RapidMedico – Privacy Policy (Final)#

For the RapidMedico website and mobile apps. Replace every [BRACKET] with your real details before publishing, and have a lawyer review the final text.

Effective date: 2026-10-29 | Version: 1.0

1. Introduction#

1.1 RAPIDMEDICO LLP (LLPIN ADC-0032, GSTIN 08ABOFR5960R1Z1, registered office Ward No. 01, Sujangarh Bypass Road, Salasar, Salasar, Sujangarh, Churu- 331506, Rajasthan, India, Jaipur, Rajasthan, India) ("RapidMedico", "we", "us") respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use, share and protect it, and the choices and rights you have.

1.2 It applies to the RapidMedico website https://rapidmedico.com and the RapidMedico mobile apps (together, the "Platform"), and is written to comply with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 and the rules made under it (together, "Data Protection Law"). For the purposes of that law, RapidMedico is the Data Fiduciary and you are the Data Principal.

1.3 By using the Platform and giving your consent in the app, you agree to this Policy. If you do not agree, please do not use the Platform.

2. Who this covers#

This Policy covers: Customers who order medicines or use health features, visitors to our website, and, to the extent stated in Section 5, the Pharmacies, Delivery Partners and Doctors who use our partner apps. Partners are also covered by their own agreements with us.

3. Personal data we collect#

3.1 Data you give us#

• Account data: name, mobile number, email address, profile photo (optional), date of birth or age (where needed), gender (optional).
• Address data: delivery addresses, landmarks and address labels (Home, Work).
• Prescription and order data: prescriptions you upload (images or PDFs), medicines searched or ordered, quantities, order history, notes to the Pharmacy.
• Health-related data you choose to share: pill reminders and dose schedules, health records, consultation details, symptoms or conditions you describe to a Doctor. This is sensitive personal data and we handle it with extra care.
• Payment data: payment status, amount, transaction ID and the payment method type. We do not receive or store your full card number, CVV or UPI PIN; these are handled by the payment gateway.
• Communications: messages to support, in-app chats, call recordings (where announced), feedback, ratings and reviews.

3.2 Data collected automatically#

• Location: precise location (GPS) while using the app, with your permission, to show serviceable areas, find nearby Pharmacies, assign delivery and enable live tracking. We do not track your location in the background unless you are on an active delivery and have allowed it.
• Device and technical data: device model, operating system, app version, language, IP address, unique identifiers, push notification token, crash logs and performance data.
• Usage data: screens viewed, features used, search terms, time spent, and referral source.
• Cookies and similar technologies on the website (see Section 13).

3.3 Data from other sources#

• Payment gateways (payment success or failure, refund status).
• Pharmacies and Delivery Partners (order acceptance, pickup and delivery status, substitution requests, handover confirmation).
• Doctors (the consultation record and prescription they issue to you).
• Phone contacts or camera and gallery files only when you give permission, for example to upload a prescription.

3.4 Partner data#

For Pharmacies, Delivery Partners and Doctors we also collect identity and KYC documents (Aadhaar or other ID, PAN, photograph), drug licence, GST, medical registration number, bank account details, vehicle and driving-licence details, address and work availability, to verify, onboard and pay them.

4. Why we use your data and our legal basis#

We use your data only for the purposes stated here, or for another purpose where you consent or the law allows.

5. How we protect your privacy between users (privacy by design)#

• Pharmacies receive only the order items, the prescription where required, and the minimum details needed to fulfil the order. They do not receive your phone number, email, full address or payment details.
• Customers are not shown the identity of the Pharmacy that accepts the order, except as required on a tax invoice or by law.
• Delivery Partners see only the delivery address and handover information for the active order, and contact you through the app or a masked number. They must not save or share your data.
• Doctors see only the information needed for the consultation.

These rules are enforced through our partner agreements and access controls, and breaches can lead to removal from the Platform.

6. Who we share data with#

We do not sell your personal data. We share it only as follows:

1. Pharmacies, Delivery Partners and Doctors, to the limited extent described in Section 5.
2. Service providers (data processors) that work for us under written contracts and confidentiality obligations, such as:

• cloud hosting, database, authentication, storage and push-notification providers (for example Google Firebase);
• image and document storage providers (for example Cloudinary);
• map and location providers (for example Google Maps);
• payment gateways and banks;
• SMS, WhatsApp and email providers for OTPs and notifications;
• analytics and crash-reporting tools;
• AI service providers, if we use AI-assisted features such as search or suggestions (we do not use your prescriptions or health data to train third-party AI models without your consent).

1. Professional advisers such as auditors and lawyers, under confidentiality.
2. Government, regulators, courts and law-enforcement agencies, where required by law, legal process, or to protect rights, safety and prevent fraud.
3. Business transfers: if we merge, restructure or transfer our business, your data may be transferred, with the same level of protection and notice to you.
4. With your consent, for any other purpose we tell you about at that time.

7. Sensitive and health data#

7.1 Prescriptions, medicines, reminders, consultations and health records reveal sensitive information. We collect and use them only with your explicit consent and only to provide the features you ask for.

