Privacy Policy

This Privacy Policy explains how OrphanDrug (“OrphanDrug,” “we,” “our,” or “us”), operated by GNH India Pharmaceuticals Limited, handles information when you access or use our website, APIs, and related services.

We are committed to protecting your privacy. This platform is designed to operate with minimal data collection and does not use personal data for tracking, profiling, or advertising purposes.

By accessing or using the Website, you agree to the practices described in this Privacy Policy.

1. Overview of Our Privacy Approach

This means:

• We do not require user accounts or registration
• We do not collect personal data from general visitors
• We do not track individuals across sessions or devices
• We do not sell or share personal data for advertising or marketing purposes

Our goal is to provide open access to rare disease and orphan drug intelligence without compromising user privacy.

2. Information We Do Not Collect

We do not collect, store, or process Personally Identifiable Information (PII) from general visitors. This includes, but is not limited to:

• Names
• Email addresses
• Phone numbers
• Physical addresses
• Payment or billing details
• Account credentials (no user accounts exist for visitors)
• Personally identifiable browsing histories
• Behavioural profiling data
• Search histories tied to individuals
• Form submissions (no public forms are provided)

We do not intentionally collect any data that directly identifies you as an individual visitor.

3. Cookies and Tracking Technologies

OrphanDrug does not use:

• Advertising cookies
• Tracking cookies
• Behavioural analytics cookies
• Cross-site tracking technologies

We do not use cookies to profile users or track browsing behaviour.

3.1 Essential Cookies

In some cases, your browser or our infrastructure providers (such as CDN or security layers) may set strictly necessary session cookies. These cookies are used solely for:

• Ensuring secure website delivery
• Load balancing and performance optimization
• Preventing abuse and maintaining uptime

These cookies:

• Do not identify individual users
• Are not used for marketing or analytics
• Do not track browsing behaviour across websites

4. Infrastructure and Third-Party Service Providers

To operate efficiently and securely, we rely on third-party infrastructure providers. These providers may process limited connection-level technical data (such as IP addresses) as part of normal internet operations.

We do not share personal user data with these providers beyond what is technically required to deliver web services.

These providers operate under their own privacy policies, and their processing of data is limited to infrastructure-level requirements.

5. API Usage and Server Logs

OrphanDrug provides a public API accessible via /api/v1.

5.1 API Access

• No authentication or user account is required for public API access
• No personal information is required to use the API

5.2 Server Logs

For security, reliability, and abuse prevention, we may temporarily retain standard server logs, which may include:

• IP address
• Request timestamps
• Device/browser metadata
• API endpoint access details

These logs are used strictly for:

• System security
• Abuse detection and prevention
• Debugging and operational maintenance

We do not use server logs for profiling, marketing, or individual tracking.

Logs are retained only for a limited period and are securely protected.

6. Admin and Internal Systems

The Platform includes a restricted administrative interface used exclusively by authorized personnel of GNH India Pharmaceuticals Limited.

6.1 Admin Access

• Access is restricted to authorized staff only
• Authentication is performed via email-based OTP verification

6.2 Admin Data Handling

• Admin email addresses are stored solely for authentication purposes
• Admin credentials are not publicly accessible
• Admin data is not used for marketing or external purposes

7. Data Sharing and Disclosure

We do not sell, rent, trade, or commercially share personal data.

We may disclose limited technical or operational data only in the following circumstances:

• To comply with applicable legal obligations
• To respond to lawful requests from government authorities
• To protect the security, integrity, or availability of the Platform
• To prevent fraud, abuse, or unauthorized access

Any such disclosures are strictly limited to what is legally or operationally required.

8. Children's Privacy

OrphanDrug is intended as a professional informational resource and is not directed toward children.

We do not knowingly collect, store, or process personal data from individuals under the age of 18.

If we become aware that any personal data has been inadvertently collected from a minor, we will take appropriate steps to delete it promptly.

9. Data Security

We implement reasonable technical and organizational measures to protect the Platform, including:

• Secure server infrastructure
• Encrypted connections (SSL/TLS)
• Firewall and DDoS protection
• Access control restrictions
• Limited internal access to systems

However, no system can be guaranteed to be completely secure. Users access the Platform at their own risk.

10. International Data Access

As a globally accessible platform, OrphanDrug may be accessed from different countries. Any technical data processed by infrastructure providers (such as IP routing data) may be processed in jurisdictions outside your own country.

By using the Platform, you acknowledge and consent to such cross-border technical processing as required for service delivery.

11. Your Rights

Because we do not collect personal data from general users, most data subject rights (such as access, correction, or deletion of personal profiles) are not applicable in the normal use of the Website.

If you believe any personal data has been inadvertently collected or processed, you may contact us to request review or deletion.

12. Third-Party Links

The Website may include links to third-party websites, including regulatory authorities, healthcare databases, manufacturers, and research institutions.

We are not responsible for the privacy practices of external websites. Users are encouraged to review the privacy policies of any third-party services they visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Operational changes
• Legal or regulatory requirements
• Infrastructure updates
• Security improvements

When updates occur:

• The “Last Updated” date will be revised
• The updated policy will be published on this page
• Continued use of the Website constitutes acceptance of the revised policy

We encourage users to review this page periodically.

14. Limitation of Privacy Guarantees

While we are committed to minimizing data collection, we cannot guarantee:

• Absolute prevention of all third-party technical data processing
• Complete immunity from network-level logging by infrastructure providers
• Total security against external cyber threats

However, we actively implement reasonable safeguards to protect system integrity and user privacy.

15. Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy, you may contact us at:

Legal Department
GNH India Pharmaceuticals Limited
Email: [email protected]