Privacy Policy
DRAFT TEMPLATE. Fill in every [BRACKETED] item and have a lawyer review this against India's Digital Personal Data Protection Act, 2023, the IT Act and pharmacy/e-pharmacy rules before going live. Then delete this box.
Last updated: [DATE]
1. Who we are
Palakmeds is operated by [LEGAL BUSINESS NAME], [REGISTERED ADDRESS], drug licence no. [LICENCE NUMBER]. For privacy questions or complaints contact our Grievance Officer: [NAME], [EMAIL], [PHONE].
2. What we collect and why
- Order details - name, email address, mobile number, delivery address, items ordered, payment method and status. Used to process, deliver and support your order and to meet tax and legal obligations.
- Prescriptions (image/PDF you upload) - used only for a pharmacist to verify and dispense prescription medicines. Stored privately on our server and visible only to authorised staff.
- Payment data - online payments are handled by Razorpay. We do not receive or store your card, UPI PIN or bank login details. We store the payment reference and status.
- Visit statistics - we count unique daily visitors using a one-way hash of your IP address and browser type that changes every day. It cannot be used to identify you and sets no cookie.
- Google Analytics (only if you click Accept on the cookie banner) - sets cookies and sends usage data to Google to help us improve the site. Rejecting it has no effect on ordering.
3. Consent
We ask for your consent by tick-box when you place an order or upload a prescription. You may withdraw consent at any time by contacting the Grievance Officer; we will then stop using your data except where the law requires us to keep it.
4. Who we share it with
Only service providers needed to run the shop: our hosting provider (Hostinger), Razorpay (payments), Google (analytics, if accepted) and delivery partners [NAMES]. We do not sell personal data.
5. How long we keep it
Order and prescription records are kept for [RETENTION PERIOD - confirm with your pharmacist-in-charge and accountant, as pharmacy and tax rules set minimum periods], then deleted or anonymised.
6. Your rights
You can ask to access, correct or erase your data, to withdraw consent, and to nominate someone to act for you, by writing to the Grievance Officer above. If we do not resolve your complaint you may approach the Data Protection Board of India.
7. Security
The site is served over HTTPS, admin access is password-protected on our server, and prescriptions are stored outside the public web folder. No system is perfectly secure; tell us at once if you suspect misuse.
8. Children
Orders must be placed by an adult. If you order for a child, you act as their parent or guardian.
9. Changes
We will post any changes on this page with a new date.