4 / Google Tag Manager — usage measurement. Google may process data outside India in accordance with its own privacy policy.
- Google Maps — the map on our Contact page loads only when you click "Load map"; at that point Google receives your IP address and browser information.
- Google Fonts — typefaces are loaded from Google's servers, which receive your IP address.
- WhatsApp (Meta) — if you use the WhatsApp button, your conversation is subject to WhatsApp's terms and privacy policy.
- Email delivery — form submissions are sent to our staff via an SMTP email provider.
- Hosting — the website and its submission records are hosted with TODO: hosting provider & region.
We share personal data with these processors only as needed to provide the service, and never for their own marketing.
6. Retention
- Enquiry and quotation data — retained for up to 3 years from the last contact, or longer if a business relationship follows.
- Career applications and CVs — retained for 12 months after the position closes, unless you ask us to delete them earlier or you are hired.
- Server logs — retained for up to 90 days for security purposes.
- Analytics data — retained according to the GA4 setting in force (currently 14 months).
7. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you and how it has been processed.
- Correct, complete or update inaccurate or incomplete data.
- Erase your data where it is no longer necessary for the purpose it was collected for.
- Withdraw consent at any time, without affecting processing done before withdrawal.
- Grievance redressal through the officer named below, and thereafter the Data Protection Board of India.
- Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
To exercise any right, email the grievance officer with "Data request" in the subject line. We respond within the time limits prescribed by law.
8. Security
The site is served over HTTPS. Form submissions are validated and rate-limited on the server, stored in access-controlled storage and forwarded by email only to the staff who need them. CV files are checked for type and size and stored outside the public web root. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we review our controls regularly.
9. Grievance officer
In accordance with the DPDP Act and the Information Technology Act, 2000, the grievance officer for this website is:
Name: TODO
Designation: TODO
Email: info@swanyapharma.com
Address: Swanya Pharmaceuticals Pvt Ltd, Baddi, Himachal Pradesh, India
10. Changes to this policy
We may update this policy to reflect changes in law or in the services we use. The "last updated" date at the top of the page shows the current version; material changes will be highlighted on this page.