Legal & Data Governance

Privacy Policy & Data Security

Effective Date: January 1, 2026 | Compliant with Indian IT Act 2000, GDPR, and Pharmacovigilance Data Privacy Regulations.

1. Enterprise Commitment to Privacy

Evvai the Pharmachain ("Evvai", "We", "Us") is committed to preserving the confidentiality, security, and integrity of personal, commercial, and regulatory data collected through our enterprise web application and B2B distributor portal.

2. Data Collected & B2B KYC Information

To process wholesale orders and verify regulatory licensure under the Drugs and Cosmetics Act (1940), we collect:

  • Corporate Name, Registered Office Address, and GSTIN registration credentials.
  • Drug License Numbers (Form 20B / Form 21B) and statutory Pharmacist license copies.
  • Authorized contact details, billing transaction logs, and IP access logs for security audits.

3. Pharmacovigilance & Adverse Event Reporting

In compliance with WHO-GMP guidelines and Central Drugs Standard Control Organization (CDSCO) mandates, clinical adverse event data submitted to our Pharmacovigilance Desk is anonymized and strictly processed for drug safety monitoring and statutory submission to regulatory authorities.

4. Data Encryption & Access Controls

All data transmitted across our portals is protected using 256-bit SSL/TLS encryption. Role-based access controls (RBAC) ensure that financial and regulatory records are accessible solely by authorized enterprise administrators and compliance officers.

5. Contact Governance Officer

For privacy inquiries, audit log requests, or data protection queries, contact our Data Protection Desk at:
Email: privacy@evvaipharma.com | Tel: +91 (40) 2300-8800