Matrix Therapeutics Private Limited

[Address line 1], [Address line 2], Hyderabad, Telangana [PIN], India

Email: [Contact Email]

Phone: [Contact Number]

• Account data: name, email, phone, username, role, login and activity logs, session cookies.
• Hospital and business data: hospital names, addresses, contacts, purchase orders, delivery instructions.
• Operational data: inventory, batches, serial numbers, delivery challans, invoices, and usage records.
• Patient-related data (where entered by authorised users): patient name, IP number, doctor name, and product usage submitted via hospital workflows or WhatsApp integrations.
• Rider data: GPS location during active delivery tasks, shift and task status.
• Communications: messages and metadata when you interact with our WhatsApp or email integrations.
• Technical data: IP address, browser/device type, and system logs for security and troubleshooting.

• Operate Stocure (inventory, orders, distribution, billing, and compliance records).
• Coordinate with manufacturers and hospital partners for product availability and delivery.
• Provide customer support and system security.
• Meet legal and regulatory obligations for medical device distribution in India.

We may share data with manufacturer partners (e.g. Boston Scientific), hospitals receiving devices, service providers (cloud hosting, IT support, logistics), and authorities when required by law. We do not sell personal data.

Some partners or cloud services may process data outside India. Where this occurs, we apply appropriate safeguards in line with DPDPA requirements.

• Transaction and device batch records: as required by company law and medical device regulations (typically up to 8 years where applicable).
• User accounts: until deletion request or relationship ends, plus a short backup period.
• Hospital contact data: for the duration of the business relationship plus a reasonable period thereafter.

• Encryption in transit (HTTPS) and access controls within Stocure.
• Role-based permissions for ERP users.
• Multi-factor authentication may be enabled where configured.
• Hosting on secured cloud infrastructure with monitoring and audit logging.

You may request access, correction, erasure (where permitted), grievance redressal, or withdrawal of consent by contacting [Contact Email].

Stocure is not intended for individuals under 18. We do not knowingly collect data from minors.

We maintain an incident response process. Significant breaches will be reported to the Data Protection Board and affected individuals where required by law.

[DPO Name]

Data Protection Officer, Matrix Therapeutics Private Limited

Email: [DPO Email] · Phone: [DPO Phone]

We may update this policy. The “Last updated” date above will change when we do.