Privacy Policy

This Privacy Policy (“Privacy Policy”) outlines the information that UrMedz Retail Private Limited (“Company”), as the operator of the platform, may collect from you (“You”, “Your” or “User”) through our website (www.urmedz.com) or one or more mobile applications (the “App”). The Company, as the owner and operator of the Platform, is referred to as “We,” “Us,” or “Our” in this document. Our platform includes the facilitation of pharmaceutical purchases and third-party delivery services. This policy explains how We collect, use, process, disclose, and protect your information.

By clicking on “Continue” during the sign-up process, using Our Platform, or accessing Our Services, You confirm that You have read, understood, and agree to the privacy practices described in this Privacy Policy, as well as the Terms of Use (the “Terms”). This includes consent to the collection, storage, and processing of Your information in accordance with the Terms.

This Privacy Policy is incorporated by reference into the Terms. Any capitalized terms not defined within this Privacy Policy will carry the definitions provided in the Terms.

This Privacy Policy is published in compliance with:

  1. Section 43A of the Information Technology Act, 2000 (“IT Act”),
  2. Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (“SPDI Rules”), and
  3. Regulation 3(1) of the Information Technology (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021 (“Intermediaries Guidelines”).

General Terms:

  1. By accessing or using the UrMedz Platform or Services, or by providing Us with Your information, You confirm that You have the legal capacity to enter into a binding contract under Indian law, specifically the Indian Contract Act, 1872. You also confirm that You have read, understood, and agreed to the practices and policies outlined in this Privacy Policy and agree to be bound by its terms.
  2. You hereby consent to Our collection, use, sharing, and disclosure of Your information as described in this Privacy Policy. We reserve the right to update, modify, or amend portions of this Privacy Policy at Our sole discretion at any time. Your continued use of the Platform, App, or Services after such changes signifies implicit acceptance of the Privacy Policy in its amended form. We encourage You to review the Privacy Policy periodically to stay informed of any updates or modifications.
  3. If You are accessing the UrMedz Site or Services from a location outside India, You do so at Your own risk and are responsible for compliance with applicable local laws.
  4. If You do not agree with any terms of this Privacy Policy, please discontinue use of the Site, App, and Services immediately. This Privacy Policy may change periodically without notice, and You are encouraged to review it on the Site or App to stay updated.

1. What Information About You is Collected on the Platform?

When You access the Site or the App or use the Service(s), You may provide, or We may collect, information that may specifically identify You or another individual. Below are the types of information that We may collect:

  1. Information You Provide to Us:
    We receive and store any information You enter on Our Platform or provide to Us in other ways. When You register on the Site or App, We collect registration details, such as phone number, name, geographical address, and email address. Your phone number is verified with a one-time password sent to Your phone number. We also collect information required for providing Services on the Platform, including items You add to the cart, prescription drugs, over-the-counter (OTC) products ordered, and scheduling of consultations or diagnostic tests. Providing certain information is optional, but some features may be unavailable without it.
    Sensitive Personal Data or Information (SPDI):
    We may collect health information when You login on the Platform. This may include medical history, health records, diagnostic results, and other related information. Additionally, we may collect payment information, such as Your payment card number, expiration date, billing, and shipping address. By using the Service, You consent to the recording, storage, and disclosure of such communications.

  2. Information from Other Sources:
    We might receive details about You from other sources, such as partner companies or third parties registered on the Platform, to add to Our account information.
  3. Cookies and Tracking Technologies:
    We use cookies and other tracking technologies to collect data on activity within the Site or App. You can adjust browser/mobile settings to control cookies; however, by blocking cookies, some Platform features may be limited.
  4. Third-party Tools and Software:
    The App may include third-party SDKs for payment processing and other tools to enhance the user experience.
  5. Automatic Information Collection:
    Certain types of information are collected automatically when You interact with Us. For example, We collect information from Your browser about Your device, operating system, and usage patterns. Location data may also be used for internal analysis or to provide location-based services.

