Privacy Policy
1. Who We Are
MedDev Advisory is a medical device regulatory consulting practice operated by Arvind Rathore, based in Kanpur, India. We provide ISO 10993 biological evaluation, EU MDR, and FDA regulatory documentation services to medical device companies globally.
For privacy-related queries, contact us at: arvind.rathore@meddevadvisory.com
2. What Data We Collect
When you request a resource, use an inquiry form, make a purchase request, or communicate with us, we may collect:
- Name and job title
- Company name
- Email address
- Phone or WhatsApp number (if provided)
- Project description and device information (as provided by you)
- Regulatory target and submission timeline
- Digital-resource request, purchase, delivery, and support information where applicable
- Your optional choice to receive material resource updates and information about closely related MedDev Advisory books and professional tools, including the consent wording version
- Publication-interest selection and any optional role or intended-use note you provide
- Collaboration-enquiry and professional-profile information you choose to provide, such as LinkedIn or portfolio links, current role, relevant experience, markets, availability, and areas of expertise
If paid digital resources are purchased through a payment provider such as Razorpay, payment details are handled by the payment provider. MedDev Advisory may receive transaction status, buyer contact details, invoice/payment identifiers, and delivery-support information, but does not store card, UPI, or banking credentials on this website.
We use Cloudflare to host and secure this website and to measure aggregate website traffic, performance, and interactions such as free-resource requests, downloads, and navigation to related content. Cloudflare may process limited request and technical information such as IP address, page path, browser or device information, performance timing, resource identifier, and referral category. We do not send form contents, email addresses, or device or project details to website analytics. We do not use advertising networks on this website.
3. Why We Collect Your Data
We process personal data only as needed to:
- Respond to your inquiry about our services
- Provide a project scope and proposal if requested
- Communicate about ongoing or prospective projects
- Deliver requested free or paid digital resources
- Send material resource updates and closely related book or professional-tool information only when you have separately opted in
- Record and respond to a publication-interest request, including the requested material release-status notice
- Assess collaboration fit, potential conflicts, capacity, and project handoffs, and respond to collaboration enquiries
- Handle payment confirmation, support, refunds, replacement access, and purchase records where applicable
- Host, secure, troubleshoot, and measure the aggregate performance of this website
We do not use your data for unrelated or unsolicited marketing, profiling, or automated decision-making. A release-status message requested through the publication-interest form is treated as a response to that request. Free-resource delivery is not conditional on marketing consent; the separate update checkbox is optional and unticked by default.
4. Legal Basis for Processing (GDPR)
If you are located in the EU or UK, form and resource-request information is processed on the basis of the consent you provide when submitting the form (Article 6(1)(a) of the EU GDPR or UK GDPR, as applicable). Marketing updates rely on the separate optional consent shown on the form; declining it does not affect access to the free resource. Where you ask for or accept a quotation, purchase, licence, delivery, or support, necessary information may also be processed to take steps at your request before entering a contract and to perform that contract (Article 6(1)(b)). Invoice, tax, accounting, fraud-prevention, and legally required records may be processed to comply with legal obligations (Article 6(1)(c)) or legitimate interests where permitted. Website hosting, security, abuse prevention, and aggregate performance measurement may be processed on the basis of our legitimate interests in operating a secure and usable website (Article 6(1)(f)), where permitted. You may withdraw consent at any time by replying “unsubscribe” to an update or emailing us; withdrawal does not affect processing required for a contract, legal obligation, or other lawful basis.
5. How We Store Your Data
This is a static website and does not maintain its own form database. Free-resource and inquiry forms are transmitted from your browser to FormSubmit, our form-delivery provider, and then delivered to MedDev Advisory email so we can provide the requested resource or respond. FormSubmit and our email provider therefore process the submitted information for delivery and communication. Project-related communications are retained in secure email. Digital-resource delivery or purchase records may also be stored in an email system, payment-provider dashboard, or secure file-delivery system where applicable.
Some longer inquiry forms temporarily save an unsent draft in session storage for the active browser tab so you can continue after an accidental refresh. The draft is cleared after successful submission and is normally removed when that tab or browser session closes. The site also removes older persistent draft keys created by a previous version. The free-resource request forms do not store the email or form details in browser storage.
We do not sell or rent personal data. We share it only with service providers needed for hosting, security, form delivery, email, payment processing, file delivery, support, or where required by law.
6. Data Retention
Inquiry and resource-request records are retained for a maximum of 12 months from submission unless an ongoing project, purchase, legal, tax, or support obligation requires longer retention. Where you separately opt in to updates, the consent record is retained while that subscription remains active. After withdrawal, we may retain the minimum email and opt-out record needed to ensure that we do not contact you again. Aggregate website statistics are retained under Cloudflare's service settings and retention controls. You may request deletion of personal data by emailing us.
7. International Data Transfers
Our practice is based in India. If you are in the EU or UK, information you submit may be processed in India. Cloudflare, FormSubmit, email, payment, and file-delivery providers may also process information in other countries.
Where EU or UK restricted-transfer rules apply to a transfer initiated by MedDev Advisory or one of its providers, the responsible exporter must identify an available lawful route. Depending on the transfer, that may include an adequacy decision or regulation, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, together with any required transfer assessment and supplementary measures, or a specific statutory exception. The mechanism depends on the provider and data flow. You may email us to ask which mechanism applies to your information and to request the information or copy that applicable law requires us to provide.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent at any time
- Request restriction of processing where applicable
- Object to processing based on legitimate interests where applicable; we will stop that processing unless a lawful exception permits it to continue
- Request data portability where applicable
- Lodge a complaint with your local data protection authority
Where applicable Indian data-protection provisions are in force, you may also request a summary of processing, correction, completion, updating or erasure, use the available grievance route, and exercise any applicable nomination right. Rights and response procedures depend on the law in force for the relevant processing.
To exercise a right, object to applicable processing, raise a grievance, or ask about an international-transfer safeguard, contact: arvind.rathore@meddevadvisory.com
9. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent revision. Where required, we will provide additional notice of a material change before it takes effect.
10. Contact
For any privacy-related questions: arvind.rathore@meddevadvisory.com