Privacy & Data Security Policy

1. Information We Collect

Depending on how you interact with MedNirog, we may collect the following categories of information:

• Personal Identification: Full name, phone number, email address, date of birth, and account credentials.
• Delivery & Billing: Complete shipping address, billing address, pin code, and delivery instructions.
• Health & Prescription Details: Doctor prescriptions, prescribed medicines, dosages, and diagnostic inquiries required for medical verification.
• Order History: Medicines and healthcare items purchased, invoices, payment status, and customer service history.
• Technical & Device Data: IP address, device type, browser specifications, and cookie preferences.

2. How We Use Your Information

We use your data strictly for legitimate healthcare and order fulfillment operations:

• Managing your account and processing medicine orders.
• Enabling verified pharmacists to inspect and validate prescription requirements.
• Dispatching parcels and providing real-time tracking alerts via SMS and WhatsApp.
• Resolving refund, return, or payment disputes quickly.
• Ensuring statutory compliance with drug and cosmetics acts, pharmacy regulations, and taxation laws.

3. Prescription Privacy & Healthcare Data

Prescriptions represent sensitive personal health data. They are stored securely and made available exclusively to registered pharmacists and authorized fulfillment personnel solely to dispense legal medications.

4. Third-Party Service Providers

To deliver your medicines safely, limited subsets of your data are shared strictly under non-disclosure terms with:

• Logistics Partners: Only your name, shipping address, and phone number for delivery.
• Licensed Pharmacies: Prescription details for verification and dispensing.
• Payment Gateways: PCI-DSS compliant providers for card and UPI transactions. MedNirog never saves your CVV or complete banking pins.

5. Cookies & Session Management

Cookies help keep your medicine cart intact while browsing and preserve active login states. You can control or disable cookie permissions in your browser settings at any time without losing basic browsing capabilities.

6. Security Measures

We deploy multi-layered physical and digital security controls including TLS/SSL encryption, restricted access databases, and periodic vulnerability testing. However, please maintain confidentiality of your MedNirog OTPs and account passwords.

7. Data Retention & Deletion

Order invoices and prescription records are archived in compliance with the Drugs and Cosmetics Act and statutory accounting rules for mandatory audit periods, after which they are securely purged.

8. Your Privacy Rights & Choices

As a user, you retain complete authority over your information under applicable data protection regulations:

• Right to review and download your order and profile history.
• Right to correct inaccurate personal or address records.
• Right to request account closure and deletion of eligible data.

9. Minor & Children Protection

MedNirog is designed for individuals of legal age. Orders for minors must be placed under parental or legal guardian supervision.

10. External Links

Our platform may reference external health blogs or clinical resources. We recommend reviewing the independent privacy policies of any third-party website you navigate to.

11. Policy Updates

Whenever changes are made to this policy, the "Last Updated" timestamp at the top of this page will be revised accordingly.