Legal
Privacy Policy
Last updated: 13 May 2026. Compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act).
Who's responsible
Greenlink Analytical and Research Laboratory India Pvt Ltd is the Data Fiduciary for personal data collected through this website. Grievance contact: info@greenlink.in.
What we collect
- Contact details: name, email, phone, address — to fulfill your order and issue invoices.
- Tax identifiers: GSTIN, if you provide it, for B2B invoicing.
- Order data: the panels you ordered, sample IDs, results, reports — retained 7 years per NABL requirements.
- Payment metadata: via Razorpay. We do not store card numbers, CVVs, or UPI credentials.
- Technical metadata: minimal access logs (IP address, user agent, timestamp) for security and fraud prevention, retained 90 days.
Purpose and lawful basis
We process personal data to fulfill the contract you've entered into with us when placing an order, to comply with statutory obligations (GST, NABL records, income tax), and for the legitimate purpose of running and improving our laboratory services.
Who we share data with
- Payment processor: Razorpay (Razorpay Software Pvt Ltd) — for payment processing only.
- Courier partners: Shiprocket / Delhivery / Bluedart — for sample pickup and kit shipment, limited to name, address, and phone.
- Statutory bodies: NABL and tax authorities, only when compelled or required for our continued accreditation and compliance.
We do not sell, lease, or otherwise share your personal data with any third party for marketing.
Your rights
Under the DPDP Act, you have the right to access, correct, complete, update, or erase your personal data, and to nominate another person to exercise these rights in case of your death or incapacity. Write to info@greenlink.in — we respond within 30 days. Note that data retained under NABL record-keeping obligations cannot be erased before the statutory retention period ends.
Cookies
We use only first-party functional cookies: a session cookie to keep you logged in, and localStorage to remember your cart. No advertising or analytics cookies.
Children
We do not knowingly collect personal data from anyone under 18. If you believe a minor has shared personal data with us, contact the privacy email above for immediate deletion.
Changes
Material changes to this policy are emailed to active customers and posted prominently on this page before taking effect.