CuraRich is operated by AB Medical System, [complete legal name and business constitution], with its registered/principal business address at GALI NO-102, Apex Public School, B-3791, Main Rd, Block B, Sant Nagar, Burari, Delhi, 110084
In this Privacy Policy, “CuraRich”, “we”, “us” and “our” refer to that business. Our website is https://curarich.in.
We sell ostomy bags, stoma care accessories and other healthcare essentials. This policy explains how we collect, use, share, retain and protect personal information when you browse our website, purchase products, contact us or use our services.
Where we determine the purposes and means of processing your digital personal data, we act as the Data Fiduciary under the Digital Personal Data Protection Act, 2023, as applicable.
This policy covers information handled through our website, checkout, customer accounts, support channels and other direct interactions with CuraRich.
If you purchase through Amazon or another marketplace, that platform’s privacy policy governs its own activities. This policy applies to customer information we receive and use as the seller.
Third-party websites, payment services and platforms may have their own privacy notices.
The information collected depends on the service you use. We collect information needed for the stated purpose.
| Activity | Information collected | Purpose |
|---|---|---|
| Orders and delivery | Name, email address, telephone number, billing and delivery addresses, products, quantities and delivery instructions | Process purchases, issue invoices, deliver products and communicate about orders |
| Payments and refunds | Payment method, transaction reference, amount, payment status and necessary refund details | Confirm payments, reconcile transactions and process refunds |
| Customer accounts, if available | Name, contact details, login credentials and account preferences | Create and secure your account and display order history |
| Product and order support | Contact details, order number, product/model information, messages and relevant attachments | Answer enquiries and resolve product, delivery, return or refund issues |
| Business and bulk enquiries | Contact person’s name, business details, contact information and relevant tax details | Prepare quotations, communicate with business customers and issue invoices |
| Optional marketing | Name, selected contact channel, consent record and communication preferences | Send updates or offers you choose to receive |
| Website operation and security | IP address, browser/device information, timestamps, session identifiers and security logs | Operate the website and investigate misuse or technical incidents |
| Optional analytics or advertising | Cookie identifiers, browsing events and campaign information described in our cookie notice | Measure website use or advertising performance according to your choices |
| Privacy requests | Contact details, request details and proportionate verification information | Authenticate and respond to requests, complaints and nominations |
We obtain information directly from you, through your website interactions, and from payment, delivery or marketplace partners involved in your transaction.
Required fields are identified at the point of collection. Optional information can be left blank. Without essential delivery or payment information, we may be unable to complete the relevant transaction.
You generally do not need to provide a diagnosis, medical history, prescription or photograph of your body to purchase our products.
Product enquiries or purchase history may nevertheless reveal health-related information. Please share only details necessary for your request and avoid uploading unrelated medical documents.
If a support request genuinely requires sensitive information, we will explain what is needed, its purpose and intended recipients, and obtain the required consent before collection.
We restrict its use to the disclosed purpose. We do not use medical documents or private health-related enquiries to create advertising audiences.
Please do not include medical information, telephone numbers or addresses in public product reviews. We do not publish sensitive personal information received privately through support channels.
We process information for lawful, specified purposes with the required consent or another basis permitted by applicable Indian law.
Where applicable, this includes the limited purposes for which you voluntarily provide information, such as requesting delivery of an order or a response to an enquiry, and legally required disclosures.
Where consent is requested, we identify the information and purpose and require an affirmative choice. Optional marketing consent is separate from purchasing a product.
Browsing our website or accepting this Privacy Policy does not, by itself, provide consent for every form of processing.
If we propose a new purpose requiring consent, we will provide an appropriate notice and seek fresh consent.
We send promotional email, SMS or WhatsApp communications according to your recorded choices and applicable communication requirements.
You can stop optional marketing through the unsubscribe or opt-out method in the message, or by contacting privacy@curarich.in
You can change cookie preferences at [cookie settings URL].
To withdraw consent for another activity, use [privacy request URL] or contact [privacy email]. Withdrawal should be as easy as giving consent.
Withdrawal does not invalidate earlier lawful processing. We will stop the affected processing and instruct processors acting for us accordingly, unless continued processing is legally required or otherwise permitted.
Withdrawal may prevent us from providing a service that genuinely depends on that information. We will explain the relevant effect.
Order, delivery, refund and security messages may still be sent where necessary for the service you requested or legal compliance.
We use necessary cookies or similar technologies for functions such as maintaining shopping carts, checkout sessions and website security.
Where optional analytics, advertising or personalisation tools are used, we describe them in our cookie notice and provide a choice before activation where consent is required. Optional choices are not preselected.
Our cookie notice at [cookie notice URL] identifies the tools actually used, their providers, purposes, information collected and expiry periods.
You can review or change optional choices at [cookie settings URL].
Browser settings may also allow you to block or delete cookies. Disabling necessary cookies can affect checkout or other website functions.
We share information relevant to the task with recipients involved in providing our services:
Our current provider information is available at [provider disclosure URL, or insert actual provider names and roles].
