Privacy Policy

Last updated: 18 April 2026

This Privacy Policy explains how Achira Labs Private Limited ("Achira Labs", "we", "our", or "us") collects, uses, stores, shares, and protects personal information when you visit achiralabs.com or interact with us through the website's forms. It is intended to meet the notice requirements of the Digital Personal Data Protection Act, 2023 (India) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who we are

Achira Labs Private Limited is a medical-device company incorporated in India. Our registered office is at 66b, 13th Cross Road, Dollar Layout, Bengaluru 560078, Karnataka, India. For any question about this policy or about how your data is handled, you may contact us at services@achiralabs.com.

2. What information we collect

We only collect the information you voluntarily provide through our website forms. Depending on which form you submit, this may include:

Identification details: name, organisation, job role or designation, country.
Contact details: email address, telephone number.
Enquiry content: your message, the product or kit you are interested in, the documents you request (e.g. product leaflet, IFU, COA, SDS).
Application materials (Careers form): CV/resume file in PDF, DOC, or DOCX format, along with information you include in it.
Technical metadata: IP address, browser user-agent string, and a timestamp — recorded by our server as part of normal web-server operation and used by Google reCAPTCHA to score submissions.

We do not use advertising cookies. We do not profile visitors for marketing. We do not sell personal data.

3. How we use your information

To respond to your enquiry, quote request, partnership proposal, or demo request.
To send you the product documents (IFU, COA, SDS, leaflet) you specifically request.
To evaluate job applications and contact you about them.
To prevent spam and automated abuse of our forms via Google reCAPTCHA.
To maintain reasonable security logs for the website.

4. Legal basis

We process personal information on the following legal bases:

Your consent when you voluntarily submit information through a form.
Legitimate interests in operating the website securely and responding to business enquiries.
Legal obligation, where we must retain certain records to comply with tax, corporate, or regulatory requirements.

5. How long we keep your data

Enquiry, partnership, and document-request submissions are retained in our business email system for as long as is reasonably necessary to address the enquiry and maintain normal business records, typically up to 36 months, unless a longer period is required by law.
Career applications and attached CVs are retained for up to 24 months from submission for ongoing recruitment consideration, after which they are deleted or anonymised.
Temporary copies of uploaded CV files are deleted from the web server within seconds of being attached to the internal email.

6. Sharing with third parties

Your personal information is only shared with trusted service providers that help us operate the website:

Brevo (Sendinblue SAS, France) — SMTP relay used to deliver your form submission to our corporate inbox.
Google reCAPTCHA (Google LLC, United States) — bot-prevention on our forms. See Google's privacy policy at policies.google.com/privacy.
Google Maps (Google LLC) — embedded map on our Contact page.
Keka HR (Technovert Solutions Pvt Ltd, India) — applicant tracking on our Careers page.
Our web hosting provider, which handles the infrastructure that serves the website.

We do not transfer your data to any party for independent marketing or profiling. Where data is processed outside India, it is done under standard contractual protections offered by these vendors.

7. Security

Form submissions are transmitted to our server over HTTPS (TLS). Configuration files containing credentials are stored outside the publicly accessible web root. Uploaded CV files are held only momentarily on the server before being emailed and deleted. Access to internal mailboxes is protected by multi-factor authentication. No system can be guaranteed to be 100% secure; please avoid sending us sensitive personal information (e.g. identity documents, health records) via the website forms.

8. Your rights

Subject to applicable law, you may:

Request access to the personal data we hold about you;
Request correction of inaccurate or incomplete data;
Request deletion of your data, where we are not required by law to retain it;
Withdraw consent you have previously given;
File a grievance with us or with the relevant data-protection authority.

To exercise any of these rights, please email services@achiralabs.com with the subject line "Privacy request". We aim to respond within 30 days.

9. Cookies

This website does not set any first-party cookies for analytics or advertising. Third-party services we embed — Google reCAPTCHA and Google Maps — may place cookies necessary for their own operation. You may block or delete these cookies through your browser settings; note that reCAPTCHA may refuse to load if all third-party cookies are blocked, which will prevent form submission.

10. Children's data

The website and its forms are intended for business and clinical contacts. We do not knowingly collect data from children under the age of 18. If you believe a child has submitted personal information to us, please contact us so we can remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above. Please review the policy periodically.

12. Grievance officer

In accordance with applicable Indian law, you may contact our grievance point for any concern relating to personal data:

Grievance Officer
Achira Labs Private Limited
66b, 13th Cross Road, Dollar Layout, Bengaluru 560078, India
Email: services@achiralabs.com

This policy is provided for general information and does not constitute legal advice. Achira Labs should obtain independent legal review of this document before publication.