Tryzone Lifecare Pvt. Ltd. is the data fiduciary for the personal data described on this page. This policy covers this website only. It is written to meet the Digital Personal Data Protection Act 2023, the Information Technology Act 2000 and the Reasonable Security Practices Rules 2011 made under it.
The short version: this site collects what you type into one of its two forms, and almost nothing else. There is no advertising network on it, no analytics or tracking script, and nothing here is sold to anybody.
What We Collect
Only what a form asks for. There are two.
The enquiry form — on the Contact page, in the Contact section of the home page, and in the Enquire panel on a product page — asks for your name, your email address, your telephone number, a subject and your message.
The career application form asks for your full name, email address, telephone number, current location, years of experience, your CV as a file, and an optional covering message. It also records the role you applied for and that you ticked the consent box, because your consent is what allows us to keep the rest.
Beyond the forms, our web server keeps ordinary request logs — the IP address a request came from, the time, the page asked for, and the browser and operating system reported. These are the technical records any web server keeps, and we use them to keep the site running and secure.
We do not ask for, and ask that you do not send, health or clinical details, government identifiers, bank or card details, or any password.
Why We Collect It
- To answer your enquiry, and to carry on the conversation it starts.
- To assess a job application, and to contact you about it.
- To keep a record of business correspondence, which we are entitled and in some cases required to keep.
- To keep the site available, diagnose faults and investigate misuse or attack.
- To meet an obligation the law places on us, or to answer a lawful request from a regulator or a court.
We do not use anything collected here to build a profile of you, and we do not use it for automated decision-making.
Our Grounds for Processing
For both forms, the ground is your consent, given by choosing to submit the form — and on the application form, by ticking the consent box as well. You can withdraw that consent at any time by writing to the mailbox at the foot of this page. Withdrawing it does not undo processing that has already lawfully happened.
For server logs and for the security of the site, the ground is our legitimate interest in operating it safely, and where records must be retained, our legal obligation to keep them.
Cookies
This site sets one first-party cookie of its own. It holds your session and the token that protects the forms against cross-site request forgery — without it a form submission cannot be verified as genuine. It is strictly necessary, carries no advertising identifier, and expires when the session does.
There is no analytics cookie, no advertising cookie and no third-party tracker on this site. Any cookie set by an embedded map is the third party's, not ours — see the section below.
Third Parties This Site Reaches
Two, and both are named here because loading a page contacts them.
- Bunny Fonts (fonts.bunny.net) serves the two typefaces the site is set in. It receives the request your browser makes for a font file. It is used in place of a font service that logs and profiles, and it states that it does not log IP addresses or set cookies.
- Google Maps supplies the map embedded at the foot of the Contact page. When that map loads, Google receives your IP address and may set its own cookies, under its own privacy policy. The map is on that one page only, and it loads lazily — it is not fetched unless you scroll to it.
Our hosting provider processes data on our behalf in order to serve the site, under an agreement that holds it to confidentiality and to using the data for nothing else.
Who Else Sees Your Data
Inside the company, only the people who need it: an enquiry goes to the team that can answer it, and an application goes to the people recruiting for that role.
Outside it, nobody — with three exceptions. A service provider acting on our instructions and bound to confidentiality, such as our host or our email provider. A regulator, an auditor or a court, where the law requires us to disclose. And a successor, if the business or a part of it is ever transferred, in which case this policy travels with the data.
We do not sell personal data. We do not rent, trade or share it for anyone else's marketing.
How Long We Keep It
- Enquiries: for as long as the enquiry is live, and then as part of our business correspondence records for up to three years.
- Applications and CVs: up to one year from the date you apply, so that we can come back to you if a suitable role opens. Longer only if you ask us to.
- Server logs: a short rolling window, kept for security and troubleshooting and then overwritten.
When a retention period ends, the record is deleted or anonymised. Where a longer period is required by law — tax, company or drug regulation — that requirement takes precedence, and we keep only what it obliges us to keep.
Where Your Data Is Held
The site and its data are hosted in India. If that ever changes, or if a provider processes data outside India, we will make sure the transfer is permitted under the DPDP Act and that the data is protected to the same standard.
How We Protect It
The site is served over HTTPS, so what you type into a form is encrypted in transit. Form submissions are validated and protected against cross-site request forgery. Uploaded CVs are stored outside the public web root under a generated filename, so no CV is reachable by guessing a URL. Access to the database and to stored files is limited to authenticated administrators.
No system is perfectly secure, and we will not claim otherwise. If a breach affects your personal data we will act on it and notify you and the Data Protection Board as the DPDP Act requires.
Your Rights
Under the DPDP Act you may:
- ask what personal data of yours we hold, and why;
- ask us to correct it if it is wrong, or complete it if it is partial;
- ask us to erase it, where we are not required to keep it;
- withdraw a consent you have given, at any time;
- nominate someone to exercise these rights on your behalf if you are unable to;
- complain to us, and if we do not resolve it, to the Data Protection Board of India.
Write to the mailbox below and we will respond within a reasonable period and in any case within the time the law allows. We may need to verify who you are first — that check protects your data from someone asking for it in your name.
Children
This site is not directed at children, and neither form is intended for anyone under 18. We do not knowingly collect a child's personal data. If you believe a child has sent us something, write to us and we will delete it.
Reporting a Side Effect
If you contact us about a suspected adverse reaction to one of our products, we have a legal duty in pharmacovigilance to record and assess it, and to report it to the regulator. Doing so may mean sharing the details of the report — including relevant health information — with the authorities. That duty overrides a request to erase the report, and we keep such records for as long as the drug regulations require.
Changes to This Policy
When our practices change, this page changes with them, and the date above is updated. If a change materially affects how we treat data you have already given us, we will take reasonable steps to tell you rather than relying on you noticing.
Contact and Grievances
For any question about this policy, to exercise one of the rights above, or to raise a grievance, write to the Grievance Officer using the details below. Please put "Privacy" in the subject line so it reaches the right desk quickly.