Legal · Privacy
Privacy Notice
Last updated: 26 September 2026Version 1.1
HAROM India Private Limited (“HAROM”, “we”, “us”) is responsible for the personal data collected through this website. This notice explains what we collect when you browse the site or send us an enquiry, a demo request or a request for proposal, why we use it, how long we keep it, who sees it and the rights you have.
At a glance
Only what you give us
Your contact details and what you write in our forms, plus the technical logs any website keeps for security.
Used to respond to you
To answer enquiries, prepare demos and proposals, and keep a record of that correspondence. Nothing else without asking.
Never sold, never used for ads
No advertising networks, no cross-site tracking. We share only with the providers that run our systems.
Your rights
Access, correct, delete or restrict your data, withdraw consent, and raise a grievance. We reply within a month.
1.Who we are
HAROM India Private Limited is a company registered in India (CIN U74909PB2025PTC064281) with its registered office at F-468, 3rd Floor, Industrial Area, Focal Point, Sahibzada Ajit Singh Nagar (Mohali), Punjab 140308. For personal data collected through this website we are the data fiduciary under India’s Digital Personal Data Protection Act, 2023 and the controller under the EU and UK GDPR where those laws apply to you. You can reach us at info@haromindia.com or by post at the address above.
2.What this notice covers
This notice applies to haromindia.com and its forms (Talk to a PV Expert, Request a Demo, Submit an RFP), together with the e-mails we exchange as a result. It does not cover personal data we process inside HAROM OnePV or while delivering pharmacovigilance services to a client: there we act on the client’s instructions, and the client’s own privacy notice and our contract with them apply.
Please do not send patient information, adverse event reports or other health data through the website forms. Individual case safety information must go through the pharmacovigilance channels agreed with us in writing.
3.What we collect
| Category | What it includes | Source |
|---|---|---|
| Contact and enquiry data | Name, work e-mail, company, job title, phone (optional), country, organisation type, what you are interested in, and your message. | You, through our forms. |
| Request for proposal data | The areas, services, applications and markets you select, timeline, deadline, your brief, and any document you upload or link to. | You, through the RFP form. |
| Correspondence | The e-mails, calls and notes that follow your enquiry, including proposals. | You and HAROM staff. |
| Technical data | IP address, browser and device type, pages requested, date and time of access. | Automatically, from the systems that serve the site. |
We do not ask for special categories of personal data (such as health data) or financial data through this website. The forms are for business enquiries.
4.Why we use it and on what basis
| Purpose | Legal basis |
|---|---|
| Answer your enquiry, arrange a demo or prepare a proposal, and send you an acknowledgement | Your consent, given on the form; steps taken at your request before a contract (GDPR Art. 6(1)(b)). |
| Keep a record of proposals and correspondence | Our legitimate interest in managing business relationships (GDPR Art. 6(1)(f)). |
| Run, secure and improve the website | Our legitimate interest in keeping the site available and secure; legitimate uses under the DPDP Act. |
| Meet legal, regulatory and accounting obligations | Legal obligation (GDPR Art. 6(1)(c)); obligations under Indian law. |
Every form asks you to confirm that HAROM may contact you before you can submit it. You can withdraw that consent at any time by writing to info@haromindia.com; we then stop the processing that relied on it and delete the data unless a legal obligation or a contract requires us to keep it. We do not use website data for automated decision-making, profiling or marketing without asking first.
6.Where it is kept and international transfers
Personal data collected through this website is stored on secure cloud infrastructure in India and accessed by HAROM staff in India.
If you contact us from the European Economic Area, the United Kingdom, Switzerland or another country with data-export rules, sending your enquiry involves a transfer of your data to India. We protect those transfers through the commitments in this notice, through our providers’ data processing terms, which incorporate the EU Standard Contractual Clauses and the UK Addendum where they apply, and through the security measures below. Ask us at info@haromindia.com for more information about these safeguards.
7.How long we keep it
| Data | Retention period |
|---|---|
| Contact and demo enquiries, with their correspondence | Up to 24 months after our last exchange with you. |
| Requests for proposal, including uploaded documents | Up to 24 months after our last exchange, or for the life of the contract plus 7 years if the RFP leads to an engagement. |
| Technical logs | Up to 12 months, for security and troubleshooting. |
Where a law requires a longer period, or data is needed for a live dispute, we keep it for as long as that requires and no longer. After that it is deleted or anonymised.
8.How we protect it
We apply the same controls to website data that we apply across our pharmacovigilance systems:
- Encryption — in transit (HTTPS) and at rest.
- Access control — only named staff with a business need; administrative access requires multi-factor authentication and is reviewed.
- Private storage — uploaded RFP documents are held in storage that blocks all public access.
- Logging, monitoring and backups — access is logged and reviewed, and data is backed up on a defined schedule.
No system is entirely free of risk. If a personal data breach affects you, we will inform you and the relevant authority as the law requires.
10.Your rights and how to raise a concern
Depending on where you are, you can ask us to:
- give you access to the personal data we hold about you and how we use it;
- correct or complete it;
- delete it, unless we must keep it for a legal reason;
- restrict how we use it, or object to processing based on our legitimate interests;
- provide it in a portable format, where that right applies;
- stop processing based on consent, at any time;
- act on the instructions of a person you nominate, under the DPDP Act.
Write to info@haromindia.com from the e-mail address you used with us, or by post. We may ask you to confirm your identity. We respond within one month; complex requests may take up to two further months and we will tell you why.
If you have a concern about how we have handled your data, contact our Grievance Officer at info@haromindia.com, marking your message “Privacy grievance”, or by post at F-468, 3rd Floor, Industrial Area, Focal Point, Sahibzada Ajit Singh Nagar (Mohali), Punjab 140308. We acknowledge grievances within 2 business days and aim to resolve them within 30 days. You may also complain to the Data Protection Board of India or, in the EEA or the UK, to your supervisory authority or the UK Information Commissioner’s Office.
11.Changes and contact
We review this notice at least once a year and whenever our website, systems or the law change. The date and version at the top show when it was last updated; material changes are highlighted on this page.
E-mail: info@haromindia.com · Post: HAROM India Private Limited, F-468, 3rd Floor, Industrial Area, Focal Point, Sahibzada Ajit Singh Nagar (Mohali), Punjab 140308
Questions or requests
Write to us about anything in this document, or to exercise your rights. The same team that handles the request replies.
See also: Terms of Service · Cookie Policy