Privacy Policy

1. Scope

This policy explains how RIVANOVA HEALTHCARE PVT LIMITED (“RIVANOVA”, “we”, “us”) collects, uses, stores, shares and protects personal data when you use this website, contact us, apply for a role, or engage with us as a business partner. It applies to this website and to the business processes that receive data from it.

It does not apply to third-party websites we link to. Those operate under their own policies, which we would encourage you to read before submitting anything to them.

2. Information we collect

We collect only what we need in order to respond to you or to meet a legal obligation.

Information you give us directly — name, organisation, email address, telephone number, territory, role reference, CV contents and the free-text content of your enquiry, submitted through our contact, career or newsletter forms.
Business partner information — drug licence details, GST registration, registered pharmacist credentials and storage facility information, collected during distributor or export partner qualification.
Pharmacovigilance information — where you report a suspected adverse event, we collect the clinical details necessary to assess and report it, which may include health information about an identifiable patient.
Technical information — standard web server logs including IP address, browser type, referring page and timestamp, generated automatically when any website is accessed.
Preferences stored on your device — your chosen colour theme is stored in your browser's local storage. It never leaves your device and is not transmitted to us.

We do not knowingly collect sensitive personal data through this website beyond what is strictly necessary for pharmacovigilance reporting or recruitment.

3. How we use it

To respond to product, distribution, export, documentation and media enquiries
To assess and process job applications
To qualify, appoint and administer distribution and export partnerships
To meet our pharmacovigilance obligations, including onward reporting to regulatory authorities
To send the quarterly briefing where you have subscribed to it
To maintain the security, availability and integrity of this website
To comply with applicable pharmaceutical, tax and corporate law

We do not sell personal data. We do not use it for automated decision-making or profiling, and we do not use enquiry data to build advertising audiences.

4. Lawful basis for processing

Where Indian data protection law applies, we process personal data on the basis of your consent (given when you submit a form or subscribe), the necessity of processing for performance of a contract with you, compliance with a legal obligation — most notably our pharmacovigilance and record-keeping duties — and our legitimate interest in operating and securing this website.

Where you have given consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out, and it may prevent us from continuing to provide a service you have requested.

We share personal data only in the following circumstances:

Regulatory authorities — where reporting is legally mandated, including adverse event reports to the Pharmacovigilance Programme of India or an equivalent authority in your country
Service providers — hosting, email and IT support providers acting on our documented instructions under written confidentiality obligations
Professional advisers — legal, audit and insurance advisers where reasonably required
Legal process — where disclosure is required by law, court order or a lawful request from a competent authority

We do not share your data with advertisers, data brokers or unrelated commercial third parties under any circumstances.

6. Retention

Enquiry correspondence is retained for three years from the date of last contact. Unsuccessful job applications are retained for twelve months unless you ask us to remove them sooner. Business partner qualification records are retained for the duration of the relationship plus eight years, in line with statutory record-keeping requirements.

Pharmacovigilance records are retained for the lifetime of the product plus ten years, as required by applicable pharmaceutical regulation. This retention period cannot be shortened at request, because the record forms part of a regulated safety dataset.

7. Security

We apply technical and organisational measures appropriate to the sensitivity of the data: encryption in transit, access control on a need-to-know basis, audit logging on systems holding personal data, and confidentiality obligations binding all personnel and contractors.

No transmission over the internet can be guaranteed completely secure. Please do not send confidential patient-identifiable information through the website contact form; use the pharmacovigilance email route described in section 10 instead.

8. Your rights

Subject to applicable law and to the retention obligations described above, you may request access to the personal data we hold about you, correction of inaccurate or incomplete data, erasure of data we no longer have a lawful basis to retain, withdrawal of consent, and nomination of another individual to exercise these rights on your behalf in the event of death or incapacity.

Write to admin@rivanovahealthcare.com with the subject line Data Rights Request. We respond within thirty days. We may ask you to verify your identity before acting, in order to protect you from a fraudulent request made in your name.

9. Cookies and local storage

This website sets no advertising or tracking cookies. We use a single local storage entry, rivanova-theme, to remember whether you prefer the light or dark colour theme. It contains no identifier, is not readable by any other site, and is never transmitted to our servers.

If analytics are introduced in future, this section will be updated and a consent mechanism will be presented before any such cookie is set.

10. Pharmacovigilance data

Adverse event reports are handled under a separate regulatory regime. Where you report a suspected adverse reaction, we are legally required to record the details — including identifiable health information about the patient — and to report qualifying cases to the relevant national authority.

We minimise identifiers wherever the regulation permits, and we cannot delete a pharmacovigilance record on request, because doing so would breach our safety reporting obligations. Send reports to admin@rivanovahealthcare.com with the subject line Adverse Event Report.

11. Children

This website is intended for healthcare professionals and business partners, and is not directed at children. We do not knowingly collect personal data from anyone under the age of eighteen. If you believe a child has provided us with personal data, contact us and we will delete it, unless it forms part of a pharmacovigilance record.

12. Changes to this policy

We may update this policy to reflect changes in law, regulation or our own practices. The effective date at the top of this page always shows the current version. Material changes will be highlighted on this page for at least thirty days after publication.

13. Contact

For any question about this policy or about how we handle your data, write to admin@rivanovahealthcare.com or to the Grievance Officer at RIVANOVA HEALTHCARE PVT LIMITED, Corporate Office, Plot No. 00, Pharma City, Ahmedabad, Gujarat 380000, India.

If you are not satisfied with our response, you may escalate the matter to the relevant data protection authority in your jurisdiction.