Privacy policy
Updated 5 October 2026
Last updated: 6 October 2026
This Privacy Policy explains how Medcare Pharmacy ("Medcare Pharmacy", "we", "us") collects, uses, shares and protects your personal data when you use our website and apps. It is published in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
1. Data we collect
| Category | Examples | Why |
|---|---|---|
| Identity & contact | Name, mobile number, email | Account, order updates, OTP login |
| Delivery | Addresses, pincode, delivery instructions | Delivering your orders |
| Health data | Prescriptions, patient profiles (age, gender, allergies), medicines ordered | Mandatory prescription verification and safe dispensing |
| Transaction | Order history, invoices, refunds, wallet & reward points | Billing, GST compliance, returns |
| Payment | Payment status and reference IDs from Razorpay | Reconciling payments — we never see or store card numbers, CVV or UPI PINs |
| Device & usage | IP address, browser, pages viewed | Security, fraud prevention, improving the service |
2. How we use your data
- To verify prescriptions through our registered pharmacist and dispense medicines lawfully.
- To process payments, deliver orders, handle returns and provide customer support.
- To send transactional messages (OTP, order status, refill reminders you set up).
- To send offers only with your consent — you can opt out at any time.
- To comply with the Drugs and Cosmetics Act, 1940, GST laws and requests from lawful authorities.
We do not sell your personal data, and we do not use your health data for advertising.
3. Sharing
We share only what is necessary with: delivery partners (name, address, phone), payment gateway (order amount and reference), SMS/email providers (contact details), cloud hosting providers under strict confidentiality, and government authorities when required by law. All processors are bound by contracts that require them to protect your data.
4. Security
- Prescriptions and health details are encrypted at rest and accessible only to authorised pharmacists through short-lived signed links.
- All traffic uses HTTPS (TLS). Passwords are stored as salted hashes.
- Staff access is role-based, and every access to prescriptions is recorded in an audit log.
5. Retention
Prescriptions and records of sale of scheduled drugs are retained for the period required under the Drugs Rules, 1945 (not less than two years from the date of sale), and invoices for the period required under GST law (generally six years). Other data is deleted or anonymised when no longer needed.
6. Your rights
Under the DPDP Act you may: access a summary of your data, correct or update it, withdraw consent for marketing, request erasure (subject to legal retention), and nominate another person to exercise your rights. Use My Account → Privacy & data to download your data or request deletion, or email grievance@medcarepharmacy.in.
7. Children
Our services are intended for users aged 18 and above. Parents or guardians may order for minors using patient profiles.
8. Grievance officer / contact
Preethi, Grievance Officer Email: grievance@medcarepharmacy.in · Phone: 9030535820 Medcare Pharmacy, Prashanth Nagar, Bypass Road, Sangareddy, Telangana 502001.
We acknowledge complaints within 48 hours and resolve them within 30 days.