Privacy Policy

The information we collect depends on how you use our Services. We collect only what we need to provide them.

Partner and other registered accounts

To provide our B2B services, account management, and order processing, we collect the following types of information when you use our application:

• Contact Information: Such as your name, email address, physical business address, and phone number, which are required for account creation, billing, and communication.
• Account Credentials & Identifiers: User IDs and authentication details necessary to secure your access.
• Financial & Transaction Information: Purchase history and commercial order records required for business accounting, processing, and compliance.
• Messages & User Content: In-app messages, uploaded images/photos shared within chat threads, and other user-generated content or custom notes.
• App Activity & Interactions: Technical logs of app interactions and navigation to ensure proper functionality and performance.

Guest accounts (Continue with Google)

You can browse our product catalogue as a guest by signing in with your Google account. When you do, Google shares the following with us, with your permission: your name, email address, profile picture, and a unique identifier for your Google account. We never receive your Google password, and we do not access your Gmail, contacts, files, or any other Google data.

Guest browsing activity

While you are signed in as a guest, we record how you use our product catalogue so that we can understand which products are of interest and improve our Services. This record is limited to:

• the products you view;
• the searches you make on our website, and the number of results returned;
• the product divisions and categories you browse;
• features you try that are available only to our partners, such as ordering or viewing rates;
• the date and time of each of the above, and of each time you sign in; and
• the type of browser and device you use to sign in (for example, "Chrome on Android").

This record does not include your IP address or location, and we do not track your activity on any other website or app.

Partnership requests

If you ask to become a partner, we collect the details you submit in the request: your business or firm name, contact name, phone number, city, and any message you include.

Technical information

Like most online services, our servers automatically keep standard technical logs of requests made to them, which include your IP address, browser type, and the time of the request. These logs are used only to keep our Services secure, reliable, and working properly.

We use the collected data for the following legitimate business purposes:

• App Functionality: To operate our services, authenticate users, process your commercial orders, display purchase history, and deliver in-app messages and content.
• Account Management: To manage user accounts, verify credentials, and handle profile setups.
• Guest Access: To create and secure your guest account and let you browse our product catalogue.
• Improving Our Products and Services: To understand, in aggregate and per guest, which products and categories are viewed and searched for — for example, to find products people look for but cannot find — and to improve our catalogue, search, and website.
• Partnership Requests: To review your request, contact you about becoming a partner, and set up your partner account if we proceed.
• Fraud Prevention, Security, and Compliance: To monitor for unauthorized access, secure financial transactions, maintain legal compliance, and protect business integrity.

We do not use your information for automated decision-making that has legal or similarly significant effects on you, and we do not use it to show you third-party advertising.

We do not sell your personal data, and we do not share it with any external third parties for their marketing or commercial exploitation. We share information only as follows:

• Within Moulins: Our authorised staff can see guest account details, guest browsing activity, and partnership requests, so that they can respond to you and improve our Services.
• Service Providers: We use trusted providers to host and run our Services, such as cloud hosting, database, and file storage providers. They process data only on our behalf and under our instructions, and are not permitted to use it for their own purposes.
• Google: When you choose Continue with Google, Google processes your sign-in under its own Privacy Policy.
• Legal Requirements: Where required by law, regulation, legal process, or a lawful request by a public authority, or where necessary to protect the rights, property, or safety of Moulins, our users, or others.

All collected data is stored securely on our servers and those of our service providers, and is retained only as long as necessary to fulfill the purposes outlined in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. In particular:

• Guest browsing activity is kept for 6 months and then deleted automatically.
• Guest account details and the record of your sign-ins are kept while your guest account exists, and deleted if you ask us to delete your account.
• Partnership requests are kept as business records for as long as needed to handle the request and for our legitimate business and legal purposes.
• Partner account and transaction records are kept for as long as your account is active and thereafter as required by applicable tax, accounting, and other laws.

• Required Data: Certain information — such as your name, email, address, phone number, and purchase history — is mandatory for account creation and order processing. Users cannot opt out of providing this data while maintaining an active commercial account.
• Optional Data: Features like uploading photos or sending specific in-app content are at your discretion.
• Guest Accounts: Signing in as a guest is optional. You can sign out at any time, and you can remove our access to your Google account from your Google Account settings, under "Third-party apps and services." Signing out or removing access stops new activity being recorded; it does not by itself delete what we already hold.
• Access, Correction, and Deletion: Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may ask us to access, correct, or delete your personal data, or to delete your guest account together with its browsing activity. To do so, email us at the address below from the email address on your account. We will respond within a reasonable time and in any case within the period required by law.

Our website keeps you signed in by storing a secure sign-in token in your browser's local storage, and remembers simple display preferences, such as how a product list is laid out. We do not use advertising cookies or third-party analytics or tracking tools. Signing out removes the sign-in token.

The security of your data is important to us. We implement appropriate technical and organizational security measures to protect your personal and financial information against unauthorized access, alteration, disclosure, or destruction. Data is transmitted over encrypted connections (HTTPS), and access to personal data within Moulins is limited to authorised staff who need it for their work.

Our Services are intended for healthcare businesses and professionals, and are not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date above. Where a change is significant, we will also tell you through our Services.

If you have any questions about this Privacy Policy, wish to exercise any of your rights, or have a concern about how we handle your data, please contact us: