THIS PRIVACY POLICY SETS FORTH THE MANNER OF COLLECTION, USE, AND DISCLOSURE OF INFORMATION GATHERED ON THE PLATFORM. PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY CONTINUING TO ACCESS THE PLATFORM, YOU AGREE TO THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THE SAME, YOU MUST NOT ACCESS OR USE THE PLATFORM OR AVAIL ANY OF THE SERVICES.

This Privacy Policy ("Policy") sets out the manner in which Usekiwi Infosolutions Private Limited ("Company", "We", "Us", "Our") collects, uses, and discloses information through its information exchange platform, where the hospitals' requirements on basis of their ongoing consumption pattern shall be communicated to the pharma companies and the pharma companies can submit their quotations for the sale of their respective products ("Platform").

By accessing or using the Platform or Services, You ("User", "Guest", "You", "Your") consent to the collection, storage, use, and disclosure of Your information, including "Personal Data" (any information relating to an identified or identifiable individual, including employees and users), in accordance with this Policy. If You do not agree, You must refrain from using the Platform or Services. Use of the Platform is also governed by Our Terms and Conditions ("Terms").

This Policy should be read together with any specific notices provided when We collect or process Your Personal Data, to help You understand the purposes and methods of such processing. This Policy does not apply to websites, applications, or services operated by third parties, including affiliates or business partners, even if linked to the Platform. We encourage You to review their privacy policies separately.

We may update this Policy from time to time at Our discretion. Continued use of the Platform constitutes Your acknowledgment and acceptance of such changes.

TYPE OF INFORMATION COLLECTED

When registering and creating an account, the Users may be required to provide personal, non-personal, and other information, as indicated below (such information and correspondences hereinafter collectively referred to as "Information"):

User Information. When you register on our Platform, we may collect personal information such as your name, email address, phone number, and organization details. Organization details may include corporate registration data, licensing information, details of authorized representatives, employment credentials, and any other information deemed necessary for onboarding and verification.

Inventory and Transaction Data, including inventory requirements submitted by hospitals, such as product specifications, quantities, and procurement schedules. Pharmaceutical companies may provide quotations, pricing details, stock availability, regulatory documents, and purchase terms. Additionally, order details, invoices, transaction history, etc., on the Platform are collected.

Hospital Data. All information provided by hospitals on the Platform, including but not limited to medicine usage, requirements, procurement patterns, and inventory levels.

Usage Data. We track interactions with the Platform, including browsing behavior, product searches, time spent on different sections, and preferences to enhance user experience.

Non-Personal Information. We collect non-personal information during Platform visits, including domain, host, IP address, operating system, browser type, cookies, and internet service provider. This information is not personally identifiable.

Permitted Information. Where you opt to provide any device permissions, such as contact list, photos, camera, location, microphone, SMS, storage, and phone calls, the Company may retrieve, retain, and use the data sourced through such device permissions.

Automatic Information. For enhanced Platform responsiveness, we utilize cookies and electronic tools to gather data on individual interests. This includes but is not limited to the server logs with details like web requests, IP addresses, browser type, language, date, time, and unique browser identifiers, primarily for user authentication.

Mobile. When accessing the Platform via mobile, we may obtain location and device information, using it to provide service-related suggestions if needed.

Communications and Other Data. We retain emails, enquiries, feedback, survey responses, logs, and optional information (such as social background or affirmative action eligibility), including details exchanged via linked social media accounts.

Please note:

• The provided list is illustrative, not exhaustive.
• Publicly available information is not considered sensitive.
• We do not ensure the accuracy or moderation of such content but reserve the right to remove offensive, discriminatory, or inappropriate material at our discretion.
• We collect only such Information as is relevant and voluntarily provided to enable Us to provide You access to the Platform, deliver Services, facilitate support, improve the Platform, and prevent fraud or unlawful activities.

You may, at any time, choose not to provide Us with the Information. However, in such a case, We may not be able to offer You (partially or entirely, as the case may be) access to the Platform and Services provided by Us. We will not be liable and/or responsible for the denial of access to the Platform to You on account of the inadequacy of the Information.

We may contact You from time to time about updates of Information to provide You with such features that We believe may benefit/interest You.

