Privacy policy
Med-Mart customer and pharmacy-admin apps are operated by MED MART MEDICAL AND GENERAL STORES. Effective: 16 October 2026.
Information we use
We process delivery names, mobile numbers, addresses, medicine requests, order amounts and status, prescription and reference files you provide, and privacy/support requests. An app session identifier lets your installation access its orders. Optional location information is sent when you choose to use it for delivery.
The pharmacy-admin app uses administrator credentials and, when alerts are enabled, notification registration identifiers. Our servers also process connection information such as IP addresses, request paths, timestamps and errors for operation and security.
Why we use it
We use this information to review and fulfil order requests, verify prescriptions, arrange delivery, show order history, respond to support and handle privacy requests. Cash on Delivery is currently supported; online payment collection and doctor consultations are not currently available.
Choices and permissions
You can type an address without sharing location. Camera and file-picker options let you select a prescription or reference attachment. Allowing location does not require you to use it for every order. You can change Android permissions in phone settings.
Who can access information
Authorized pharmacy staff use the admin app to review and manage orders. Delivery personnel receive the contact/address and delivery details needed to fulfil your order. Infrastructure providers process data to host and operate our service. Firebase handles pharmacy-admin notifications; our notification payload contains an order identifier, not your name, address or prescription. WhatsApp and email support use external services with their own privacy practices. We may disclose records when required by applicable law.
Security and storage
App-server traffic uses HTTPS. Customer sessions and administrator authentication control app access. Server records and backups require restricted access. Selected information is also stored on your device. No security measure eliminates every risk.
Retention and deletion
We retain information for order fulfilment, support and applicable record-keeping obligations. On a verified deletion request, we remove the account and associated information that no longer has a required purpose. Where a specific transaction or pharmacy record must remain, we identify the record, reason and retention end date and restrict it from ordinary order use.
Record periods differ: GST records generally follow the statutory 72-month period measured from the relevant annual-return due date, with extensions where applicable. The Schedule H1 dispensing register has a three-year requirement. These rules do not mean every uploaded prescription or location must be kept for the same period. We review the actual record category and explain any exception that applies to your request.
Our managed recovery copies are scheduled for retirement within 30 days. Removing active data does not instantly remove every recovery copy. The current privacy ledger is preserved separately when restoring an older order database so deleted accounts are not restored. Minimal deletion identifiers remain while needed to prevent restoration from older recoverable copies. Retained records are reviewed at their recorded expiry. If a legal obligation or a copy outside the active service delays complete removal, we explain that in the request outcome.
Make a request or raise a concern
Open Account → Request account/data deletion, or email medmartstorez@gmail.com. You may also request access, correction or help withdrawing optional permissions. The Med-Mart owner handles these requests. Phone: +91 63002 88581.
We aim to acknowledge requests within 2 working days and complete verified deletion requests within 30 days, except for specific records that must remain. We verify ownership using relevant existing details and explain any additional information needed. Requesting deletion does not automatically cancel an active order; we will help resolve its handling.
Request account and data deletion
Uninstalling or clearing the app does not delete server records. The app's clear-phone-data option removes app-managed information on that phone; files saved elsewhere need separate removal.
Changes
We update this page when our practices change and revise the effective date. Contact us if you have a question about this policy.