Legal Compliance for SPDI Collection:
The IT Act and SPDI Rules regulate the collection, usage, and disclosure of SPDI (Sensitive Personal Data or Information) in India. SPDI may include any data that identifies a person and requires express consent for collection and disclosure.

Consent for Use of Information:
You agree to provide all information, including SPDI, voluntarily, consenting to its use as described in this Privacy Policy. Refusing to provide SPDI may limit Your access to certain Platform features.

2. How Do We Use the Information We Collect?

UrMedz uses the information collected on its platform in various ways to operate effectively, fulfill requests, and improve user experiences. Key uses include:

  1. Fulfilling Service and Order Requests:
    • To process orders for products and services on the platform, ensuring timely delivery and quality of service.
    • To enable access to services such as consulting with medical practitioners and scheduling diagnostic tests.
  2. Improving Platform and User Experience:
    • To analyze user interactions and trends, enabling optimization of the platform for a smoother, more efficient user experience.
    • Tracking and analyzing data for trend-building, recommendation engines, and database improvements to enhance functionality.
  3. Research and Development:
    • UrMedz may use information to research and grow its business operations, including expanding partnerships and refining algorithms for better service offerings.
  4. Customer Support and Communication:
    • To communicate with users, providing order updates, responding to queries, and notifying them about new products or services.
    • To conduct quality assessments, troubleshoot issues, and enhance product and service quality based on user feedback.
  5. Marketing and Promotions:
    • UrMedz may use cookies and automated data to personalize user interactions, offering targeted promotions and advertisements.
    • Users may be contacted via SMS, email, or phone to complete purchases if they have items in their cart but haven’t checked out.
  6. Legal Compliance and Safety:
    • Information is used to comply with laws, audit processes, and ensure user safety. It may be used to prevent illegal activities and fraud or address legal obligations.
  7. Aggregated and De-identified Data Usage:
    • UrMedz may aggregate and de-identify user data for marketing, research, and publication purposes, which allows for business insights without compromising personal information privacy.
  8. Location-Based Services:
    • Location data helps confirm users’ eligibility for certain services and assists in connecting them with nearby medical practitioners or relevant service providers.

3. How Do We Share the Information We Collect?

UrMedz values user privacy and only shares personal information with third parties who adhere to protective data standards that meet or exceed those outlined in this Privacy Policy. Information sharing may occur in the following ways:

  1. Retail and Service Partners:
    • Information is shared with affiliated retail partners, pharmacies, and medical practitioners to fulfill orders and deliver products. These partners, operating on the platform, receive only the necessary details for transaction purposes.
  2. Third-Party Service Providers:
    • Certain personal information is shared with service providers for order fulfillment, diagnostic testing, logistics, and marketing support. These providers, such as labs and payment processors, handle data only to perform specific tasks in compliance with the Privacy Policy and applicable laws.
  3. Legal Compliance:
    • UrMedz may disclose user information if legally required to comply with applicable laws, prevent crime, protect public or user safety, or enforce the terms of use. This may include sharing data with government entities for fraud prevention or credit risk reduction.
  4. Business Transfers:
    • In the event of mergers, acquisitions, or transfers, UrMedz may share user information with third parties involved, who will then adhere to the current Privacy Policy to ensure data continuity and protection.
  5. Internal Business Improvements:
    • UrMedz may use recorded consultations, e-prescriptions, and diagnostic reports to improve service quality, enhance marketing efforts, and customize user experiences. This data may be transferred to third parties, including those outside India, to help refine offerings, provided data protection standards are upheld.
  6. International Data Transfers:
    • Subject to applicable law, UrMedz may transfer data to third parties, both within and outside India, ensuring comparable levels of data protection. By using the platform, users consent to such transfers, even to locations abroad, under protective compliance with Indian and international standards.

