Pharmocia ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Pharmocia customer platform (web or mobile). By using Pharmocia, you consent to the practices described in this policy.
We collect information you provide directly to us, including: • Identity data: name, date of birth, gender. • Contact data: mobile number (used for OTP authentication). • Health data: prescriptions, health conditions, allergies, and family member profiles you choose to add. • Transaction data: order history, wallet transactions, and payment records. • Device data: device identifiers, OS version, and browser/app version for analytics and crash reporting. • Location data: delivery address and, optionally, real-time location for address auto-fill (never stored continuously).
We use your information to: • Process and fulfil your medicine orders. • Verify prescriptions with licensed pharmacy partners. • Manage your wallet, loyalty points, and referral credits. • Send order status updates and delivery notifications. • Personalise your product recommendations and offers. • Comply with legal and regulatory obligations under the Drugs and Cosmetics Act and IT Act. • Detect, investigate, and prevent fraudulent activity.
Health information you provide (prescriptions, medical conditions, family health profiles) is treated as sensitive personal data under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. This data is: • Used solely for order fulfilment and pharmacist verification. • Never sold to third parties. • Never used for insurance profiling or employer disclosure. • Stored in encrypted form at rest and in transit.
We share your information only with: • Licensed pharmacy partners: to dispense your medicines and verify prescriptions. • Delivery partners: name and delivery address only, for order fulfilment. • Payment processors: to complete transactions (we do not store card details). • Regulatory authorities: when required by law, court order, or government request. We never sell, rent, or trade your personal data to advertisers or data brokers.
We use anonymised analytics (Firebase Analytics) and crash reporting to improve the platform. No cross-site advertising cookies are used. Analytics data is aggregated and cannot identify you individually. You may disable cookies through your browser settings; however, some platform features may not function correctly as a result.
We retain your personal data for as long as your account is active, or as required to: • Fulfil ongoing or recently completed orders. • Comply with legal obligations (e.g., GST records for 6 years, prescription records for the minimum statutory period). You may request deletion of your account and associated data at any time through in-app or on-site support. Certain data may be retained in anonymised form for statistical purposes.
We implement industry-standard security measures including: • TLS 1.2+ encryption for all data in transit. • AES-256 encryption for sensitive data at rest. • OTP-based authentication — no passwords are stored. • Role-based access controls limiting data access to authorised staff. • Regular security audits and vulnerability assessments. While we take every reasonable precaution, no system is completely secure. We encourage you to keep your OTPs private and sign out of shared devices.
You have the right to: • Access: request a copy of the personal data we hold about you. • Correction: request correction of inaccurate or incomplete data. • Deletion: request deletion of your account and data (subject to legal retention requirements). • Portability: receive your data in a machine-readable format. • Objection: opt out of non-essential communications at any time via notification settings in the platform. To exercise any of these rights, use the Help & Support section on the platform.
Our platform is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from minors. Family member profiles for dependants are managed by the account holder, who takes responsibility for appropriate use.
We may update this Privacy Policy periodically. We will notify you of significant changes through platform notifications. The date at the top of this page reflects the most recent revision. Continued use of the platform after any update constitutes your acceptance of the revised policy.
In accordance with the Information Technology Act, 2000 and rules made thereunder, a Grievance Officer has been appointed. You may raise a privacy-related grievance through the Help & Support section on the platform. We will address your complaint within the timeframe prescribed by applicable law.