Privacy notice
Who we are
SupplierPharma is run by Vishal Gangwani as a sole trader, who is the data controller for the personal data described here. You can contact us about privacy at support@supplierpharma.com.
What we collect
When you request a supplier verification we collect:
- your email address;
- your country, the type of organisation you represent and, if you give it, its name;
- the supplier name or GSTIN you ask about, and the purpose you give for the check.
To stop abuse of the form we also keep a one-way hash of your IP address for up to 24 hours. The hash uses a key that changes daily, and we never store the IP address itself.
We do not set cookies. We do not ask for, and do not want, health information or details about individual patients.
How we measure visits
We count visits with our own simple logging, not a third-party analytics service. For each page view we record the page address (without anything after a question mark), the country your connection comes from, the website that linked to us if any, whether you are on a phone, tablet or computer, and any campaign tags in the link. We also count when someone scrolls most of the way through a guide, searches the directory or sends a verification request, without recording what was searched or written.
We do not store your IP address, your browser details, a cookie or any identifier, so we cannot tell visits from the same person apart. To prevent abuse we briefly use a one-way hash of your IP address, with a key that changes daily, and delete it within an hour. If your browser sends a Do Not Track or Global Privacy Control signal, we record nothing. Our lawful basis is legitimate interests: understanding which pages are useful so we can improve the service.
Why we use it and our lawful basis
We use these details to carry out the check you asked for and to reply to you. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): providing a verification service that you have requested, and keeping the service free of abuse. We do not use your details for marketing and we do not pass enquiries to suppliers.
Who can see it
Only our team, plus the hosting and database providers that run this site on our behalf as processors. Where a provider processes data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Addendum.
How long we keep it
Verification requests are deleted automatically 12 months after they are submitted. Visit records are deleted after 13 months. Scheduled database jobs remove both every day.
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected (rectification);
- have your data deleted (erasure);
- restrict how we use it;
- object to our use of it, including on the basis of legitimate interests;
- receive it in a portable format (portability).
To use any of these rights, email support@supplierpharma.com from the address you used with us. We will reply within one month.
Complaints
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Corrections and takedown requests
Supplier profiles contain business-registration data only. If you believe a profile is wrong, or that it includes personal data it should not, follow our corrections policy.