Privacy Policy

Bioshield Healthcare Private Limited("Bioshield", "we", "us") is responsible for the personal data collected through our online store at bioshieldhealthcare.in, our information site, and any Bioshield app (the "Platform"). We are the "Data Fiduciary" for that data under the Digital Personal Data Protection Act, 2023.

This policy explains what we collect, why, who we share it with, how long we keep it, and the choices and rights you have. It should be read with our Terms & Conditions.

You give us directly:

• Account details: your name, mobile number, email address (optional), gender, age and account type (Customer, Doctor or Pharmacy).
• Trade verification (doctors and pharmacies only): the practitioner or pharmacy name, hospital or pharmacy name and address, medical registration number, drug licence number, and the proof documents you upload.
• Delivery details: the recipient's name and phone number, house or building, street, city, district, state and PIN code for each saved address.
• Orders: the products, quantities and pack sizes you buy, your cart, your saved (liked) products, and any coupon you apply.
• Wallet and payouts: referral links between accounts, wallet transactions, and, if you withdraw your balance, the UPI ID or bank account details you provide.
• Support: the questions you send through Help & Support or the contact form, and our replies.

Collected automatically:

• Payment status and transaction references from our payment partner. We never receive your full card number, CVV or UPI PIN.
• Technical data such as IP address, browser and device type, and pages visited, recorded in server logs for security and troubleshooting.
• Cookies and browser storage, described in section 6.

We use personal data only for these purposes:

• to verify your mobile number by one-time password and keep you signed in,
• to process, pack, deliver and support your orders, including returns and refunds,
• to verify doctors and pharmacies before offering trade pricing and bonus offers, and to meet our obligations under drug laws,
• to run the referral programme and wallet, including paying out withdrawals,
• to answer your questions and send you service messages about your account and orders,
• to detect and prevent fraud, abuse and security incidents,
• to improve the Platform using aggregated or anonymised usage information, and
• to keep records and meet legal, tax and regulatory requirements.

We process your data on the basis of the consent you give when you register or place an order, and, where the law allows, for legitimate uses such as meeting a legal obligation. We will not send you promotional messages unless you have agreed to receive them, and you can opt out at any time.

We do not sell or rent your personal data. We share it only as needed to provide our service, with:

• Payment partners (Razorpay), to take payments, process refunds and pay out wallet withdrawals.
• Courier partners, who receive the recipient's name, phone number and address needed to deliver your parcel.
• Messaging providers, to send one-time passwords over WhatsApp and service emails.
• Cloud hosting and storage providers, who host the Platform, its database and the documents you upload.
• Authorities, such as drug regulators, tax authorities, courts or law enforcement, when the law requires it or when needed to protect the rights, property or safety of Bioshield, our users or the public.
• A successor business, if Bioshield is involved in a merger, acquisition or sale of assets, subject to this policy.

Our service providers may process data only on our instructions and must protect it. Some of them may store or process data on servers outside India. Where they do, we rely on them to protect it to a standard consistent with this policy and Indian law.

When someone joins with your referral code, we record the link between the two accounts so we can credit rewards. We do not show either person the other's order details. Your referral code is shown only when you choose to copy or share it.

We keep cookies to the minimum the store needs to work:

• Sign-in cookie: a secure, signed cookie that keeps you logged in for up to 30 days. It holds no personal details and cannot be read by page scripts.
• Referral code: if you open a referral link, the code is kept in your browser for up to 30 days so it can be applied when you sign up.

We do not use advertising cookies. You can clear cookies and site data in your browser settings at any time. If you do, you will be signed out.

We keep account data while your account is open. Order, invoice and payment records are kept for as long as tax and drug laws require, usually up to 8 years. Verification documents are kept while your Trade Account is active and for as long as the law requires afterwards. When data is no longer needed, we delete it or make it anonymous.

We use reasonable security practices in line with the Information Technology Act, 2000 and its rules. These include encrypted (HTTPS) connections, OTP-based sign-in with no stored passwords, signed and HTTP-only session cookies, and staff access limited to those who need it. No system connected to the internet can be made completely secure. If a breach affects your data, we will notify you and the authorities as the law requires.

Under the Digital Personal Data Protection Act, 2023, you can:

• ask for a summary of the personal data we hold about you and how it is used,
• correct, complete or update your data. Most details can be edited directly in your account,
• ask us to erase your data, unless we must keep it by law (for example, invoices),
• withdraw your consent at any time. This does not affect processing already done, but we may no longer be able to provide some services,
• nominate someone to exercise these rights for you in the event of death or incapacity, and
• raise a grievance with us and, if unresolved, with the Data Protection Board of India.

To use any of these rights, email support@bioshieldhealthcare.in from your registered email address, or call 9444626144. We may need to confirm your identity before acting on the request.

The Platform is for adults aged 18 and over. We do not knowingly collect personal data directly from children. When a parent or guardian orders for a child, the adult is the account holder and provides the child's details with their consent.

We may update this policy as our services or the law change. The new version applies once it is posted here with a new effective date. If the changes are significant, we will also let you know through the Platform or by message.

For any question or complaint about your personal data, contact our Grievance Officer. We will acknowledge your complaint within 48 hours and aim to resolve it within one month.

Bioshield will never ask for your OTP, card number, CVV or UPI PIN by call, SMS, WhatsApp or email. If anyone does, it is not us. Please report it to support@bioshieldhealthcare.in.