Processors handling information on our behalf are engaged under appropriate contracts with confidentiality, security and processing restrictions.
We do not sell personal information.
We do not routinely give customer information to a manufacturer simply because it made the product. If resolving a specific complaint requires sharing identifiable information with a manufacturer, we will explain the recipient and purpose and obtain any required permission.
Payments are processed through [actual payment gateway/provider names]. Their privacy notices are available at [provider privacy-policy links].
[Confirm and retain only if accurate:] We do not store complete card numbers, card security codes, payment passwords or UPI PINs. We receive transaction references, payment status and limited payment information needed for order administration.
For a bank-transfer refund, we may request account details necessary to send the refund.
Please never send a payment password, OTP or UPI PIN to customer support.
[Insert actual hosting/storage locations and countries where relevant providers process customer information. State that processing is entirely within India only after checking all providers and subprocessors.]
Where information is transferred outside India, we apply safeguards and conditions required by applicable law, including relevant government restrictions and stricter sector-specific requirements.
Where the existing sensitive-information rules apply, transfers must meet their protection and contractual-necessity or consent conditions.
Buying products manufactured in another country does not itself mean your personal information is sent to that country.
We retain information for its stated purpose and applicable legal recordkeeping requirements. We do not retain it indefinitely merely because it might be useful.
| Record | Retention period or criterion |
|---|---|
| Orders, invoices, payments and refunds | [Confirmed period and applicable tax/accounting requirement] |
| Customer-account information | [Account lifetime and confirmed inactivity/deletion period] |
| Support messages and attachments | [Confirmed period after resolution; shorter retention for unnecessary sensitive attachments] |
| Marketing information | Until withdrawal or [confirmed expiry period]; limited suppression information may remain to respect your opt-out |
| Cookie information | Expiry periods stated in the cookie notice |
| Security and processing logs | Applicable statutory minimums and [confirmed additional retention, if any] |
| Privacy-request and consent records | [Confirmed accountability and legal retention period] |
| Backup copies | [Confirmed backup rotation and final deletion period] |
When the relevant DPDP retention provisions apply, we will observe the prescribed minimum one-year retention of processing data, associated traffic data and logs, and any longer legally required period. This does not permit indefinite retention of every category of information. meity.gov.in
We delete information when it is no longer required, subject to lawful retention obligations, and arrange appropriate deletion by processors acting for us.
If information must remain after a deletion request, we will explain the applicable reason and restrict its further use.
We maintain reasonable technical and organisational safeguards appropriate to the information handled.
These include [confirm safeguards actually implemented: encrypted transmission, appropriate protection of stored information, restricted staff access, secure authentication, access logging, monitoring, backups, confidentiality obligations and incident-response procedures].
No website or electronic transmission is completely risk-free. Please protect account credentials and notify us of suspected misuse.
We investigate suspected incidents and take steps to contain them.
When breach-notification duties apply, we will inform affected individuals without delay, including relevant consequences, mitigation measures, protective steps and a contact for assistance. Required regulatory reports will be made within applicable timelines.
Our shopping and account services are intended for adults aged 18 or over.
Parents and caregivers may purchase products for a child without creating a child’s account or unnecessarily submitting the child’s personal information.
Where processing a child’s personal data is necessary, we obtain verifiable parental or lawful-guardian consent as required before processing.
We do not undertake tracking, behavioural monitoring or targeted advertising directed at children.
Where a person with a disability has a lawful guardian and applicable law requires guardian consent, we verify the guardian’s authority and obtain the required consent. Disability alone does not mean an adult cannot give consent.
If you believe we have collected a child’s information without required consent, contact [privacy email].
You can request:
Send requests to [privacy email] or [privacy request URL].
Provide your name, registered email address or telephone number, and a brief description of the request. Include an order number only if relevant. Nomination requests should identify the nominee and their contact details.
We use proportionate verification and may request evidence of representative authority. Do not send Aadhaar or other identity documents unless we specifically explain why they are needed.
These request channels are available under our policy. Statutory DPDP rights apply from their respective commencement dates. Other applicable rights remain unaffected. meity.gov.in
Business: AB Medical System — [complete legal name]
Grievance Officer / privacy contact: [full name]
Designation: [designation]
Email: [working privacy/grievance email]
Telephone: [working business telephone number]
Postal address: [complete address with PIN code]
Online requests: [working privacy/grievance form URL]
This contact can answer questions about how CuraRich handles your information.
We acknowledge complaints within 48 hours and address them within one month of receipt. Please provide enough information to identify the issue without sharing unnecessary sensitive details.
Once the relevant DPDP complaint provisions are operative, you may approach the Data Protection Board of India after first using our grievance process, through the official complaint mechanism available at that time.
Details will be maintained at [privacy escalation-information URL]. This does not limit other remedies available under applicable law.
You may request notices and consent information in English or a language listed in the Eighth Schedule to the Constitution through [language-selection link or contact mechanism].
We may update this policy when our services, information practices or legal requirements change. The updated version will show its effective date.
Where a change requires a new notice or consent, we will provide it before the affected processing.
A policy update does not automatically authorise a new use of your information.