Here’s a breakdown of how UrMedz addresses data security and user access to information based on your details:

4. How Secure Is Information About Me?

  1. Security Measures:
    • UrMedz uses a combination of electronic, physical, and procedural safeguards to secure user data during its collection, storage, and disclosure.
    • The platform employs SSL encryption for secure transmission of information and follows internationally recognized Information Security Management System standards to protect stored data.
  2. Access Control:
    • Access to personal data is restricted to employees and agents who need it to fulfill their roles. All are bound by strict confidentiality obligations and are subject to disciplinary actions for non-compliance.
    • Password security is strictly enforced: no employee or administrator can view user passwords, and users are encouraged to keep their passwords and devices secure by logging off after each session.
  3. Incident Response and Liability:
    • UrMedz does not accept liability for unauthorized access resulting from weak password practices. If unauthorized use is suspected, users should immediately notify UrMedz via the provided contact details.
    • In certain situations, UrMedz may disclose data without prior user consent, such as when required by law or government agencies for legal investigations.
    • UrMedz is not responsible for security breaches outside its control, such as hacking, internet service issues, or unauthorized third-party access.

5. What Information Can I Access?

  1. Account and Activity Details:
    • Users can view a range of account and transaction-related information directly on the platform. In some cases, they may also modify or delete personal information.
  2. Correction and Opt-Out Options:
    • Users can correct inaccuracies or deficiencies in their personal data where feasible. They also have options to opt-out of promotional communications and, if preferred, opt back in at a later time.
  1. Are Children Allowed to Use the Platform?
  • Age Restriction: The platform is intended only for individuals who are legally able to form binding contracts under the Indian Contract Act, 1872. Therefore, anyone under 18 is not permitted to use UrMedz.
  • Safeguards for Minors: If UrMedz identifies that someone under 18 has accessed its services or provided personally identifiable information, it will take action to delete that information. Parents or guardians who become aware that their child under 18 has accessed UrMedz can request data deletion by contacting the support team.

7. Third-Party Links

  1. Nature of Third-Party Links: UrMedz may include links to external websites, applications, or resources, often hosted by other companies or advertisers.
  2. Disclaimer of Responsibility: UrMedz does not control or endorse the content on these third-party sites. It is not liable for how these sites handle data collection, the accuracy of their materials, or any transactions made.
  3. User Responsibility: Users are encouraged to use discretion, review third-party privacy policies, and exercise caution as they would with offline interactions.

8. Retention of Information

  • Storage Locations: UrMedz retains personal information or Sensitive Personal Data or Information (SPDI) through trusted third-party cloud services, including Amazon Web Services, Google Cloud Platform, and MongoDB Cloud.
  • Data Destruction and Anonymization: SPDI will be destroyed or anonymized once it is no longer needed for its intended purpose or required by law. However, UrMedz may retain some information for business purposes, which may be anonymized and used for analytics or service delivery.
  • Withdrawal of Consent: Users can withdraw consent for processing their information by contacting UrMedz. However, this may affect service delivery, and uninstalling the app does not delete personal information.

9. Changes to Your Information

  • User Access: Users can review and update their information by logging into their accounts. However, deletion of personal information is not permitted, and incorrect modifications may limit access to the platform.
  • Verification: UrMedz reserves the right to verify a user’s identity to ensure accurate service delivery, and access to personal information may be restricted if it violates rights or applicable laws.

10. Notices

  • Grievance Redressal: Users with privacy concerns or grievances can contact UrMedz’s grievance officer, Sunil Gowda, at the specified address and contact details. UrMedz commits to resolving grievances within one month of receipt.

11. Miscellaneous

  • Disclaimer: While UrMedz is committed to protecting your privacy, it cannot guarantee that your personal information and Sensitive Personal Data or Information (SPDI) will never be disclosed in ways not outlined in the privacy policy. Users acknowledge that they assume all responsibility and risk for their use of the platform and the information they post or access.
  • Indemnity: Users agree to indemnify UrMedz against any claims or disputes arising from their disclosure of information to third parties through the platform or elsewhere. UrMedz disclaims liability for actions by third parties regarding any personal information that users may have shared with them.
  • Severability: Each clause of the privacy policy is independent. If one clause is found to be null and void, it does not affect the validity of the remaining clauses.