Legal
Privacy policy
What personal data we collect, why, who sees it, where it is stored, how long we keep it, and your rights.
Last updated: 15 October 2026
Who we are
This website is run by TrialGuna Private Limited (CIN U73100KA2021PTC146563), with its registered office in Bengaluru, India. In this policy, "we" and "us" mean TrialGuna.
We decide why and how your personal data is used. Under India's Digital Personal Data Protection Act, 2023 (the DPDP Act) and its Rules, this makes us the "data fiduciary". We also follow the Information Technology Act, 2000 and its rules on sensitive personal data, which cover health information.
What we collect, and why
We collect only what we need, and mostly only what you choose to send us.
| When | What we collect | Why |
|---|---|---|
| You send our enquiry form | Name, work email, company, the area you need help with, your message | To reply to you and discuss our services |
| You report a side effect (by email or phone) | Who you are (patient, carer, pharmacist, doctor or other), your contact details, the patient's initials (never the full name), age and sex, the product, batch, dose, what happened, when, how serious it was, and the outcome | To monitor product safety and meet drug safety law |
| You apply for a job or internship | Name, email, phone, the team you are applying to, your LinkedIn profile, your CV and your note | To consider you for roles at TrialGuna |
| You register to volunteer for a study | Name, age range, city, contact details, how you prefer to be contacted | To tell you about studies you might join. We ask for health details only when a specific study needs them, and only with your consent |
| You email, call or message us on WhatsApp | Whatever you choose to share | To answer you |
| You visit any page | Your IP address, the page, the date and time, and your browser type. Our web host records these automatically in server logs | To keep the website secure and working, and to count visits |
Side effect reports and study health details are sensitive personal data (health information). We collect them only with your consent, or where the law requires us to.
Our legal basis
- Your consent, which you give when you send a form or email us. The enquiry form asks you to agree before you send it.
- Legal duties. Drug safety law requires us to record and pass on side effect reports.
- Keeping the website secure, for example server logs and our spam protection.
You can withdraw your consent at any time, as easily as you gave it: email us at the address below. This does not affect anything we did before, or data the law requires us to keep.
Cookies and tracking
This website sets no cookies. It uses no advertising, no tracking pixels and no third-party analytics. Our web host makes simple visit counts from its server logs; these do not identify you to us. See our cookie notice.
Spam protection
To stop spam, our enquiry form keeps a scrambled (hashed) copy of the sender's IP address for up to one day. It cannot be turned back into the IP address, and we use it for nothing else.
Who we share your data with
- Our staff: only those who need it for the purposes above.
- Our service providers, who process data for us under contract:
- GoDaddy, our web host. Its server for this website is in Singapore. Messages, applications and CVs sent through our forms are kept there in a private folder that is not reachable from the web.
- Microsoft 365, our email. Microsoft may store email in India or abroad.
- WhatsApp (Meta), if you choose to message us there.
- For side effect reports, where the law requires: the company that holds the product's licence, and India's drug safety authorities, such as PvPI (the Pharmacovigilance Programme of India) and CDSCO (India's drug regulator).
- Authorities, if the law requires us to.
We do not sell your data, and we do not use it for advertising.
Data stored outside India
Some of your data is stored outside India, as set out above (for example, on our web host's server in Singapore). Indian law allows this, except to countries the Government restricts. We use providers that protect data to a high standard.
How long we keep it
- Enquiries: only as long as we need them to answer you and follow up. Then we delete them.
- Side effect reports: as long as drug safety law requires.
- Job applications and CVs: until the role is filled. If you agree, we keep them for future roles. We delete them when you ask.
- Volunteer details: until you ask us to delete them, or until we no longer run studies you could join.
- Server logs: our web host keeps them for a limited time, then deletes them.
- Spam protection data: up to one day.
Your rights
You can:
- ask for a summary of the personal data we hold about you, and who we have shared it with;
- ask us to correct, complete or update it;
- ask us to delete it, unless the law requires us to keep it;
- withdraw your consent;
- name someone to use these rights for you if you die or cannot act;
- complain to us (see Grievance Officer below), and then to the Data Protection Board of India if you are not happy with our answer.
To use any of these rights, email us. We may ask you to confirm who you are. We will reply within 30 days.
Grievance Officer
If you have a question or complaint about your personal data, contact our Grievance Officer:
Meena Dalal, Founder & CEO — Grievance Officer, TrialGuna Private Limited
Email: care@trialguna.com (subject: "Data protection request")
Phone: +91 88671 25414 (Mon – Fri, 9:30 am – 6:30 pm IST)
Address: 467, 1st Main, 4th Cross, Royal County Layout, JP Nagar 8th Phase, Bengaluru, Karnataka 560083, India
We will acknowledge your complaint and resolve it within 30 days.
Children
Our services are for adults. We do not knowingly collect data from anyone under 18 without a parent's or guardian's consent. A parent or guardian may report a side effect for a child, or register interest in a study for a child where the study allows it. If you think a child has sent us data without consent, tell us and we will delete it.
How we protect your data
- The website only works over a secure (https) connection.
- Form messages are stored in a private folder that only our account can read.
- Only staff who need data can see it, and our systems are password-protected.
If something goes wrong
If a personal data breach happens, we will act quickly to contain it. We will tell the Data Protection Board of India and the people affected, as the law requires.
Changes to this policy
We may update this policy. The date at the top shows when it last changed. If a change affects how we use data you have already given us, we will tell you.
Contact us
TrialGuna Private Limited
467, 1st Main, 4th Cross, Royal County Layout, JP Nagar 8th Phase, Bengaluru, Karnataka 560083, India
Email: care@trialguna.com · Phone: +91 88671 25414 (Mon – Fri, 9:30 am – 6:30 pm IST)