Privacy Policy

Last updated: 12 August 2026

MedsNMore (“MedsNMore”, “we”, “us”, or “our”) operates the website medsnmore.in and related online services (collectively, the “Platform”) through which customers in India may browse, order, and receive medicines, wellness products, healthcare devices, and related health essentials from licensed pharmacy partners. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how long we keep it, and the choices and rights available to you.

Please read this Privacy Policy carefully together with our Terms of Use and any other notices we may publish on the Platform. By accessing or using the Platform, creating an account, placing an order, uploading a prescription, or otherwise providing information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Platform or provide personal information to us.

Important notice: This Privacy Policy is provided for informational and operational transparency. It is intended to reflect good practice for an Indian online pharmacy and themes under applicable Indian data protection law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and, where still relevant, the Information Technology Act, 2000 and allied rules. It is not legal advice. MedsNMore may update this document after formal legal review, licensing finalisation, or changes in law or business operations.

1. Scope and who this policy applies to

This Privacy Policy applies to personal information processed in connection with:

• visits to and use of medsnmore.in and any MedsNMore-branded web or app experiences we operate;
• customer accounts, orders, payments, returns, and support interactions;
• prescription uploads and pharmacist or fulfilment workflows needed to dispense medicines lawfully;
• communications such as order updates, OTP verification, and (where permitted) service or promotional messages; and
• cookies, analytics, and similar technologies used on the Platform.

This Policy does not control the privacy practices of independent websites, payment gateways, logistics providers, or third-party apps that we do not operate, even if linked from the Platform. Those parties process information under their own policies. Where we engage processors on our behalf, we remain responsible for instructing them appropriately under applicable law and our contracts. References to “you” mean a customer, authorised caregiver, or visitor. If you share another person’s prescription or address, you confirm you are authorised to do so.

2. Key terms

• Personal information / personal data means any information about an identifiable individual, including contact details, account credentials, order history, and device identifiers that can reasonably identify you.
• Health-related information includes prescription images or details, medicine names and dosages associated with you, allergy or condition notes you choose to share, and similar data needed for pharmacy fulfilment.
• Processing means any operation on personal information, such as collection, storage, use, disclosure, transmission, or deletion.
• Partners means licensed pharmacies, pharmacists, logistics and courier partners, payment service providers, technology vendors, and other service providers engaged to help us operate the Platform.

3. Information we collect

The information we collect depends on how you use the Platform. We aim to collect only what is reasonably needed to provide pharmacy e-commerce services, comply with law, and improve safety and user experience.

3.1 Information you provide directly

• Identity and contact details: name, email address, mobile number, date of birth (where requested for age or prescription checks), and similar identifiers.
• Account information: login credentials, profile preferences, saved addresses, and communication preferences.
• Order and shipping details: products ordered, quantities, delivery address, landmark or delivery instructions, preferred delivery slots (if offered), and proof-of-delivery related notes.
• Prescription and health-related information: uploaded prescription files or images, doctor and clinic details visible on a prescription, medicine and dosage information, and clarifications you provide to our support or pharmacy partners so that orders can be validated and dispensed.
• Support interactions: messages, call recordings or notes where permitted, WhatsApp or email correspondence, feedback, complaints, and survey responses.
• KYC or verification details (when required): limited identity or age verification information if needed for regulated products, high-value transactions, fraud prevention, or legal compliance.

3.2 Information collected automatically

• Device and technical data: IP address, browser type and version, device type, operating system, language settings, referring URLs, and approximate location derived from IP where used for service integrity or localisation.
• Usage data: pages viewed, search queries on the Platform, products viewed or added to cart, session duration, click paths, and similar interaction logs.
• Cookies and similar technologies: identifiers stored on your device to keep you signed in, remember preferences, measure performance, and understand aggregate usage (see Section 8).

3.3 Information from partners and other sources

• payment status, transaction IDs, and limited payment metadata from payment gateways;
• delivery status, failed-attempt reasons, and courier tracking updates from logistics partners;
• pharmacy validation outcomes (for example, whether a prescription is acceptable for dispensing); and
• fraud, risk, or security signals from service providers where reasonably necessary to protect users and our business.

We do not knowingly purchase marketing lists of health conditions. Marketing, if any, is based on Platform interactions and your preferences, subject to consent and opt-out rules.

4. Prescriptions and sensitivity of health-related information

Online pharmacy services necessarily involve health-related information. Prescriptions are treated with heightened care because they can reveal medical conditions and private health status. We use this information only to:

• verify that prescription medicines are ordered consistently with applicable pharmacy and drug-control requirements;
• enable licensed pharmacists or pharmacy partners to review, dispense, substitute where legally permitted and clinically appropriate, or decline an order;
• communicate with you about missing details, dosage clarifications, or fulfilment issues;
• maintain records required for pharmacy operations, audits, recalls, and regulatory requests; and
• detect misuse, forged prescriptions, or other unsafe or unlawful activity.

