Privacy Policy

This policy explains what information Shree Marketing Services ("we", "us") collects through this website and the customer portal at https://caalix.com, why we collect it, where it is stored and the choices you have. This website and portal are intended for pharmacy and pharmaceutical businesses and their staff, not for consumers or children.

1. Information we collect

When you register for or are given a portal account:

• Your name, username and password. We store passwords only as a one-way hash, never in readable form.
• Your firm's name and area, and optionally your email address and phone number.
• If our staff set up your account, they may also record your firm's address, city, alternate and landline phone numbers, drug licence number, CARE software party code and account expiry date.
• Account status details, such as when your registration was approved or the reason it was declined.

When you use the portal:

• Orders and debit notes you create, including products, quantities and the wholesaler they are sent to.
• Bill files that your wholesaler's CARE billing software sends to the portal for you to download.
• Files you upload for our support team (for example database backups or log files). These may contain whatever data your own software holds, so please upload only what our support team needs.
• Error reports you submit, including any contact phone number you give us.

When you use the Contact or Channel Partner forms: the name, company, email address, phone number, location and message you enter.

Technical information: to protect the site against abuse, we briefly record your IP address when you log in, register, or send a form (for rate limiting, kept for up to 15 minutes). Our hosting providers also keep standard server logs, which include IP addresses and request details.

We do not use advertising or analytics trackers, and we do not sell your information.

2. Why we use it

• To create and secure your account and let you log in.
• To pass your orders and debit notes to the wholesaler you select, and show you your bills.
• To provide technical support for CARE software and answer your enquiries.
• To prevent fraud, abuse and unauthorised access.

3. Who we share it with

• Wholesalers you trade with: orders and debit notes you send, and your firm's details needed to process them.
• Service providers that host the site for us: Railway (application server, database and file storage, located in the United States) and Cloudflare (domain, website delivery and network security, global network). They process data on our behalf to run the service.
• Video providers, only if you choose to play a video: tutorial videos hosted on YouTube or Vimeo load only after you click to play them. See our Cookies & Storage page.
• Image hosting: some decorative background images are loaded from Unsplash (images.unsplash.com), which receives your IP address when your browser requests them.
• Authorities, where the law requires us to.

Because our hosting is in the United States, your information is stored and processed outside India.

4. How long we keep it

• Account details: while your account is active, and afterwards for as long as we need them for records the law requires us to keep.
• Orders, debit notes, bills and error reports: for as long as your account is active or as needed for business and legal records.
• Contact and partner enquiries: until we have dealt with them and no longer need them; you can ask us to delete them sooner.
• Rate-limiting records: up to 15 minutes.

We do not currently delete these records automatically on a fixed schedule; deletion is carried out on request or by our staff.

5. How we protect it

The site is served only over HTTPS. Passwords are stored as one-way hashes. Each retailer can access only their own records, enforced in both the application and the database. Downloads use short-lived links. Login, registration and form submissions are rate-limited. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

6. Your choices and rights

You can ask us to:

• tell you what personal information we hold about you;
• correct information that is wrong;
• delete your account and personal information, subject to records we must keep by law;
• stop using your information for a particular purpose, where applicable.

Portal users can ask for deletion directly from the account menu ("Request Account Deletion"); anyone can also contact us using the details below. We check that the request comes from the account holder before acting on it.

When we delete your data we remove your name, email address, username and password, end every active login, remove phone numbers from your error reports, and, if no one else uses your firm's account, clear the firm's phone numbers and address and delete files you uploaded for support. We keep orders, debit notes and bills, together with your firm's name, CARE party code and drug licence number, because they are business records we may be required to retain for tax and accounting purposes.

If you forget your password, use "Forgot password?" on the login form. Our support team will call you to confirm your identity before setting a new password, and resetting it signs you out everywhere.

7. Children

This service is for businesses and is not directed at anyone under 18. We do not knowingly collect information from children.

8. Changes to this policy

We will update this page when our practices change and revise the "Last updated" date above.

9. Contact