7.2 We restrict internal access to this data on a need-to-know basis, protect it with encryption and access controls, and do not use it for advertising or share it with advertisers.

7.3 You can withdraw consent at any time, delete saved prescriptions and records where the law permits, or delete your account (see Section 11).

8. Location data#

We ask for location permission when you use features that need it. You can change this in your device settings at any time. If you turn it off, you can still enter an address manually, but nearby-Pharmacy matching and live tracking may not work.

9. Children's data#

9.1 The Platform is meant for adults. If you are under 18, a parent or legal guardian must create the account and give consent on your behalf.

9.2 We do not knowingly process a child's personal data without verifiable parental or guardian consent. We do not track, monitor the behaviour of, or show targeted advertising to children.

9.3 If you believe a child has given us data without consent, contact us at rapidmedico10@gmail.com and we will delete it.

10. How long we keep your data#

We keep personal data only for as long as needed for the purpose it was collected for, and as required by law:

• Account data: while your account is active, and for up to [90] days after deletion for closing pending issues.
• Order, invoice and payment records: up to [8] years, as required by tax and accounting laws.
• Prescriptions and dispensing records: for the period required under drug laws (typically [3] years or more), after which they are deleted or anonymised.
• Consultation records: for the period required by Telemedicine and medical record rules.
• Support chats and call recordings: up to [12] months.
• Location data: only as long as needed for the order and tracking, then anonymised or deleted within [30] days, except where kept for dispute resolution.
• Logs and security data: up to [12] months.
• Partner KYC data: during the relationship and for the legally required period afterwards.

Where data must be kept for legal reasons, we restrict its use to those purposes.

11. Your rights#

Under Data Protection Law you have the right to:

• Access a summary of the personal data we process and the parties we have shared it with;
• Correct and update inaccurate or incomplete data;
• Erase your personal data when it is no longer needed for the purpose or you withdraw consent (subject to legal retention);
• Withdraw consent at any time, as easily as it was given, understanding that this may limit the services we can provide;
• Grievance redressal, by contacting our Grievance Officer (Section 16), and then the Data Protection Board of India if unresolved;
• Nominate another person to exercise your rights in the event of your death or incapacity.

How to use your rights: in the app go to Profile > Privacy & Data (or Delete Account), or email rapidmedico10@gmail.com from your registered email or mobile number. We may verify your identity first. We aim to respond within [30] days, or sooner where the law requires.

Account deletion: deleting your account removes or anonymises your personal data, except records we must keep by law (for example invoices and prescription records), which we retain securely and use only for those purposes.

12. Security#

We use reasonable security safeguards, including encryption in transit and at rest where applicable, role-based access, authentication, secure cloud infrastructure, activity logging, regular reviews and staff confidentiality obligations. No system is completely secure, so please protect your device, use a screen lock, and never share your OTPs.

If a personal data breach affects you, we will notify you and the Data Protection Board of India as required by law.

13. Cookies and similar technologies#

Our website uses cookies and similar technologies:

• Essential cookies for security, login and basic functions (cannot be turned off).
• Preference cookies to remember settings.
• Analytics cookies to understand how the site is used (for example Google Analytics), only with your consent.
• Marketing cookies, only with your consent.

You can accept, reject or customise non-essential cookies in the cookie banner, and manage cookies in your browser settings. The mobile app uses device identifiers and SDKs for notifications, crash reporting and analytics, which you can limit in your device settings.

14. Transfers outside India#

Our service providers may store or process data on servers located outside India. Where this happens, we ensure the data is protected by appropriate safeguards and contracts, and only to countries not restricted by the Government of India under Data Protection Law.

15. Third-party links and services#

The Platform may link to third-party websites or use third-party services (maps, payment pages). Their privacy practices are not covered by this Policy. Please read their policies before sharing data with them.

16. Contact and Grievance Officer#

For questions, requests or complaints about your data:

Data Protection / Grievance Officer: Arun Prajapat, Partner

Email: rapidmedico10@gmail.com | Phone: +91 83023 89192 (Mon–Sat, 10:00 AM – 6:00 PM IST)

Address: RAPIDMEDICO LLP, Ward No. 01, Sujangarh Bypass Road, Salasar, Salasar, Sujangarh, Churu- 331506, Rajasthan, India, Jaipur, Rajasthan, India

We acknowledge complaints within 48 hours and aim to resolve them within [15] days. If you are not satisfied, you may approach the Data Protection Board of India.

17. Changes to this Policy#

We may update this Policy to reflect changes in our practices or in the law. We will post the updated version with a new effective date and, for material changes, notify you in the app or by email and, where required, ask for your fresh consent. Please review it regularly.

18. Summary of key points#

• We collect only what we need to deliver your medicines and health features.
• Health data and prescriptions are used only with your consent and are never sold or used for advertising.
• Pharmacies never get your phone number or full address; you are not shown the Pharmacy's identity.
• You can access, correct, delete your data and withdraw consent any time.
• Contact rapidmedico10@gmail.com for anything about your privacy.