USE OF INFORMATION

The collected information may be utilized, stored, and processed by Us to deliver, personalize, measure, and enhance our Services and to establish and sustain a secure and trusted environment on the Platform, including compliance with our legal obligations and adherence to our policies.

You provide Us consent that we may process, share, or otherwise transfer your Personal Data with identified third parties for the purposes specified in this Privacy Policy, Terms, and applicable laws. We may also release Your information when We believe release is appropriate to comply with the law, enforce Our Platform policies, or protect Ours or others' rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

We reserve the right to use Your and/or your organization's name and non-personally identifiable information for business and advertising purposes.

We may process the Information in the following manner:

• facilitating your access to various features within the Platform.
• personalizing Your experience, enhancing Platform features, and improving user-friendliness.
• create statistical or analytical insights tailored to the requirements of the User.
• complying with our policies and applicable laws.
• product/service refinement and marketing purposes.
• analyzing information to suggest relevant products/services and improve Platform functionality.
• contacting You, customizing communication, and using the provided email for updates and information.
• Preventing fraud and illegal activities, and protecting Platform security and integrity.

SHARING OF INFORMATION

We may share Your Personal Data with partners, affiliates, service providers, vendors, agents, and administrators as necessary for the operation of the Platform and delivery of Services, in compliance with applicable laws.

We may avail third-party services to carry out tasks on Our behalf. These service providers will only have access to Your information as required to fulfil their duties and are bound to uphold the confidentiality of the information.

Information may be shared with sector-specific organizations, authorities, or partners solely for collaborative or service-enhancement purposes.

Information related to Your activity may be used for analytics purposes to improve the overall functionality and User experience.

In cases of business disposition, such as mergers, sales, or business acquisitions, we may transfer the collected information to the relevant third party.

Access to Personal Data is limited to authorized employees. Disclosures may also occur to meet legal, regulatory, or judicial requirements. Cross-border transfers of Personal Data, if any, shall comply with applicable data protection laws.

DATA RETENTION

We retain Your Information only for as long as necessary to provide Platform and Services, comply with legal or contractual obligations, or fulfill legitimate business interests.

We will keep Your Personal Data are as follows: (i) for the duration of Your relationship with Us and provision of the Platform; (ii) where retention is required under law (e.g., transaction or bookkeeping records); or (iii) where necessary to protect Our legitimate interests, such as in connection with litigation or regulatory investigations.

Once retention is no longer required, Personal Data will be securely deleted or anonymized in accordance with applicable laws.

DATA SECURITY

We employ reasonable technical, organizational, and security measures, including firewalls and secure server environments, to protect Information against unauthorized access, loss, misuse, alteration, or disclosure.

Access to Personal Data is strictly limited to authorized employees, agents, contractors, legal counsels, and third parties on a need-to-know basis, subject to Our instructions and confidentiality obligations.

We maintain procedures to detect and respond to data breaches and, where legally required, will promptly notify You and the relevant authorities.

DATA SECURITY OFFICER

The Company has appointed a Data Security Officer ("DSO") responsible for overseeing User data protection, ensuring compliance with applicable privacy laws, and maintaining robust security measures, including encryption, access controls, and incident response. The DSO works with internal teams and external experts to continuously improve security practices. For any information security concerns, You may contact apix@affordplan.com.

LINKS TO THIRD-PARTY WEBSITES AND ADVERTISING

The Platform may contain links to third-party websites or applications ("Third-Party Portals"), which are governed by their own privacy policies. Once You leave Our Platform, the handling of Your information is subject to the third party's policy, not Ours.

We may share limited Personal Data with third-party advertisers or ad-servers, and engage service providers to display ads on Our behalf. These entities may collect anonymous information about Your visits to improve ad relevance.

LEGAL AGE

Access to the Platform is restricted to Users aged 18 or above, or such higher minimum age as prescribed by applicable local laws. Users not meeting this requirement are not permitted to access or use the Platform.

COOKIES

We use cookies, small data files stored on Your device, to analyze usage, improve Services, and measure promotional effectiveness. Certain features may require cookies to function properly.

You may configure Your browser to refuse cookies or alert You when they are sent; however, some features of the Platform may not work as intended if cookies are disabled.

