Privacy Policy

What we collect

Account data: name, email, password hash, delivery address, phone number.

Shipment data: what you bought, from whom, its weight, dimensions, declared value and photographs taken at intake.

Payment data: we do not store full card numbers. Payments are handled by a payment processor; we retain only a token and the last four digits.

Health data, where you use the medicine service: your prescription, prescriber details and the medicines dispensed. This is sensitive personal data and is handled accordingly.

Why we hold it

To provide the service, to make accurate customs declarations, to verify prescriptions before dispensing, to prevent fraud, and to meet record-keeping obligations under Indian customs and drug regulations.

Who we share it with

Carriers and customs authorities, to the extent required to move and clear your shipment.

Our licensed partner pharmacy, for prescription verification and dispensing.

Payment processors, for payment.

We do not sell personal data, and we do not share it for advertising.

How long we keep it

Shipment and customs records for the period required by Indian customs law, currently five years.

Prescription records for the period required under the Drugs and Cosmetics Rules.

Account data until you close your account, after which we retain only what regulation requires.

Your rights

You may request a copy of your data, ask us to correct it, or ask us to delete what we are not legally required to keep. Write to the address on our contact page.

Where the Digital Personal Data Protection Act applies to you, we act as data fiduciary for the purposes described above.

Security

Passwords are stored as salted scrypt hashes and are never recoverable in plain text. Sessions use httpOnly cookies. Access to prescription data is restricted to staff who need it to verify or dispense.