Privacy and Data Handling Policy
This policy explains how Ontex Medical Devices Manufacturing Private Limited ("we", "us") handles information from visitors to this website, from people who use ONTEX Care (our size help and size exchange service), from customers who contact us, and from Amazon when we use Amazon's Selling Partner API to manage our own Amazon seller account. We follow the Digital Personal Data Protection Act, 2023 and Amazon's Acceptable Use and Data Protection Policies.
1. Website visitors and enquiries
We use no analytics or advertising trackers. We count how many times each page is viewed each day, without cookies and without storing your IP address. The website sets one cookie only if you sign in to ONTEX Care (section 2), to keep you signed in for up to 30 days; signing out removes it.
If you send us an enquiry through the contact form, e-mail or phone, we collect the details you give us (name, organisation, e-mail, phone and message) and use them only to answer your enquiry and to supply products you order. Contact form messages reach our mailbox through our website host (Cloudflare) and our e-mail delivery provider (Resend), over encrypted connections. We keep enquiry records for up to 3 years, and invoices for as long as Indian tax law requires. We do not sell or rent this information.
2. ONTEX Care (size help and size exchange)
- Sign-in with Google. To use the ONTEX Care chat and the size exchange, you sign in with your Google account. Google shares your name, e-mail address and a Google account ID with us. We don't receive your password, and we don't access your Gmail, contacts, files or anything else in your Google account.
- What we keep: your Google name, e-mail address and account ID, and when you signed in; your questions to the ONTEX Care chat and its answers (we remove phone numbers, e-mail addresses and order numbers you type); and, if you request a size exchange, the details you enter in the form (name, mobile number, e-mail, address with PIN code, where you bought, the stocking, sizes, number of pairs, the reason and any note).
- Why: to answer your questions, to follow up with you about them, to handle your exchange, courier your replacement and tell you when it is shipped, and to see how many people use ONTEX Care so we can improve it. We don't use your details for marketing, we don't send you offers, and we don't sell or rent them.
- E-mails we send you. We e-mail you only about your own request: when your replacement is shipped (courier and tracking number). We never send offers or newsletters, and we never ask you for a review.
- Who sees them: people authorised by Ontex to handle ONTEX Care, each signing in with their own Google account protected by 2-step verification; we keep a record of who opened or updated each request. We e-mail each chat, each exchange request and each shipping notice to our own business mailboxes (goswami@ontexmedical.com and cs@ontexmedical.com) so that we can follow up. Your name, address and mobile number go to the courier for your replacement. Service providers process the data for us under their terms: Cloudflare (website, database and the AI model that writes the chat answers), Google (sign-in and our business e-mail) and Resend (e-mail delivery).
- Automatic answers. Chat answers are written by an AI model and are general information, not medical advice. For medical questions, ask your doctor.
- How long we keep it: chat conversations for 6 months; your sign-in record for 12 months after your last sign-in; exchange requests for 12 months after the exchange is closed. Then we delete them, including the copies in our mailboxes. The record of who opened or updated a request is kept for 12 months. Daily counts with no personal details may be kept longer.
- Your choice. Using ONTEX Care is optional. Size help is also on the product listing and the box. You can withdraw your consent at any time by signing out and asking us to delete your details, by writing to cs@ontexmedical.com or to the grievance officer (section 6).
- ONTEX Care is meant for adults. If you are under 18, please ask a parent or guardian to use it for you.
3. Data we receive from Amazon
We use Amazon's Selling Partner API only to manage our own Amazon seller account. Through the API we do not request buyers' names, addresses, phone numbers or e-mail addresses.
- Collection. We collect only what we need to run our store: our listings, prices, inventory and shipments, order status and order totals (with the delivery city, state and PIN code, but no name or street address), fees, settlements, advertising and performance reports. It is fetched directly from Amazon over encrypted HTTPS connections, using credentials issued to us by Amazon.
- Tax invoices. Indian GST law requires us to keep our tax invoices, and the invoices Amazon issues for our sales show the buyer's name and billing address. We download them from Seller Central, keep the name and address only in one password-encrypted register used for our tax records, and delete the downloaded copies once the register is checked. We never use these details to contact buyers, for marketing, or for ONTEX Care.
- Processing and storage. On our office computer, in a project folder used only by our own staff and our AI assistant; in a private GitHub repository that holds our working notes and reports, with no buyer names, addresses or contact details; in isolated cloud workspaces that Anthropic provides for our AI assistant; and in our Cloudflare account (the database and host of our internal sales dashboard), which holds no buyer names or street addresses and which Cloudflare encrypts at rest. Our Amazon API credentials are kept on that computer and as encrypted secrets in our Cloudflare account, never in website code, in GitHub or in the AI assistant's workspaces.
- AI assistant. Anthropic's Claude helps us analyse this data and prepares actions that we supervise. We do not give it buyers' addresses; it sees a buyer's name only when it helps us read and answer a message the buyer sent us in Seller Central.
- Use. Amazon data is used only to operate our own Amazon business. We do not sell it, use it for advertising outside Amazon, or combine it with data from other sellers.
- Sharing. We share Amazon data only with service providers acting on our behalf, under their terms: Cloudflare (hosting and database), Anthropic (AI assistant and its cloud workspaces), GitHub (private storage of our working notes and reports), Google (our business e-mail, which receives our own sales reports) and Resend (delivery of those reports by e-mail). We share nothing else with any third party unless the law requires it.
- Disposal. Working data is deleted when no longer needed, and within 12 months at most unless the law requires longer. The tax-invoice register is kept only for the period GST law requires, then deleted.
4. Security
We protect information with encryption in transit and at rest, individual accounts with multi-factor authentication, access limited by job role, secure storage of credentials, and logging and monitoring. If a security incident affects Amazon data, we notify Amazon at security@amazon.com within 24 hours of detection, and we notify affected persons and authorities where the law requires.
5. Your rights
You can ask us to access, correct or delete personal data we hold about you, or withdraw your consent, by writing to the contact below. We respond within 30 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
6. Contact and grievance officer
Gopinath Narayan Goswami, Director
Ontex Medical Devices Manufacturing Pvt Ltd, AC 27/B1, SIDCO Industrial Estate, Thirumudivakkam, Chennai, Tamil Nadu 600044, India
Email: goswami@ontexmedical.com · Phone: +91 98410 19047