We do not sell prescription images or identifiable health profiles to data brokers. Access is limited to personnel and partners who need it for fulfilment, quality, compliance, or support, under confidentiality obligations. Upload clear, authentic prescriptions only. If you order for someone else, ensure you have their permission. We may request additional confirmation for high-risk or inconsistent orders.

5. Accounts, orders, and customer support

Account data is used to authenticate you, secure your profile, save addresses, show order history, and provide support. Order information is used to process payments via gateways, fulfil through pharmacy partners, arrange delivery, handle returns under our returns policy, and issue confirmations or invoices. Support channels—phone (1800-000-000), email (hello@medsnmore.in), and WhatsApp where offered—may create records used to resolve issues and meet complaint-handling timelines. Prefer secure Platform uploads for prescriptions rather than informal channels.

6. Payments and card data

MedsNMore uses third-party payment service providers / payment gateways to process UPI, cards, net banking, wallets, and similar methods displayed at checkout. We do not store full card numbers, CVV, or complete payment-instrument secrets on MedsNMore servers when payments are processed through such gateways. Gateways typically return a transaction reference, status, and limited metadata needed for reconciliation, refunds, and fraud checks.

Payment partners process instrument details under their own privacy notices and applicable security standards (including PCI DSS where required of those providers). Review the gateway’s terms at checkout. For refunds, chargebacks, and failed transactions, we may share order identifiers and limited personal details with the payment provider and, where required, your bank or UPI app.

7. How we use personal information

We process personal information for purposes that include:

1. providing, operating, and improving the Platform and pharmacy e-commerce services;
2. creating and managing accounts, verifying OTPs, and preventing unauthorised access;
3. processing, fulfilling, cancelling, and delivering orders;
4. prescription validation and lawful dispensing workflows;
5. customer support, grievance handling, and service communications;
6. sending transactional messages (order status, delivery updates, security alerts);
7. sending promotional or newsletter communications where you have consented or where otherwise permitted, with a clear option to opt out;
8. analytics, product assortment planning, search relevance, and performance monitoring in aggregated or de-identified form where feasible;
9. fraud prevention, abuse detection, chargeback management, and security investigations;
10. complying with pharmacy, drug-control, tax, accounting, consumer, and data-protection laws, and responding to lawful requests from competent authorities; and
11. establishing, exercising, or defending legal claims.

We do not use identifiable prescription content for unrelated advertising profiling. Any product recommendations are based primarily on browsing and purchase behaviour and catalogue rules—not on selling health dossiers.

8. Cookies, analytics, and similar technologies

We and certain service providers use cookies, pixels, local storage, and similar technologies to make the Platform function and to understand usage.

• Essential cookies: required for login sessions, cart continuity, security, load balancing, and fraud prevention.
• Preference cookies: remember language, location pin code (if used), or interface choices.
• Analytics cookies: help us measure traffic, diagnose errors, and improve navigation and search.
• Marketing cookies (if enabled): measure campaign effectiveness; we will seek to align any such use with consent and notice requirements under applicable law.

You can control cookies through browser settings. Blocking essential cookies may impair checkout, login, or prescription upload. Third-party analytics, where used, process technical data under contracts and their own policies.

9. Sharing of information

We share personal information only as needed to run an online pharmacy service, meet legal duties, or with your direction. Typical recipients include:

• Licensed pharmacy / pharmacist partners: to review prescriptions, dispense medicines, and complete professional pharmacy responsibilities.
• Logistics and delivery partners: name, phone, address, and package details required to deliver orders and handle reverse pickups.
• Payment gateways and financial partners: transaction metadata for payment processing, refunds, and fraud monitoring.
• Technology and operations vendors: cloud hosting, SMS/email/WhatsApp gateway providers, customer-support tools, analytics, and security vendors acting as processors.
• Professional advisers: lawyers, auditors, or consultants under confidentiality, where reasonably necessary.
• Authorities and regulators: when required by law, court order, or to protect vital interests, public health, or safety, or to investigate fraud or illegal activity.
• Business transfers: if we undergo a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of that transaction, subject to continued protection consistent with this Policy and applicable law.

Partners should use shared information only for the stated purpose—not for unrelated secondary marketing of your health data. Aggregate or anonymised statistics that no longer identify you may be used for business reporting.

10. Legal bases and consent (India — DPDP themes)

Under the DPDP Act framework and related Indian law themes, we process personal data for clear purposes and with an appropriate ground, which may include:

• Consent: for example, creating an account, uploading a prescription, opting into promotional messages, or enabling optional cookies.
• Performance of a contract / service request: processing needed to take and fulfil your order, deliver products, and provide support.
• Compliance with law: pharmacy record-keeping, tax invoicing, responding to lawful government requests, and maintaining security logs.
• Other legitimate uses recognised by applicable law: including certain emergency or legally specified situations, as and when applicable.

Where processing is based on consent, you may withdraw consent for future processing through account settings or by contacting us. Withdrawal does not undo prior lawful processing and may limit services (for example, we cannot dispense prescription medicines without necessary prescription data). Provide accurate information; forged prescriptions or identity misrepresentation may lead to cancellation, account restriction, and reporting where required.

