Desbro Privacy Policy

Introduction and Commitment to Privacy

Desbro ("Desbro," "we," "us," or "our") is committed to protecting the privacy of all individuals who share personal data with us—including our website visitors, customers, distributors, and employees. Your privacy is important to us, and we strive to take reasonable care in handling and safeguarding your personal information in compliance with applicable laws and industry standards. In this regard, we adhere to relevant data protection regulations in India and internationally, as well as guidelines specific to the medical sector, such as those issued by the Central Drugs Standard Control Organization (CDSCO). This Privacy Policy outlines how we collect, use, disclose, and protect your personal data, and the choices you have regarding that information.

Scope of This Privacy Policy

This Privacy Policy applies to personal information that Desbro collects and processes in the course of our business, including:

• Website Visitors: Individuals who visit or interact with our website (e.g., browsing our pages or submitting inquiries).
• Customers: Individuals or entities who purchase or use our medical devices and surgical solutions, or who contact us for product information, support, or services.
• Distributors: Individuals or entities who partner with us to distribute our products.
• Employees and Staff: Individuals who are employed by Desbro, as well as job applicants, interns, contractors, or consultants.

By using our website or services, or by providing personal information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please do not use the website or provide personal data to us.

Personal Data We Collect and Use

We collect only the information that is necessary for legitimate business and legal purposes. The types of personal data we may collect depend on your interaction with us:

1. Information from Website Visitors

When you visit our website, we automatically collect certain technical information for statistical and security purposes:

• Device and Log Information: Your IP address, browser type, operating system, date and time of visit, and pages you viewed on our site.
• Cookies: Our website may use cookies to enhance your browsing experience. You can disable cookies through your browser settings.
• Contact Forms: If you use contact forms, quote requests, or distributor applications, you may provide personal details like name, email address, phone number, or company information.

2. Information from Customers

If you are a customer or prospective customer of Desbro, we may collect:

• Contact Details: Name, job title, organization, postal address, phone number, and email address.
• Transactional Information: Records of products or services you have inquired about or purchased, such as device serial numbers, purchase dates, warranty details, and service history.
• Financial Information: Billing details like billing address or taxpayer identification. We use secure third-party payment processors and do not store full credit/debit card details.

3. Information from Distributors

If you are a distributor or potential distribution partner, we may collect:

• Business information including company name, registration details, and business licenses
• Contact information of key personnel
• Financial and banking information for business transactions
• Distribution territory and capacity information

4. Information from Employees and Job Applicants

Desbro collects personal information from employees and applicants for employment and human resources management, including identification, employment details, payroll information, and health data where necessary for benefits or workplace safety.

How We Use Personal Data

We use the personal data we collect for legitimate business purposes, including:

• Providing Products and Services: To process orders, deliver our surgical devices, provide training or support, and ensure product safety and quality.
• Customer Support: To respond to your inquiries, requests, or complaints, and to provide important product updates or safety notices.
• Improving Our Offerings: To improve our website, products, and services by analyzing usage patterns and customer feedback.
• Marketing Communications: With your consent, to send information about new products, industry events, or company news. You can opt out at any time.
• Legal and Regulatory Compliance: To comply with laws and regulations applicable to medical device manufacturers, including reporting to regulatory authorities like CDSCO.
• Business Operations: To manage distributor relationships, process payments, and maintain business records.

Sharing and Disclosure of Personal Data

Desbro respects the confidentiality of your personal data. We do not sell or trade personal information to third parties. However, we may share your data in certain circumstances:

• Within Desbro: With authorized staff who need it to perform their duties.
• Service Providers: With trusted third-party service providers who process data on our behalf (logistics, payment processors, IT services, etc.).
• Regulatory Bodies: With government authorities or regulatory bodies when required by law, such as CDSCO for compliance or device-related reporting.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity.
• With Your Consent: In other cases, only with your explicit permission.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Website visitor data is typically retained for a short period, customer data is kept for the duration of your relationship with us and a reasonable period thereafter, and employee data is retained as required by law.

Data Security Measures

Desbro takes the security of your personal data very seriously. We have implemented technical and organizational measures to protect your information from unauthorized access, loss, alteration, or misuse. These include:

• Access controls ensuring only authorized personnel can access personal data
• Encryption and security protocols (SSL/TLS) for data transmission
• Regular security assessments and monitoring
• Physical security controls at our facilities
• Employee training on data protection and confidentiality

While we strive to protect your personal data, no method of transmission over the Internet is completely secure. In the event of a data breach affecting your personal data, we will notify you and appropriate regulators as required by law.

Your Rights and Choices

Depending on applicable laws, you may have the following rights regarding your personal information:

• Right to Access: Request information about the personal data we hold about you.
• Right to Correction: Ask us to correct inaccurate or incomplete data.
• Right to Deletion: Request deletion of your personal data when no longer necessary.
• Right to Withdraw Consent: Withdraw consent for processing based on consent (such as marketing emails).
• Right to Object: Object to processing of your data in certain situations.
• Right to Lodge a Complaint: File a complaint with a relevant data protection authority.

To exercise any of these rights, please contact us using the information provided below.

International Data Transfers

Desbro is an Indian company with operations primarily in India. If you are located outside of India, please be aware that any information you provide will be transferred to and processed in India. We ensure that such transfers are done securely and in compliance with applicable data protection requirements.

Compliance with Medical Sector Regulations

As a medical device company, Desbro operates under additional frameworks and guidelines:

• We comply with CDSCO rules and guidelines for medical devices in India
• We follow the Medical Devices Rules, 2017 for proper record-keeping and reporting
• We adhere to reasonable security practices as required by the Information Technology Act, 2000
• We implement Privacy by Design and Security by Design principles in our product development

Children's Privacy

Our products and services are not directed to children under 18 years of age. We do not knowingly collect personal information from minors without appropriate parental or guardian consent. If we become aware that we have inadvertently collected such data, we will take steps to delete it.

Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated version on our website and update the "Last Updated" date. For significant changes, we may provide more prominent notice. Your continued use of our services after changes indicates acceptance of the updated terms.

Last Updated: November 8, 2025