PRIVACY POLICY

1. INTRODUCTION

Wembrace Biopharma Pvt. Ltd. is committed to protecting and respecting your privacy and ensuring the security of your personal data.

This Privacy Policy explains how we collect, use, process, store, disclose, and protect personal data when you interact with our website, business operations, healthcare technology solutions, pharmaceutical products, medical devices, imported capital equipment solutions, scientific events, and related services.

This Privacy Policy has been prepared in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable laws and regulations in India. Wembrace also endeavors to align its privacy practices with internationally accepted standards wherever reasonably applicable.

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies solely to websites, applications, digital platforms, and online services owned or operated by Wembrace Biopharma Pvt. Ltd. that specifically reference or link to this Privacy Policy.

Our website may contain links to third-party websites or resources. Wembrace does not control and is not responsible for the privacy practices, security standards, or content of such third-party websites. Users are encouraged to review the privacy policies of such external websites before providing any personal data.

3. WHO WE ARE

Wembrace Biopharma Pvt. Ltd. is a healthcare-focused organization operating across the pharmaceutical, biotechnology, oncology, medical technology, and healthcare infrastructure sectors. The Company is engaged in the manufacturing, marketing of pharmaceutical products, distribution, and commercialization of advanced healthcare solutions, medical devices, and specialized oncology technologies, including the import and deployment of advanced medical equipment and capital healthcare systems.

For the purposes of applicable privacy laws, Wembrace acts as the responsible entity determining the purposes and means of processing personal data collected through its website and related business activities.

4. INFORMATION WE MAY COLLECT

Depending upon your interaction with Wembrace, we may collect the following categories of personal data:

• Personal Identification Information: Name, title, date of birth, gender, organization details, and identification details.
• Contact Information: Email address, telephone number, mailing address, business address, and social media profiles.
• Technical & Usage Information: IP address, browser details, operating system, device information, cookies, website activity, location data, access logs, and online identifiers.
• Business & Professional Information: Medical specialty, professional affiliations, licenses, qualifications, and healthcare institution information.
• Financial Information: Banking details and payment-related information where required for legitimate business purposes.
• Product & Service Interaction Data: Product usage feedback, inquiries, service interactions, and communication preferences.
• Health & Medical Information: Information voluntarily provided regarding adverse events, product complaints, medical inquiries, or healthcare-related interactions.
• Recruitment Information: Resume/CV details, employment history, qualifications, certifications, and references for employment applications.

5. HOW WE COLLECT PERSONAL DATA

We may collect personal data through:

• Website forms and inquiry submissions;
• Email and telephonic communications;
• Business meetings and conferences;
• Scientific events and promotional programs;
• Recruitment applications;
• Distributor and customer interactions;
• Cookies and analytics technologies;
• Publicly available professional sources.

6. PURPOSES OF PROCESSING

Wembrace may process personal data for the following purposes:

• Responding to inquiries and providing requested information;
• Supporting customer, distributor, supplier, and healthcare professional engagement;
• Pharmacovigilance and product safety monitoring;
• Regulatory and legal compliance;
• Marketing communications and event invitations;
• Website administration and cybersecurity;
• Product and service improvement;
• Recruitment and employment processing;
• Managing international business collaborations and healthcare partnerships.

7. LEGAL BASIS FOR PROCESSING

Where required by applicable law, Wembrace processes personal data based on:

• Consent provided by the individual;
• Contractual obligations;
• Compliance with legal and regulatory requirements;
• Legitimate business interests;
• Public health and patient safety obligations.

8. DISCLOSURE OF PERSONAL DATA

Wembrace may disclose personal data on a strict need-to-know basis and only where legally permitted.

Personal data may be shared with:

• Affiliates and group entities;
• Service providers and IT vendors;
• Regulatory authorities and government agencies;
• Legal, financial, and compliance advisors;
• Healthcare and business partners;
• Logistics and operational support providers.

Wembrace does not sell personal data to third parties.

9. INTERNATIONAL DATA TRANSFERS

Wembrace Biopharma Pvt. Ltd. may transfer, store, access, process, or disclose personal data to its affiliates, business partners, service providers, consultants, regulatory authorities, and other authorized third parties located in India or other jurisdictions where Wembrace conducts business or maintains operations.

As a healthcare and pharmaceutical organization operating in a global environment, certain business activities, including but not limited to scientific exchange, medical information services, pharmacovigilance, product safety monitoring, regulatory compliance, clinical collaboration, information technology support, cloud-based data hosting, and business administration, may require the transfer of personal data across national borders.

