Privacy Policy

Complete Pharma Marketing Solution (CPMS)

Effective Date: October 27, 2026 | Last Updated: October 27, 2026

Kumudini Pharma Limited ("we", "our", or "us") respects your privacy and is committed to protecting information processed through the Complete Pharma Marketing Solution (CPMS) mobile application.

CPMS is designed for authorized pharmaceutical company personnel to manage work plans, attendance, field visits, doctor and chemist information, prescription-related activities, sales orders, and related business operations.

This Privacy Policy explains what information CPMS may collect, how that information is used, how it may be shared, how it is protected, and how users can request deletion of their personal information.

1. Information We Collect

1.1 Personal and Account Information

Depending on the features used, CPMS may process:

• Employee name and employee identification number.
• User ID and account authentication information.
• Mobile phone number and email address, where provided.
• Job designation, territory, market, depot, and employment-related information.

This information is used to authenticate authorized users, manage accounts, assign permissions, and support company operations.

1.2 Location Information

CPMS may access device location, including GPS coordinates, when location permission is granted and a relevant feature uses that information.

Location information may be used to:

• Record employee attendance and field visits.
• Associate attendance or business activities with a location.
• Support authorized field-force monitoring and reporting.

Location collection must follow the permissions and disclosures applicable to the feature. If a CPMS feature collects location while the application is in the background, that collection must be specifically disclosed to users before it occurs.

1.3 Business and Field Activity Information

CPMS may process business information such as:

• Work plans, customer visits, and daily call reports.
• Doctor and chemist registration details.
• Professional contact information and business addresses.
• Prescription-related records and product information.
• Sales orders, order items, and related transactions.
• Attendance records, visit dates, and visit times.
• Survey responses and operational reports.

This information supports pharmaceutical sales operations, customer servicing, field-force management, and authorized business reporting.

1.4 Photographs and Camera Access

Where supported features require photographs, CPMS may use the device camera to capture business-related images, such as signboard photographs or visiting cards.

Images may be stored locally and transmitted to company systems when the relevant record is synchronized, depending on the feature. Camera access is subject to the applicable device permissions.

1.5 Device and Technical Information

CPMS may process technical information necessary for authentication, application operation, synchronization, and troubleshooting. Depending on the implementation, this may include application version, device identifiers used by the app, synchronization status, timestamps, and technical error information.

2. How We Use Information

Information processed through CPMS may be used to:

• Authenticate employees and manage account access.
• Record attendance and field visits.
• Create and manage work plans.
• Maintain doctor, chemist, customer, and product records.
• Manage prescription-related activities and sales orders.
• Synchronize records with authorized company servers.
• Generate business and management reports.
• Maintain system security, accuracy, and reliability.
• Resolve technical problems and comply with applicable legal obligations.

3. Local Storage and Data Synchronization

CPMS may store business records locally on the user's device to support data entry when internet connectivity is unavailable.

When connectivity is available, eligible records may be transmitted to designated company servers or databases for processing and storage.

Records may remain on the device until synchronization succeeds or the records are removed in accordance with the application's functionality and applicable retention procedures. Users should protect their devices and keep their account credentials confidential.

4. Sharing of Information

We do not sell personal information. Information may be disclosed when necessary for the purposes described in this policy, including:

• Authorized company personnel: Managers, administrators, and employees with appropriate permissions may access relevant business records.
• Service providers: Authorized IT, hosting, and technical service providers may process information when necessary to maintain or support the application and its systems.
• Legal requirements: Information may be disclosed when required by applicable law or valid legal process.
• Business transactions: Information may be transferred as part of a lawful business restructuring or transfer, subject to applicable legal requirements and safeguards.

5. Data Security

Kumudini Pharma Limited takes reasonable technical and organizational measures to protect information against unauthorized access, disclosure, alteration, loss, or destruction.

Safeguards may include access controls, account authentication, restricted database access, secure network transmission where configured, and appropriate system maintenance.

No electronic storage or transmission method is completely secure. We work to maintain appropriate safeguards but cannot guarantee absolute security.

6. Data Retention and Deletion

Information is retained for as long as reasonably necessary for application services, business operations, recordkeeping, security, dispute resolution, and compliance with applicable legal or regulatory obligations.

When information is no longer required, appropriate steps will be taken to delete or anonymize it, subject to applicable retention obligations.

Requesting Account or Personal Data Deletion

Users may request deletion of their CPMS account and associated personal information by contacting the application support team using the contact details below. We may ask for information necessary to verify the user's identity and authority. Please never send your password.

Requests will be reviewed and processed in accordance with applicable law and legitimate retention obligations. Certain business records may need to be retained where required by law or for legitimate recordkeeping purposes. Any applicable limitations will be handled in accordance with legal requirements.

Account deletion may result in loss of access to CPMS. Contacting support to request deletion does not itself mean that deletion has already been completed.

7. User Responsibilities

Users are responsible for:

• Keeping account credentials confidential.
• Using CPMS only for authorized company activities.
• Providing accurate business information.
• Protecting devices against unauthorized access.
• Reporting suspected unauthorized access or lost devices.
• Handling customer and professional information in accordance with company procedures and applicable laws.

8. Application Permissions

Depending on enabled features, CPMS may request the following Android permissions:

• Location: To support attendance and location-dependent field activities.
• Camera: To capture business-related photographs.
• Photos or media: To select or manage images where supported.
• Internet and network access: To authenticate users and synchronize records with company systems.
• Notifications: To provide application notifications where enabled.

Users can manage permissions through their device settings. Denying a required permission may prevent the corresponding feature from working.

9. Children's Privacy

CPMS is intended for authorized adult employees and business users. It is not designed or marketed for children, and we do not knowingly seek to collect children's personal information through the application. Please contact us if you believe a child has submitted personal information through CPMS.

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to CPMS, data-handling practices, legal requirements, or applicable platform policies.

Updated versions will be published on our official website with a revised update date. Where required, additional notice or consent will be provided.

11. Contact Information

12. Account Deletion Requests

Users who wish to delete their CPMS account or associated personal information may contact the support team using the telephone numbers provided in Section 11.

If an online account-deletion request page becomes available, its public link will be provided here. Requests are subject to identity verification and applicable data-retention requirements.

---

This Privacy Policy applies to the Complete Pharma Marketing Solution (CPMS) mobile application operated by Kumudini Pharma Limited.