Privacy Policy

01

Information we collect

• Identity and contact information, including name, email, mobile number, address, city, and PIN code.
• Account, request, order, payment, refund, support, and transaction information where those services are enabled.
• Prescription images and information needed for lawful pharmacy review. Prescription and health-related information is treated as highly sensitive in practice.
• Device, browser, IP address, security, diagnostic, and Platform-usage information reasonably needed to operate and protect the service.
• Partner and business information supplied by pharmacy and delivery-partner applicants during applicable onboarding processes.

02

How we use information

• To provide, facilitate, secure, troubleshoot, and improve the Platform and its marketplace workflows.
• To route customer requests to participating pharmacies and support pharmacy review, order handling, delivery, payment, refund, and customer support where enabled.
• To verify identity, prevent fraud and misuse, comply with legal obligations, maintain records, and respond to grievances or disputes.
• To communicate service information and, where lawful consent or another valid basis exists, relevant updates or promotions.

03

Prescription and health information

Prescription information is collected only where needed to facilitate lawful pharmacy review and related order handling. PillRocket may transmit it securely to the relevant licensed pharmacy partner and service providers strictly needed to support the transaction and Platform operations.

PillRocket does not sell prescription or health information to advertisers. Pharmacy partners may have independent statutory duties to retain prescriptions, sale records, or invoices for specified periods.

04

Sharing of information

• With licensed pharmacy partners to review and fulfil a request.
• With delivery partners only to the extent needed to complete the delivery handoff; prescription details should not be shared with a rider unless strictly necessary and lawful.
• With payment, hosting, communications, security, analytics, and other service providers under appropriate safeguards where those services are enabled.
• With regulators, courts, law-enforcement bodies, or other persons where required by law, necessary to protect rights and safety, or relevant to a corporate reorganisation subject to lawful safeguards.

05

Cookies and communications

The Platform may use essential cookies or similar technologies for security, sessions, preferences, diagnostics, and performance. Optional analytics or marketing technologies will be used only with any consent required by applicable law.

Email verification codes may be sent through communications service providers, and temporary server-side verification records may be used to complete verification, limit abuse, and protect the Platform.

Service communications may be sent when needed to operate an account, request, order, support case, or legal notice. Users may withdraw consent from optional communications where applicable.

06

Retention and deletion

Personal information is retained only for as long as reasonably necessary for the purposes described in this Policy and for legal, tax, fraud-prevention, dispute, audit, and record-keeping requirements.

A pharmacy partner may have independent statutory duties to retain prescriptions, sale records, or invoices. Deletion may be requested at legal@pillrocket.com, but some information may need to be retained where deletion would conflict with a legal obligation, ongoing dispute, fraud-prevention need, or statutory record-retention requirement.

07

Your choices and data requests

Subject to applicable law and identity verification, users may request access to information held about them, correction of inaccurate information, deletion where legally available, withdrawal of consent where processing is based on consent, or review of a privacy grievance.

The Digital Personal Data Protection Act, 2023 includes rights relating to access, correction or erasure, grievance redressal, and nomination. PillRocket will make corresponding statutory mechanisms available as and when the relevant provisions become applicable.

08

Security and children

PillRocket will maintain reasonable security practices and organisational controls appropriate to the nature of the information processed, including access management, authentication, logging, monitoring, and safeguards intended to prevent unauthorised access, loss, alteration, or disclosure.

The Platform is intended for users legally competent to contract. Where a minor’s information is processed through a parent or guardian, PillRocket will handle it in accordance with applicable law and relevant requirements as they become applicable.

09

Privacy and grievance contact