Privacy Policy

Soniya Manufacturers ("Company", "we", "us", or "our") is a medical device manufacturer registered in India, specialising in blood collection tubes, sample containers, and laboratory consumables. Our registered office is at:

This Privacy Policy applies to personal data collected through our website (soniyamanufacturers.com), our customer and distributor portals, enquiry forms, email communications, and business transactions. It does not apply to third-party websites linked from our site.

We may collect the following categories of personal data:

• Identity & Contact Data: Name, job title, organisation name, email address, phone number, and postal address of business contacts (hospital staff, distributors, medical professionals).
• Account Data: Login credentials and profile information for registered portal users.
• Transaction Data: Order details, purchase history, invoices, and payment references.
• Communication Data: Enquiries, feedback, and correspondence you send us.
• Technical Data: IP address, browser type, operating system, and pages visited — collected automatically via cookies and analytics tools.
• Usage Data: Information about how you navigate and use our website and portal.

We do not collect patient health records or sensitive personal data as defined under the Digital Personal Data Protection Act (DPDPA) 2023, unless explicitly provided by you for a specific purpose.

• Directly from you when you register, place an order, submit an enquiry, or contact us.
• Automatically through cookies, web beacons, and server logs when you visit our website.
• From third parties such as logistics partners and payment processors, in connection with fulfilment of your orders.

We process your personal data for the following purposes:

We do not sell your personal data. We may share it with:

• Logistics partners (Blue Dart, DTDC, and similar carriers) solely for order delivery.
• Payment processors for secure payment handling.
• IT and cloud service providers who host our systems under confidentiality obligations.
• Regulatory authorities (CDSCO, tax authorities) when required by law.
• Professional advisers such as lawyers and auditors under strict confidentiality.

All third parties are required to process your data only for specified purposes and in accordance with applicable law.

Our website uses cookies and similar technologies to enhance your browsing experience and gather analytics. You may control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the website.

• Essential cookies: Required for the website to function properly.
• Analytics cookies: Help us understand how visitors interact with our site (e.g., Google Analytics).
• Preference cookies: Remember your settings and preferences.

We retain personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law. Specifically:

• Customer transaction records: 7 years (as required by Indian tax law).
• Marketing consent records: Until consent is withdrawn.
• Website analytics data: Up to 26 months.
• Job application data: 6 months after the position is filled.

After the retention period, data is securely deleted or anonymised.

As a data principal under India's Digital Personal Data Protection Act 2023, you have the right to:

• Access: Request a summary of personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data (subject to legal retention requirements).
• Withdraw Consent: Withdraw consent for processing based on consent at any time.
• Grievance Redressal: Raise a complaint with our Grievance Officer (details below).
• Nominate: Nominate another individual to exercise your rights in case of incapacity or death.

To exercise any right, email us at soniyamanufacturers@gmail.com with subject "Data Privacy Request". We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for data in transit.
• Role-based access controls for internal systems.
• Regular security assessments and audits.
• Employee training on data protection obligations.

No method of transmission over the internet is 100% secure. If you suspect a data breach, please notify us immediately.

Our website and services are intended for business professionals and are not directed at children under the age of 18. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data promptly.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal data.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

For any privacy-related queries, requests, or complaints, please contact our Grievance Officer: