Who we are
Pharmix Dev (“Pharmix”, “we”) is a marketplace that connects licensed pharmacies with distributors and manufacturers, and patients with licensed pharmacies near them for home delivery. This policy covers the Pharmix website and mobile apps. We process personal data as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).
What we collect
- Your name and phone number — your phone number is how you sign in (a one-time code is sent to it). Your name appears on orders.
- Email address, if you add one — for receipts and, optionally, password sign-in.
- Delivery addresses, including the map position (latitude and longitude) stored with each address so a pharmacy and its rider can find you and so we can show pharmacies that deliver to you. We do not track your location in the background.
- Orders and purchase history — what you ordered, from whom, when, the amounts, returns, ratings and refill schedules.
- Prescriptions (health data) — the prescription images you upload, the details on them (doctor, patient name and age), and the dispensing pharmacist’s verification record: who verified it, when, what it allows and any refills.
- Payments — online payments are handled by our payment gateway. We receive only the payment status and a reference. We never see or store your card or bank details.
- For pharmacies and distributors: business details you give us for verification — drug licence numbers and expiry, GSTIN, pharmacist name and registration — plus your credit ledger.
- Basic technical data — a session cookie that keeps you signed in, and server logs (IP address, time, the page requested) kept to run and secure the service.
Why we use it
- Your account — signing you in and keeping your details.
- Fulfilment — sending your order to the pharmacy or distributor who will supply it, invoicing and returns.
- Delivery — giving the pharmacy and its rider the address, position and phone number needed to deliver your order.
- Legally required prescription records — a prescription-only medicine is dispensed only against a prescription a pharmacist has verified, and the law requires pharmacies to keep records of certain supplies (for example the Schedule H1 register).
- Safety and support — preventing fraud and abuse, and answering you when you contact us.
We rely on your consent when you create an account and upload a prescription, and on legal obligation for the records the law requires.
Who it is shared with
- The pharmacy or distributor you order from, and only the details that order needs. A prescription is seen only by the pharmacy you send it to.
- The delivery rider carrying your order: your name, address, position and a phone number to reach you.
- The payment gateway, to take an online payment.
- Our hosting and SMS providers, who process data on our behalf and under contract.
- Authorities, where the law requires it (for example a drug inspector reviewing a pharmacy’s register).
No tracking, no ads, no sale
We do not track you across other apps or websites, we do not use advertising networks or advertising identifiers, and we do not sell your personal data.
How long it is kept
We keep your data while your account is open. When you delete your account we erase your profile, addresses and saved items. Some records are kept for the period the law requires even after deletion: prescription records, the pharmacist’s verification and Schedule H1 register entries, and tax invoices and accounting records. These are kept only for that purpose and then deleted.
Your rights and deleting your account
Under the DPDP Act you can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct or update it — most of it you can edit yourself under Account;
- erase it, by deleting your account;
- withdraw your consent, and nominate someone to act for you.
To delete your account, email the support contact shown in the app from the email on your account, or write from the app’s support page, with the subject “Delete my account” and the phone number you sign in with. We confirm it is you and complete the deletion within 30 days, except for the records described above. See Support.
If you are not satisfied with our answer you may complain to our grievance contact at the support contact shown in the app, and then to the Data Protection Board of India.
Security
Data is encrypted in transit, access is limited to people who need it, prescription files are served only to the pharmacy you sent them to, and pharmacy records that the law requires to be kept cannot be edited once written.
Children
Pharmix accounts are for adults. A parent or guardian may order and upload a prescription for a child.
Changes and contact
If this policy changes we will update the date above and, for significant changes, tell you in the app. Questions: the support contact shown in the app.