Last updated: 10 August 2026
BioAgile Therapeutics Private Limited (“BioAgile”, “we”, “us” or “our”) is a Contract Research Organisation registered in Bengaluru, India. We respect the privacy of every person who visits our website, submits an enquiry, or applies for a role with us. This Privacy Policy explains what personal data we collect through bioagiletherapeutics.com, why we collect it, how we use and protect it, and the rights available to you under Indian law.
This policy is issued in accordance with India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Information Technology Act, 2000 together with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).
1. Scope of this policy
This policy applies only to personal data collected through this website and through the business communications that follow from it, such as enquiry emails, proposal discussions and recruitment correspondence.
This policy does not apply to clinical trial participant data. Personal and health data relating to volunteers, subjects or patients enrolled in any study conducted by BioAgile is governed separately by the approved study protocol, the informed consent document signed by the participant, the applicable Ethics Committee approval, the ICH-GCP guidelines, and the requirements of the Central Drugs Standard Control Organisation (CDSCO) and other Indian regulatory authorities. Trial participant data is never collected through this website and is handled under a separate, study-specific framework.
2. Personal data we collect
2.1 Enquiry and contact forms
When you complete an enquiry form, a “Partner with BioAgile” form or a contact form, we may collect your name, organisation name, business email address, telephone number, country or city, the service area you are interested in, and any free-text details you choose to provide about your project or requirement.
2.2 Career applications
When you apply for a position, we may collect your name, contact details, curriculum vitae or resume (including any file you upload), educational qualifications, professional experience, certifications, current and expected remuneration where you disclose it, notice period, and any covering note you submit. Please do not include sensitive personal data such as health information, caste, religion or financial account details in your application; we do not require it at the application stage.
2.3 Correspondence
If you write to us by email, telephone or post, we retain the correspondence and the contact details it contains so that we can respond and maintain a record of the discussion.
2.4 Technical and analytics data
Our web servers and analytics tools automatically record limited technical information, including IP address, browser type and version, device type, operating system, referring page, pages viewed, time spent on pages, and approximate geographic region derived from the IP address. This data is used in aggregate to understand how the site is used and to keep it secure and available.
3. Purposes and lawful basis
Under the DPDP Act we process your personal data on the basis of the consent you give when you submit a form or contact us, and, where applicable, for legitimate uses permitted by the Act such as responding to a request you have voluntarily made. We use personal data for the following purposes only:
- to respond to enquiries and provide information about our services;
- to prepare proposals, quotations, feasibility assessments and study budgets;
- to negotiate, enter into and perform service contracts with sponsors and partners;
- to assess job applications and manage recruitment;
- to maintain business records and comply with statutory, contractual and quality-management obligations, including those arising from our ISO 9001:2015 certified quality system and our CDSCO registration;
- to operate, secure, maintain and improve this website;
- to send service-related or operational communications you have asked to receive.
We do not sell personal data, and we do not use website enquiry data for unrelated marketing without your consent.
4. Sharing and disclosure
We disclose personal data only where it is necessary, and only to the following categories of recipients:
- Sponsors and clients — where you are a representative of a sponsor organisation, your contact details are used within the project team handling that engagement.
- Service providers and data processors — including website hosting, email, analytics, applicant-tracking and IT security providers who process data on our instructions under contractual confidentiality obligations.
- Professional advisers — auditors, legal advisers, insurers and certification bodies, where required.
- Regulatory and statutory authorities — where disclosure is required by Indian law, by a court of competent jurisdiction, or by a regulatory authority acting within its powers.
Where personal data is transferred outside India, for example to a sponsor or a hosted service located abroad, we take reasonable steps to ensure the recipient applies protections consistent with this policy and with applicable Indian law.
5. Retention
We retain personal data only for as long as it is needed for the purpose for which it was collected, or for as long as required by law, contract or our quality-management obligations. As a general rule:
- enquiry data is retained for the duration of the discussion and for a reasonable period afterwards for business-record purposes;
- data relating to a contracted engagement is retained for the term of the contract and for the statutory and contractual retention period thereafter;
- unsuccessful job applications are retained for a limited period so that we may consider you for future openings, unless you ask us to delete them sooner;
- technical and analytics data is retained in aggregated or limited form.
When personal data is no longer required and no legal obligation compels its retention, it is erased or irreversibly anonymised.
6. Security
We maintain reasonable technical and organisational security practices appropriate to the nature of the data we hold. These include access controls and role-based permissions, encryption of the website in transit using HTTPS, restricted access to enquiry and recruitment records, confidentiality obligations on employees and contractors, documented standard operating procedures under our ISO 9001:2015 certified quality management system, and periodic review of our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; however, we take our obligations under the SPDI Rules seriously and act promptly on any incident that comes to our attention.
7. Your rights as a Data Principal
Subject to the conditions and exemptions in the DPDP Act, you have the right to:
- Access — obtain confirmation of whether we process your personal data, a summary of that data, and the identities of parties with whom it has been shared;
- Correction and completion — have inaccurate or incomplete personal data corrected, completed or updated;
- Erasure — request deletion of personal data where it is no longer necessary for the purpose for which it was collected and no legal obligation requires its retention;
- Withdrawal of consent — withdraw consent previously given, with effect from the date of withdrawal and without affecting processing already carried out;
- Grievance redressal — raise a complaint with our Grievance Officer, whose details appear in Section 12;
- Nomination — nominate another individual to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, write to us at info@bioagiletherapeutics.com. We may ask for information to verify your identity before acting on a request. We aim to respond to every verified request within a reasonable period.
8. Cookies and analytics
This website uses cookies and similar technologies. Strictly necessary cookies enable core functionality such as page navigation, form submission and security. Analytics cookies help us understand which pages are visited and how visitors move through the site, so that we can improve its structure and content. Analytics data is used in aggregate and is not used to build a marketing profile of individual visitors.
You can control or delete cookies through your browser settings. Blocking all cookies may affect the functioning of certain parts of the site, such as form submission.
9. Third-party links
Our website may contain links to third-party websites, including regulatory bodies, certification agencies, scientific resources and professional networking platforms. These sites are not operated by us. We are not responsible for their content, their privacy practices or their use of your data. We recommend that you read the privacy policy of any third-party website before providing personal data to it.
10. Children’s data
This website is a business-to-business resource intended for professional audiences and is not directed at children. We do not knowingly collect personal data of any individual below eighteen years of age through this website. If you believe that a child has provided personal data to us through this site, please write to us at info@bioagiletherapeutics.com and we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law, including rules notified under the DPDP Act. The revised policy will be published on this page with an updated “Last updated” date. Where a change materially affects how we handle your personal data, we will take reasonable steps to bring it to your attention. Your continued use of the website after publication constitutes acknowledgement of the revised policy.
12. Grievance Officer and contact details
If you have a question about this policy, wish to exercise a right described in Section 7, or want to raise a grievance about the handling of your personal data, please contact our Grievance Officer:
- Entity: BioAgile Therapeutics Private Limited
- Attention: Grievance Officer
- Address: #2/5, Dahlia Building, 3rd Floor, 80 Feet Road, RMV 2nd Stage, Dollars Colony, Bengaluru 560094, India
- Email: info@bioagiletherapeutics.com
- Telephone: 080 4375 4520
- Mobile: +91 9538961761
- Office hours: Monday to Saturday, 09:30 am to 06:00 pm
BioAgile Therapeutics is an ISO 9001:2015 certified organisation and holds CDSCO Registration No. CRO/KA/2026/000173. This Privacy Policy is governed by the laws of India, and any dispute arising from it is subject to the exclusive jurisdiction of the courts at Bengaluru, Karnataka.
