Privacy Policy

How VRAJ SURGICAL collects, uses, stores, and protects the personal information you share with us when you browse or shop on our website.

Effective: 10 October 2026

Information we collect

We collect only the information we need to run our ecommerce business — to take your order, ship it to you, support you after the sale, and improve the website. We do not collect sensitive personal data beyond what is described below.

Information you give us directly

Name

Your full name as it should appear on the shipping label and invoice.

Email

Used for order confirmations, delivery updates, invoices, and support replies.

Phone number

Used by the courier partner to coordinate delivery and by our support team to assist you.

Shipping & billing address

Where the order should be delivered and where the invoice should be sent.

Information collected automatically

Basic device and browser information (browser type, operating system, screen size) so the website renders correctly for you.
Pages visited, time on page, and referring URL, used in aggregate to understand which products and content are most helpful.
IP address, used for fraud prevention, security, and approximate city-level localisation of shipping options.

What we do not collect

Payment card details are handled entirely by our payment gateway.

We never see or store your full card number, CVV, or UPI PIN. Card data flows directly from your browser to our PCI-DSS compliant payment partner, and we only receive a token, the last four digits, and the transaction status.

How we use your information

To process and fulfil your order — packing, dispatch, delivery, and returns.
To send transactional messages such as order confirmations, dispatch updates, delivery confirmations, and refund notifications.
To respond to your enquiries, support requests, and wholesale enquiries.
To improve the website — for example, understanding which categories are most browsed so we can improve the catalogue.
To prevent fraud, abuse, and security incidents, and to enforce our Terms & Conditions.
To send you product updates, offers, and health-care information only if you have explicitly opted in (you can opt out at any time from your account or by clicking unsubscribe in any email).

We do not sell, rent, or trade your personal information to third-party marketers.

Cookies & similar technologies

Essential cookies

Remember your cart, login session, and the items in your wishlist. The site cannot work properly without these.

Analytics cookies

Help us understand which pages and products are popular. We use this in aggregate to improve the catalogue.

Preference cookies

Remember choices like preferred language, currency (INR), and recently viewed categories.

If you disable cookies in your browser, the site will still load but core features such as the cart and account login will not work.

Data sharing

We share your information only with the parties that need it to deliver our service to you. We do not sell or rent your data.

Logistics partners — we share your name, phone, and shipping address with the courier company delivering your order.

Payment gateway — your payment data is handled directly by our PCI-DSS compliant gateway; we only see the transaction outcome.

IT and hosting providers — we use reputable third-party hosting and email-delivery providers who process data on our behalf under a data-processing agreement.

Legal and compliance — we may disclose information if required by a valid court order, tax notice, or applicable Indian law.

Business transfer — if VRAJ SURGICAL is merged, acquired, or sells a part of its business, your information may be transferred to the new entity under equivalent privacy terms.

Data security

We take reasonable steps to protect your information against unauthorised access, alteration, disclosure, or destruction.

The website uses HTTPS / TLS encryption for all data in transit.
Payment transactions are processed by PCI-DSS compliant gateways; we do not store full card numbers on our servers.
Access to customer order data is limited to staff who need it for support, fulfilment, or accounting purposes.
We retain order and invoice records for the period required by Indian tax and corporate law (typically 8 years) and personal data for active customer accounts until you request deletion.

No system is 100% secure.

If you believe your account has been compromised, please reset your password immediately and contact us at support@vrajsurgical.com.

Your rights

Under the Information Technology Act, 2000 and the Sensitive Personal Data or Information (SPDI) Rules, 2011, you have the right to:

Access a copy of the personal data we hold about you.
Correct or update inaccurate information in your account at any time.
Request deletion of your account and associated personal data, subject to our legal record-keeping obligations.
Withdraw consent for marketing communications — every marketing email includes an unsubscribe link.
Lodge a complaint with the appropriate data-protection authority if you believe your data has been mishandled.

To exercise any of these rights, email support@vrajsurgical.com from the email address on your account. We respond within 15 business days.

Contact us

If you have any questions about this Privacy Policy or how your information is handled, please reach out using the details below. We take privacy queries seriously and respond within two business days.