Legal Document
How Drugs General collects, uses, and protects your personal information.
Effective Date: September 4, 2026
Contents
Drugs General ("Drugs General", "we", "us", "our") is committed to protecting the privacy of every individual who visits, registers with, or purchases from our platform. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, with whom we share it, and the rights available to you. It is governed by the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the applicable provisions of the Personal Data Protection Bill, 2023 as enacted. Where applicable, we also address obligations under the EU General Data Protection Regulation ("GDPR"), the UK GDPR / Data Protection Act 2018, and the California Consumer Privacy Act ("CCPA") for visitors in those jurisdictions.
The data controller responsible for your personal data is Drugs General, operating the website at https://www.drugsgeneral.com/.
| Registered Name | Drugs General |
| Registered Address | [Registered Address, City, State – PIN] |
| Contact Email | [email protected] |
| +919911661996 | |
| Jurisdiction | Republic of India |
A. Data You Provide Directly
B. Data Collected Automatically
C. Sensitive Personal Data (SPDI)
Prescription information and health-related product purchases may constitute Sensitive Personal Data or Information (SPDI) under Rule 3 of the SPDI Rules, 2011. We collect this data only where necessary to process a lawful prescription-based order, we obtain your express consent before doing so, and we apply heightened security and access controls to it.
We process your personal data on the following lawful bases:
We will never sell, rent, or trade your personal data to third parties for their own marketing purposes.
We share your data only as described below, and only where necessary:
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law:
| Data Category | Retention Period |
|---|---|
| Order & billing records | 7 years (Indian GST / income tax obligations) |
| Prescription records | 5 years from date of dispensing (pharmacy law) |
| Account data (active accounts) | Duration of account plus 2 years after closure |
| Customer support records | 3 years from resolution of the matter |
| Marketing consent records | Until consent is withdrawn, then 1 year for audit trail |
| Server / access logs | 90 days (security and fraud investigation) |
| Analytics data (aggregated) | 24 months, then anonymised or deleted |
Drugs General implements technical and organisational measures consistent with the SPDI Rules, 2011 to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:
No method of transmission over the internet is 100% secure. While we take all commercially reasonable steps to protect your data, we cannot guarantee absolute security.
Depending on your country of residence, you have the following rights. To exercise any right, contact us at the address in Section 13.
We will respond to all verified requests within 30 days. We may need to verify your identity before processing a request. Where we cannot fulfil a request, we will explain why.
Drugs General processes data in India. When we transfer data to couriers, payment processors, or technology partners located outside India, we ensure appropriate safeguards are in place, including: Standard Contractual Clauses (SCCs) for transfers to non-adequate countries under GDPR; contractual obligations on recipients binding them to equivalent data-protection standards; and transfer only of the minimum data necessary to deliver the relevant service.
Our platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it without delay. If you believe a minor has provided us with personal data, please contact us immediately at [email protected].
We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. We will notify you of material changes by posting a notice on our website and, where we hold your email address, by sending you an email. The "Effective Date" at the top of this page shows when the current version came into effect. Your continued use of our platform after the effective date of a revised policy constitutes your acceptance of the changes.
For any privacy-related questions, access requests, or complaints, please contact our Data Protection Officer:
| Company | Drugs General |
| Address | [Registered Address, City, State – PIN] |
| [email protected] | |
| +919911661996 | |
| Response Time | Within 30 days of receipt of a verified request |
If you are an EU or UK resident and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority (e.g. the ICO in the UK, or your national Data Protection Authority in the EU).
© 2026 Drugs General. This Privacy Policy was last reviewed on September 4, 2026. Continued use of the platform following any amendment constitutes acceptance of the revised policy.
