Privacy Policy

Last updated: January 1, 2026

Your privacy matters to us. This policy explains how MediStore collects, uses, and protects your personal information when you use our platform.

MediStore ("we", "our", "us") is committed to protecting the privacy of our customers, sellers, and all users of our platform. By using MediStore, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the platform.

1. Information We Collect

Personal identification information (name, email address, phone number) when you register or place an order.
Delivery address and postal information required to fulfill your orders.
Payment method details — we do not store full card numbers; only payment confirmation tokens are retained.
Order history and browsing activity within the platform to improve recommendations.
Technical data such as IP address, browser type, and device identifiers for security and analytics.

2. How We Use Your Information

To process and deliver your medicine orders, including sending order confirmations and delivery updates.
To verify your identity and maintain account security.
To personalize your experience and show relevant medicines and categories.
To communicate important service updates, promotions, and health tips (you may opt out at any time).
To comply with legal obligations, including prescription verification requirements.
To improve our platform through aggregated, anonymised analytics.

3. Information Sharing

We do not sell, rent, or trade your personal information to third parties.
We share information with licensed pharmacists and delivery partners only to the extent required to fulfil your order.
Payment processors receive only the minimum data necessary to complete transactions securely.
We may disclose information to law enforcement or regulatory authorities when required by law.
In the event of a merger or acquisition, customer data may be transferred as part of that transaction with prior notice.

4. Data Security

All data is transmitted over HTTPS with TLS encryption.
Passwords are hashed using industry-standard algorithms and never stored in plain text.
Access to personal data is restricted to authorised personnel on a need-to-know basis.
We conduct regular security audits and vulnerability assessments of our systems.
Despite our best efforts, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong, unique password.

5. Cookies & Tracking

We use essential cookies to keep you signed in and maintain your cart session.
Analytics cookies (anonymised) help us understand how users navigate the site so we can improve it.
You may disable non-essential cookies through your browser settings without affecting core functionality.
We do not use third-party advertising cookies or cross-site tracking technologies.

6. Your Rights

Access: You may request a copy of the personal data we hold about you at any time.
Correction: You may update your name, address, and contact details from your Profile page.
Deletion: You may request account deletion by contacting our support team. Certain order records may be retained for legal compliance.
Portability: You may request your data in a machine-readable format.
Opt-out: You may unsubscribe from marketing emails via the link in any newsletter we send.

7. Children's Privacy

MediStore is not directed at children under the age of 13. We do not knowingly collect personal information from children.
If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website.
The 'Last updated' date at the top of this page indicates when the policy was last revised.
Continued use of MediStore after changes are posted constitutes your acceptance of the revised policy.

Contact Us About Privacy

If you have any questions about this Privacy Policy or how we handle your data, please reach out to our Data Protection team.

privacy@medistore.com

+880 1234-567890

1. Information We Collect

Personal identification information (name, email address, phone number) when you register or place an order.

Delivery address and postal information required to fulfill your orders.

Payment method details — we do not store full card numbers; only payment confirmation tokens are retained.

Order history and browsing activity within the platform to improve recommendations.

Technical data such as IP address, browser type, and device identifiers for security and analytics.

2. How We Use Your Information

To process and deliver your medicine orders, including sending order confirmations and delivery updates.

To verify your identity and maintain account security.

To personalize your experience and show relevant medicines and categories.

To communicate important service updates, promotions, and health tips (you may opt out at any time).

To comply with legal obligations, including prescription verification requirements.

To improve our platform through aggregated, anonymised analytics.

3. Information Sharing

We do not sell, rent, or trade your personal information to third parties.

We share information with licensed pharmacists and delivery partners only to the extent required to fulfil your order.

Payment processors receive only the minimum data necessary to complete transactions securely.

We may disclose information to law enforcement or regulatory authorities when required by law.

In the event of a merger or acquisition, customer data may be transferred as part of that transaction with prior notice.

4. Data Security

All data is transmitted over HTTPS with TLS encryption.

Passwords are hashed using industry-standard algorithms and never stored in plain text.

Access to personal data is restricted to authorised personnel on a need-to-know basis.

We conduct regular security audits and vulnerability assessments of our systems.

Despite our best efforts, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong, unique password.

5. Cookies & Tracking

We use essential cookies to keep you signed in and maintain your cart session.

Analytics cookies (anonymised) help us understand how users navigate the site so we can improve it.

You may disable non-essential cookies through your browser settings without affecting core functionality.

We do not use third-party advertising cookies or cross-site tracking technologies.

6. Your Rights

Access: You may request a copy of the personal data we hold about you at any time.

Correction: You may update your name, address, and contact details from your Profile page.

Deletion: You may request account deletion by contacting our support team. Certain order records may be retained for legal compliance.

Portability: You may request your data in a machine-readable format.

Opt-out: You may unsubscribe from marketing emails via the link in any newsletter we send.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website.

The 'Last updated' date at the top of this page indicates when the policy was last revised.

Continued use of MediStore after changes are posted constitutes your acceptance of the revised policy.