11. Retention

We retain personal information only for as long as needed for the purposes described in this Policy, including:

• active account and order-management needs;
• pharmacy, accounting, tax, and consumer-law record retention periods;
• dispute resolution, chargebacks, and fraud prevention;
• security and audit logs for a reasonable period; and
• backup copies that cycle out according to our systems’ retention schedules.

Prescription and order records may be kept longer than marketing preferences because pharmacy and regulatory practice often requires historical documentation. When no longer required, we delete or irreversibly anonymise data, subject to backup-cycle limitations.

12. Security

We implement administrative, technical, and physical safeguards appropriate to the nature of pharmacy e-commerce data. These may include encrypted transit (HTTPS), access controls and role-based permissions, least-privilege access to prescription content, monitoring for suspicious activity, vendor due diligence, and staff confidentiality expectations.

No method of transmission or storage is completely secure. Use a strong unique password, never share OTPs, and sign out on shared devices. Report suspected unauthorised access to hello@medsnmore.in or 1800-000-000.

13. Children’s privacy

The Platform is intended for use by adults with legal capacity to contract under Indian law. We do not knowingly create accounts for children in a manner that bypasses age-appropriate safeguards. Parents or guardians may order paediatric medicines for a child using their own adult account and providing valid prescriptions where required. If you believe we have collected personal information from a child inconsistently with applicable law, please contact us so we can review and delete or restrict such information as appropriate.

14. Your rights and choices

Consistent with DPDP Act themes and good practice, you may have rights to:

• Access: request confirmation of whether we process your personal data and obtain a summary of such data and processing activities, subject to identity verification and legal exceptions.
• Correction and completion: request correction of inaccurate data or completion of incomplete data.
• Erasure / deletion: request deletion of personal data that is no longer necessary for the stated purpose, subject to retention required by law (including pharmacy and tax records) or for dispute resolution.
• Withdraw consent: withdraw consent for consent-based processing, including marketing communications.
• Grievance redressal: raise concerns with our Grievance Officer (Section 16) and, where applicable law provides, escalate to the Data Protection Board of India or other competent authority.
• Nomination (where applicable): as the DPDP framework recognises, you may be able to nominate another individual to exercise rights on your behalf in the event of death or incapacity, once operational mechanisms are published and applicable.

To exercise rights, email hello@medsnmore.in with the subject “Privacy Request”, describe the request, and include details needed to verify your identity. We may refuse or limit requests that are unfounded, excessive, legally restricted, or that would impair pharmacy-law compliance or others’ rights. We aim to respond within applicable legal timelines. Marketing messages include opt-out instructions; transactional order, security, or prescription messages may continue as needed to perform the service.

15. Cross-border transfers

MedsNMore primarily serves customers in India and seeks to host core operational data in India where practicable. Some processors (cloud, email, analytics, or support tools) may use infrastructure or remote support outside India. Any cross-border transfer will follow applicable Indian law, including DPDP Act restrictions or conditions and notified rules, with contractual and organisational safeguards consistent with this Policy.

16. Grievance officer and contact

If you have questions about this Privacy Policy, wish to exercise privacy rights, or have a complaint about how we handle personal information, please contact:

• Customer support: hello@medsnmore.in · 1800-000-000
• Website: https://medsnmore.in

Grievance Officer (privacy / data protection complaints)

• Designation: Grievance Officer, MedsNMore
• Email: hello@medsnmore.in (subject: “Grievance — Privacy”)
• Phone: 1800-000-000
• Postal / registered address: To be updated upon finalisation of MedsNMore’s registered office details on the Platform.

Include your registered mobile/email, order ID (if relevant), and a clear description of the concern. We endeavour to address grievances promptly and within any applicable statutory timeline. Escalation to the Data Protection Board of India may be available under the DPDP Act where applicable.

17. Third-party links

Links to third-party sites, app stores, or messaging apps are outside our control and governed by those parties’ policies. Content you send us through such channels for support is still handled under this Policy once received.

18. Changes to this Privacy Policy

We may update this Policy to reflect changes in law, technology, security, licensing, or services. The “Last updated” date will change when we publish a revision. Material changes may also be notified via the Platform or email. Continued use after an update becomes effective constitutes acknowledgment of the revised Policy, except where law requires fresh consent. Review this page periodically; prior versions may be available on reasonable request.

19. Governing law and jurisdiction

This Privacy Policy is governed by the laws of India. Subject to mandatory consumer or data-protection forum rules, courts in India have jurisdiction over disputes relating to this Policy, without prejudice to your rights before the Data Protection Board of India or other competent authorities where applicable.

20. Pharmacy-specific notices

• Medicines are supplied subject to Drugs and Cosmetics laws and licensed pharmacy requirements.
• Read labels and consult a registered medical practitioner for prescription medicines; MedsNMore does not replace medical advice.
• License and registered-entity details will appear on the Platform as issued; privacy contacts will be aligned with those disclosures.
• Schedule H / H1 / X and other restricted categories are handled only as permitted by law; additional verification may be required.

For privacy questions not covered above, write to hello@medsnmore.in. This Policy is informational and may be refined after legal review.