Where personal data is transferred to a country that may not provide the same level of data protection as the country in which the data was originally collected, Wembrace Biopharma will implement appropriate contractual, organizational, technical, and security measures designed to ensure that such personal data remains adequately protected and is processed in accordance with applicable data protection and privacy laws.

All international transfers of personal data shall be carried out only for legitimate business, healthcare, scientific, regulatory, legal, or operational purposes and on a strict need-to-know basis. Wembrace Biopharma takes reasonable steps to ensure that recipients of personal data maintain appropriate standards of confidentiality, security, and data protection consistent with applicable legal and regulatory requirements.

By providing your personal data and using our website, services, or communication channels, you acknowledge and, where required by applicable law, consent to the transfer, processing, storage, and use of your personal data in accordance with this Privacy Notice.

10. COOKIES & ANALYTICS

Cookies are alphanumeric identifiers with small amount of data that is commonly used as an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive. Please note, a cookie in no way gives us access to your computer/device and cookies cannot access any other information on your computer/device.

Our Website uses these cookies to collect information and to improve our Service by making your interaction with us faster They may be used for the purposes of managing your preferences, maintaining and optimizing security, marketing, communication, analytics, and research.

We majorly use below types of cookies:

Essential Cookies or Strictly Necessary Cookies – These cookies are essential to the functioning of our Website and for you to move around the Website. Without these cookies, certain features cannot function. No information about your browsing habits is gathered by these cookies.

Functional Cookies – These cookies remember how you prefer to use our Website and improve the way our Website works. These remain on your computer/device for a pre-defined period of time.

Performance Cookies - Some cookies help us with the performance and design of our Website. For example, these cookies show us statistics, which are the most frequently visited pages on the Website, help us record any difficulties you have with the Website, and whether our publicity is effective or not.

Targeting or Tracking Cookies - On certain pages of our Website, we use cookies to help us understand your interests as you browse the Website, so we can tailor and deliver to you a more personalized service in the future. This assists us in delivering relevant, interest-based information to you.

At any time, you also have the option to change /control your cookies through your browser settings. However, if you do turn off cookies in your browser, you will not be able to fully experience some of the features our Website.

Users may control cookie settings through their browser preferences. Certain functionalities of the website may not operate properly if cookies are disabled.

11. DATA SECURITY

Wembrace Biopharma Pvt. Ltd. is committed to protecting the confidentiality, integrity, and security of personal data and other information entrusted to us. We implement appropriate technical, administrative, physical, and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, misuse, loss, destruction, or other unlawful processing.

Our security measures may include, where appropriate, access controls, user authentication mechanisms, encryption technologies, network and system security protocols, cybersecurity monitoring, data backup procedures, secure data storage practices, employee confidentiality obligations, and other risk-based security controls designed to safeguard information throughout its lifecycle.

As part of our business operations, which include pharmaceutical manufacturing, marketing, regulatory activities, healthcare collaborations, and the importation, commercialization and distribution of advanced medical technologies and equipment, Wembrace Biopharma may engage authorized third-party service providers. We take reasonable steps to ensure that such third parties maintain appropriate security measures and confidentiality obligations consistent with applicable legal, regulatory, and contractual requirements.

While Wembrace Biopharma strives to maintain commercially reasonable security measures and continuously enhance its information security practices, no method of electronic transmission, internet-based communication, or electronic storage can be guaranteed to be completely secure. Accordingly, Wembrace Biopharmacannot warrant or guarantee the absolute security of any information transmitted to or through its websites, systems, or communication channels.

If you become aware of any actual or suspected unauthorized access, security incident, misuse of information, or any concern regarding the security of your interactions with Wembrace Biopharma , you are encouraged to notify us promptly using the contact details provided in this Privacy Notice.

12. DATA RETENTION

Wembrace retains personal data only for as long as reasonably necessary for business, legal, regulatory, pharmacovigilance, dispute resolution, and compliance purposes.

Upon expiry of the applicable retention period, data may be securely deleted, anonymized, or archived in accordance with company policies and applicable law.

13. PHARMACOVIGILANCE & MEDICAL SAFETY

As a pharmaceutical, healthcare, and medical technology organization, Wembrace Biopharma Pvt. Ltd. is subject to various legal, regulatory, safety, quality, and public health obligations that may require the collection, recording, evaluation, retention, processing, use, and disclosure of personal data in connection with pharmacovigilance activities, adverse event reporting, product quality complaints, medical information requests, safety surveillance, post-marketing monitoring, regulatory inspections, audits, and compliance requirements.

