Swasthkart.com (“we”, “us”, “our”) is committed to protecting your privacy and personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws including the Information Technology Act, 2000. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website, mobile application, or services for purchasing medicines (Ayurvedic, Allopathy), medical devices (BP machines, glucometers, thermometers), pathology tests, and home sample collection services.
By using Swasthkart.com, you consent to the practices described herein.
1. Information We Collect
We collect the following personal data:
Personal Information:
● Name, email address, phone number, address (for delivery)
● Date of birth, gender (for prescription verification)
● Payment details (processed securely via third-party gateways)
Health-Related Data (Sensitive Personal Data):
● Prescription details, medical history (for medicine sales)
● Pathology test results, sample collection details
● Health parameters from devices (BP readings, sugar levels)
Technical Data:
● IP address, browser type, device information, cookies
● Usage data, pages visited, time spent on site
Data from Services:
● Appointment details for home sample collection
● Test reports and results
2. How We Collect Information
● Directly from you: During registration, order placement, prescription upload,
sample collection booking
● Automatically: Through cookies, server logs, analytics tools
● From third parties: Payment gateways, logistics partners, pathology labs
3. Purpose of Data Collection
Your personal data is processed for:
● Processing orders and deliveries
● Prescription verification and medicine dispensing
● Pathology testing and home sample collection
● Payment processing and invoicing
● Customer support and query resolution
● Marketing and promotional communications (with consent)
● Compliance with legal requirements (Drugs & Cosmetics Act, Pharmacy regulations)
● Improving our services and website functionality
4. Legal Basis for Processing
We process data under:
● Consent (DPDP Act): Explicit consent for marketing, sensitive health data
● Contractual necessity: For order fulfillment, service delivery
● Legal obligation: KYC, prescription verification, record keeping
● Legitimate interests: Fraud prevention, service improvement
5. Sharing Your Information
We share data only when necessary:
● Service Providers: Payment gateways (Razorpay, PayU), logistics (Delhivery), pathology labs, SMS providers
● Regulatory Authorities: Drug Controller, CDSCO for compliance
● Business Transfers: In case of merger/acquisition.
We do not sell your personal data.
6. Data Security
We implement:
● SSL encryption for website
● Secure payment processing
● Access controls for health data
● Regular security audits
● Data breach notification within 72 hours (as per DPDP Rules)
7. Data Retention
● Order data: 10 years (as per Drugs & Cosmetics Rules)
● Health data: Minimum 3 years or as required by law
● Marketing data: Until consent withdrawal
● Technical data: 12 months
8. Your Rights (DPDP Act)
As a Data Principal, you have rights to:
● Access your personal data
● Correct inaccurate data
● Erase data (subject to legal retention)
● Withdraw consent anytime
● Grievance redressal
Contact for Rights:
privacy@swasthkart.com
9. Cookies and Tracking
We use cookies for:
● Site functionality
● Analytics (Google Analytics)
● Personalization
You can manage cookies via browser settings
10. Children’s Privacy
Our services are not for children under 18. We do not knowingly collect data from minors.
11. Third-Party Links
Our site may contain links to third-party sites (labs, pharmacies). We are not responsible for their privacy practices.
12. International Data Transfers
Data may be processed by cloud providers outside India with adequate safeguards
(Standard Contractual Clauses).
13. Changes to Privacy Policy
We may update this policy. Changes will be posted here with effective date.
14. Grievance Officer
Name: Vishal Pratap Singh
Email: privacy@swasthkart.com
Phone: [Your Phone Number]
Address: Lucknow, Uttar Pradesh
Response Time: Within 72 hours (DPDP compliance)
15. Contact Us
For questions:
privacy@swasthkart.com