# ALPLINE PRIVACY AND PERSONAL DATA POLICY
Reference: ALP/LEGAL/PRIVACY/2026/V1.0
## Data fiduciary and contact
Alpline Health Care Pvt. Ltd. processes personal data for account, commerce, direct-selling, KYC, tax, payout, security, delivery, support and legal-obligation purposes. The published privacy/grievance contact is the official route for requests.
## Data collected
Depending on role and transaction, data may include identity/contact details, sponsor and placement records, KYC status and protected documents, order/invoice data, delivery details, payment references, bank/payout details, device/security events, consent and grievance records.
## Purpose and lawful processing
Data is limited to specified and legitimate purposes, including contract performance, consented services, fraud prevention, legal compliance, record retention and dispute handling. New incompatible use requires an appropriate legal basis and notice.
## Sharing and processors
Only necessary data is shared with authorised payment, email, hosting, KYC, courier, professional, statutory or support providers under applicable safeguards. Downline users do not receive private KYC, bank, password or full contact records merely because of genealogy.
## Security
Passwords and secrets are stored using one-way hashing or encryption as appropriate. Access is role-scoped and audited. No system can promise absolute security; suspected incidents are assessed and handled under applicable requirements.
## Retention
Data is retained only for operational, tax, corporate, consumer, payout, fraud, legal and limitation-period needs. Posted ledgers, invoices, seller agreements and approval evidence may require longer immutable retention.
## Individual rights and correction
Requests for access, correction, updating, erasure, consent withdrawal and grievance are handled subject to identity verification and lawful retention exceptions. Withdrawing optional consent does not invalidate completed lawful processing.
## Children and prohibited use
Public direct-seller registration is not intended for persons lacking legal capacity to contract. Sensitive documents must not be uploaded to unapproved support or chat channels.
## Changes
Material revisions are versioned and published prospectively. The account records the applicable accepted agreement version.
This controlled text becomes effective only after authorised Company execution, qualified privacy/legal review, signed-PDF upload and governed publication.
Reference: ALP/LEGAL/PRIVACY/2026/V1.0
## Data fiduciary and contact
Alpline Health Care Pvt. Ltd. processes personal data for account, commerce, direct-selling, KYC, tax, payout, security, delivery, support and legal-obligation purposes. The published privacy/grievance contact is the official route for requests.
## Data collected
Depending on role and transaction, data may include identity/contact details, sponsor and placement records, KYC status and protected documents, order/invoice data, delivery details, payment references, bank/payout details, device/security events, consent and grievance records.
## Purpose and lawful processing
Data is limited to specified and legitimate purposes, including contract performance, consented services, fraud prevention, legal compliance, record retention and dispute handling. New incompatible use requires an appropriate legal basis and notice.
## Sharing and processors
Only necessary data is shared with authorised payment, email, hosting, KYC, courier, professional, statutory or support providers under applicable safeguards. Downline users do not receive private KYC, bank, password or full contact records merely because of genealogy.
## Security
Passwords and secrets are stored using one-way hashing or encryption as appropriate. Access is role-scoped and audited. No system can promise absolute security; suspected incidents are assessed and handled under applicable requirements.
## Retention
Data is retained only for operational, tax, corporate, consumer, payout, fraud, legal and limitation-period needs. Posted ledgers, invoices, seller agreements and approval evidence may require longer immutable retention.
## Individual rights and correction
Requests for access, correction, updating, erasure, consent withdrawal and grievance are handled subject to identity verification and lawful retention exceptions. Withdrawing optional consent does not invalidate completed lawful processing.
## Children and prohibited use
Public direct-seller registration is not intended for persons lacking legal capacity to contract. Sensitive documents must not be uploaded to unapproved support or chat channels.
## Changes
Material revisions are versioned and published prospectively. The account records the applicable accepted agreement version.
This controlled text becomes effective only after authorised Company execution, qualified privacy/legal review, signed-PDF upload and governed publication.