Personal data collected for these purposes may include information relating to patients, healthcare professionals, caregivers, reporters, distributors, business partners, or other individuals involved in the reporting, investigation, assessment, or management of safety-related matters. Such information may be processed to evaluate the safety, quality, performance, effectiveness, and benefit-risk profile of pharmaceutical products, medical devices, healthcare solutions, and other products or services associated with Wembrace Biopharma.

Wembrace may be required to disclose relevant information to regulatory authorities, health agencies, licensing authorities, pharmacovigilance service providers, business partners, manufacturers, distributors, healthcare institutions, ethics committees, or other authorized entities in India and other jurisdictions where reporting or regulatory obligations apply. Where necessary, such disclosures may involve international transfers of personal data in accordance with applicable laws and appropriate safeguards.

Please note that personal data processed for pharmacovigilance, product safety, medical information, quality assurance, regulatory compliance, or public health purposes may be retained and processed for the period required under applicable laws, regulations, industry standards, and regulatory record-retention requirements. Accordingly, Wembrace Biopharma may be unable to comply with requests for deletion, restriction, objection, or withdrawal of consent where continued processing or retention is required to fulfill legal, regulatory, safety, quality, audit, scientific, or public health obligations.

Wembrace Biopharma processes such information in accordance with applicable legal and regulatory requirements and implements appropriate safeguards to protect the confidentiality, integrity, and security of personal data while fulfilling its pharmacovigilance and product safety responsibilities.

14. Right to your personal information on our Website

Right to access: You have the right to ask for a copy of your personal data and to verify how we are processing it.

Right to rectification: If you believe we have inaccurate or incomplete information about you, you have the right to ask us to correct or update it.

Right to be forgotten: In certain circumstances, you have the right to ask us to remove or erase your personal data from our records.

Right to object: You have the right to object to processing of your personal data. You also have the right not to be subjected to any automated decision making or profiling.

Right to restriction of processing: You have the right to ask us to restrict processing of your personal data in cases where the data is inaccurate, or the processing of the data is unlawful. This does not restrict Wembrace Biopharma from processing of your personal data for legal and regulatory requirements.

Right to withdraw consent: If we process your personal data based on your consent, you can withdraw your consent at any point of time.

Right to portability: You have the right to ask us to transfer your data to you, or any other third party.

If you would like to opt out of future communications from a Wembrace Biopharma business or a Wembrace Biopharma program, please contact us by clicking on the "Contact Us" link on the Web site you are visiting.

In all communications to Wembrace Biopharma, please include the e–mail address used for registration (if applicable), the Website address and explanation of your request. If you would like to delete or amend your personal information and are contacting us by e-mail, please put "Deletion Request" or "Amendment Request", as applicable, in the subject line of the e-mail. We will do our best to respond to all reasonable requests in a timely manner. To exercise any of your right mentioned in this policy, kindly do reach out via the Contact Us link on the Website.

Wembrace Biopharma may require verification of identity before processing such requests.

15. CHILDREN'S PRIVACY

Wembrace Biopharma Pvt. Ltd. is committed to protecting the privacy of children and minors. Our website, digital platforms, products, and services are generally intended for use by adults, healthcare professionals, business partners, researchers, and other authorized users.

Wembrace does not knowingly collect, use, process, or disclose personal data directly from children or minors through its website or online services without appropriate parental consent, legal guardian authorization, or other lawful basis as required under applicable laws and regulations.

In limited circumstances, personal information relating to minors may be collected or processed where necessary for legitimate healthcare, medical, pharmacovigilance, patient support, safety monitoring, clinical, regulatory, or public health purposes, and only in accordance with applicable legal, ethical, and regulatory requirements.

If Wembrace becomes aware that personal data relating to a child or minor has been collected through its website or services without the required authorization or legal basis, Wembrace will take reasonable steps to investigate the matter and, where appropriate, delete, restrict, or otherwise manage such information in accordance with applicable laws and internal policies.

Parents, legal guardians, or authorized representatives who believe that a child or minor has provided personal information to Wembrace without appropriate authorization may contact us using the contact details provided in this Privacy Notice.

16. LIMITATION OF LIABILITY

To the maximum extent permitted by law, Wembrace shall not be responsible for indirect, incidental, or consequential damages arising from unauthorized access, cyber incidents, or third-party actions beyond Wembrace’s reasonable control.

17. CHANGES TO THIS PRIVACY POLICY

Wembrace reserves the right to amend or update this Privacy Policy from time to time. Updated versions will be posted on the website along with the revised “Last Updated” date.

18. CONTACT DETAILS

For any questions, requests, or concerns regarding this Privacy Policy or the processing of personal data, please contact:

19. CONSENT

By using this website and voluntarily providing your personal data, you acknowledge that you have read, understood, and agreed to this Privacy Policy.