Privacy Policy

1. Introduction
ATPL Care (operated by Arrowmind Trading Private Limited) operates the website https://www.atpl-care.com (the “Site”). We sell medical equipment and healthcare products to hospitals, healthcare facilities, and customers.
We respect your privacy and are committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, with whom we share it, and the rights you have.
By using our Site, placing an order, creating an account, or otherwise providing personal data, you acknowledge that you have read and understood this Policy.
2. Data Fiduciary
Arrowmind Trading Private Limited
Registered address: Ground Floor, S-129, Shop No. 1, Patparganj Road, Pandav Nagar, New Delhi, Delhi, India
Email for privacy queries: [Insert your email, e.g. privacy@atpl-care.com]
Phone: [Insert your phone number]
We act as the Data Fiduciary under the DPDP Act for the personal data we process.
3. Personal Data We Collect
We collect only the personal data that is necessary for the purposes described below. This may include:
   •    Identity and contact data: Name, email address, phone number, billing/shipping address, company name (for B2B orders).
   •    Account data: Username, password (hashed), order history, preferences (if you create an account).
   •    Transaction and order data: Products ordered, payment details (processed by third-party payment gateways – we do not store full card details), invoices, delivery information.
   •    Technical and usage data: IP address, browser type, device information, pages visited, time spent, referring URL, cookies and similar technologies.
   •    Communication data: Messages you send us via contact forms, email, WhatsApp, or phone.
   •    Other data: Any information you voluntarily provide (e.g., special delivery instructions).
We do not intentionally collect sensitive personal data beyond what is needed for order fulfilment. We do not knowingly collect personal data from children under 18 without verifiable parental consent.
4. How We Collect Personal Data
   •    Directly from you when you place an order, create an account, fill forms, or contact us.
   •    Automatically through cookies, analytics tools, and server logs when you browse the Site.
   •    From third parties (e.g., payment gateways, shipping partners) as necessary to complete transactions.
5. Purpose and Legal Basis for Processing
We process your personal data for the following specific purposes:
   •    Order processing and fulfilment (taking orders, payment processing, shipping, invoicing)
   •    Account management (creating and managing user accounts, order history)
   •    Customer support (responding to queries, resolving issues)
   •    Site improvement and analytics (understanding usage, fixing bugs, improving user experience)
   •    Marketing (sending product updates, offers, newsletters) – only with your explicit consent
   •    Legal and compliance (tax records, GST, fraud prevention, responding to lawful requests)
   •    Security (protecting the Site and users against fraud or misuse)
We will not use your data for purposes incompatible with those stated above without obtaining fresh consent where required.
6. Cookies and Tracking Technologies
Our Site uses cookies and similar technologies.
   •    Essential cookies: Required for the Site to function (e.g., cart, login, security). These cannot be disabled.
   •    Functional, Analytical, and Marketing cookies: Used only with your consent. You can manage preferences via the cookie banner or privacy settings on the Site.
You can also control cookies through your browser settings. Disabling certain cookies may affect Site functionality.
7. Sharing of Personal Data
We share personal data only when necessary and with appropriate safeguards:
   •    Service providers / Data Processors: Payment gateways, shipping/logistics partners, hosting providers, email service providers, analytics tools, and customer support tools. These process data only on our instructions.
   •    Legal or regulatory authorities: When required by law, court order, or to protect our rights, safety, or the rights of others.
   •    Business transfers: In the event of a merger, acquisition, or sale of assets (with notice to you where required).
We do not sell your personal data. We do not share it with third parties for their own marketing without your explicit consent.
8. Cross-Border Transfers
If we transfer personal data outside India (e.g., to cloud service providers), we will ensure that the transfer complies with the DPDP Act and applicable rules, including any government-approved mechanisms or contractual safeguards.
9. Data Retention
We retain personal data only for as long as necessary for the purposes stated, or as required by law:
   •    Order and transaction data: Typically retained for 7–8 years to meet tax, GST, and accounting requirements.
   •    Account data: While your account is active + a reasonable period after inactivity or deletion request.
   •    Marketing data: Until you withdraw consent or unsubscribe.
   •    Technical logs: Usually shorter periods (e.g., 6–12 months) unless needed for security or legal reasons.
When data is no longer needed, we securely delete or anonymise it.
10. Data Security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. These include encryption in transit (HTTPS), access controls, secure servers, and staff training.
No method of transmission or storage is 100% secure. In the event of a personal data breach that is likely to cause harm, we will notify the Data Protection Board of India and affected individuals as required under the DPDP Act.
11. Your Rights under the DPDP Act
As a Data Principal, you have the right to:
   •    Access information about the personal data we hold about you.
   •    Request correction or updating of inaccurate or incomplete data.
   •    Request erasure of your personal data (subject to legal retention requirements).
   •    Withdraw consent at any time (this will not affect processing already done).
   •    Nominate another person to exercise rights on your behalf in case of death or incapacity.
   •    Raise a grievance with us.
To exercise your rights, email us at [Insert your email] or write to the address above. We will respond within the timelines required by law.
If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.
12. Children’s Privacy
Our Site is not directed at children under 18. We do not knowingly collect personal data from minors. If we become aware that we have collected such data without proper consent, we will delete it promptly.
13. Third-Party Links
Our Site may contain links to third-party websites. This Policy does not apply to those sites. We encourage you to read their privacy policies.
14. Changes to This Privacy Policy
We may update this Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. Material changes will be notified via email or a prominent notice on the Site where appropriate. Continued use of the Site after changes constitutes acceptance of the updated Policy.
15. Contact Us / Grievance Redressal
For any questions, concerns, or to exercise your rights regarding this Privacy Policy or your personal data, please contact:
Arrowmind Trading Private Limited (ATPL Care)
Email: arrowmindtrading@gmail.com
Phone: +91 8373933368
Address: Ground Floor, S-129, Shop No. 1, Patparganj Road, Pandav Nagar, New Delhi, Delhi, India
We will acknowledge and address your grievance in accordance with applicable law.