By using Our Platform and agreeing to this Privacy Policy, you consent to our use of cookies in accordance with the terms outlined herein.

RIGHTS AND DUTIES OF THE USER

Users, having given consent, are entitled to request a summary of their Personal Data from the Company.

Correct, update, complete, or erase Personal Data, unless retention is required for legal or contractual purposes.

Access grievance redressal provided by the Company. However, Users are obligated to exhaust internal avenues for grievance resolution before approaching external bodies.

When the processing of Personal Data is based on User consent, the User can withdraw that consent at any time. It is clarified that such withdrawal shall not affect the legality of the processing of personal data based on consent before its withdrawal. Further, such processing shall be stopped if so requested at the time of withdrawal.

Comply with all applicable laws while interacting with the Company's services.

Refrain from impersonating another person when providing their Personal Data for any specified purpose.

Provide full and accurate information without suppressing any material details when submitting Personal Data for any documentation, unique identifiers, or proofs.

Avoid submitting false or frivolous grievances or exercising rights in bad faith.

TERMINATION OR INACTIVATION OF ACCOUNT

Users may request account termination or inactivation in writing, via customer care, or through any Platform-provided option.

Upon request, We will delete the account.

Provided, however, that the Company may, at its sole discretion, continue to maintain data, records of transactions and activities conducted on the Platform for record-keeping, regulatory compliance, and archival purposes, as permitted under applicable laws. The deletion, inactivation, or termination of your account shall not affect any rights, liabilities, or obligations accrued prior to such deletion or termination.

The Company reserves the right to terminate or suspend Your access to the Platform at any time and for any reason with one month's prior notice.

Account deletion may be delayed in cases of disputes, unresolved claims, or suspected fraud. Once resolved, relevant information will be deleted and cannot be recovered.

For Users whose accounts have been disabled, these accounts can be re-enabled by the Company at its discretion. However, Users whose accounts have been deleted will need to sign up again as new Users to regain access to the Platform.

NOTICE

Other than as consented hereof, every request made to the User for consent with regard to the processing of the Personal Data shall be accompanied or preceded by an intimation given by the Company to the User, informing the User of the Personal Data and the purpose for which the Personal Data is proposed to be processed. Further, the notice shall include the right to withdraw and the right to seek grievance redressal by the User. The notice shall also include the manner in which the User may make a complaint to the Data Protection Board as may be prescribed under the provisions of law, in force.

CONFIDENTIALITY AND SECURITY

The Company prioritises the security and confidentiality of Your Personal Data and implements reasonable technical, organisational, and contractual measures, including when engaging external service providers. Personal Data is protected regardless of its storage or transfer location.

Notwithstanding any other provisions contained hereunder, User acknowledges that the obligations related to confidentiality shall not pertain to any information which:

• is in the public domain or comes into the public domain through no wrongful act on the part of the Company; or
• is already known to the Company and/or its representatives; or
• is received by the Company and/or its representatives on a non-confidential and/or anonymous basis from a User or third party; or
• is received by the Company and/or its representatives from a third party without breach of any agreement by the Company; or
• is independently developed by the Company and/or its representatives without breach hereunder; or
• is approved for release by written authorization of the User; or
• is required to be disclosed by law, court order, or competent authority, in which case We will provide reasonable prior notice and seek protective measures where possible.

The Company complies with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and other applicable laws, ensuring reasonable and adequate protection of Your Personal Data.

ACCOUNT PROTECTION

The secret to Your account or profile is Your login credentials and password. You will be completely accountable for all actions taken using Your login, as well as for maintaining the security of Your password. You may lose significant control over Your personal information and may be subject to legally binding acts done on Your behalf if You disclose Your password or personal information to others. You are also solely liable for any actions taken under Your login.

DISCLAIMER

The Company does not store account-related or payment information. Transactions may use third-party payment gateways, and any payment details provided are handled solely by them. The Company is not liable for any security breach or disclosure of Personal Data voluntarily shared by You that was not requested during registration.

CONTACT INFORMATION

In case you have any grievances, questions, concerns, or requests regarding this Privacy Policy or Our data practices, please contact Us at grievance@affordplan.com.