Privacy Policy

1. Who We Are

This website is operated by Doctors Foodstore India Private Limited (“we”, “us”, “our”, or “Doctors Foodstore”), a private limited company incorporated in India on 13 February 2026 under the Companies Act, 2013.

Company Details

- Legal Entity: Doctors Foodstore India Private Limited
- CIN: U10409UP2026PTC244176
- GSTIN: 09AAMCD4495R1ZJ
- FSSAI Licence Number: 12726059000039
- Registered Office: 359, Near Laxmi Dharm Kata, Kusadi Post Office Pawan, Aliganj Road, Etah, Uttar Pradesh 207001, India
- Manufacturing Facility: Gat No. 493, Ranjangaon, Pune–Nagar Road, Opposite Sangram Hotel, Tal. Shirur, Dist. Pune, Maharashtra [PIN CODE]
- Contact Email: care@doctorsfoodstore.com

For the purposes of the Digital Personal Data Protection Act, 2023, we act as the Data Fiduciary in respect of personal data collected through this website. You are the Data Principal.

For questions about this policy or your personal data, write to our Grievance Officer at care@doctorsfoodstore.com. Full contact details are provided in Section 14.

2. What This Policy Covers

This policy applies to personal data we collect when you visit our website, create an account, place an order, subscribe to our communications, scan the Health Passport QR code on a product, contact our support team, or apply to join our Doctors Committee panel.

It does not apply to any third-party website we link to, each of which has its own privacy policy.

3. What Personal Data We Collect

3.1 Information You Give Us

- Identity and contact information: Name, email address, mobile number, and delivery and billing addresses.
- Order information: Products ordered, order value, order history, and delivery instructions you provide.
- Account information: Username and password, where you choose to create an account.
- Payment information: Payments are processed entirely by our payment gateway. We receive confirmation of payment and the last four digits of a card. We do not store full card numbers, CVV, or UPI credentials on our systems.
- Communications: Messages, emails, WhatsApp messages, calls and support tickets exchanged with us, including information you voluntarily provide.
- Marketing preferences: Whether you have chosen to receive our emails, SMS or WhatsApp messages, and any subsequent change to that choice.
- Reviews and feedback: Product reviews, ratings, survey responses and testimonials you submit.

3.2 Information Collected Automatically

- Device and technical information: IP address, browser type and version, operating system, device type, screen resolution and language settings.
- Usage information: Pages visited, time spent, products viewed, items added to cart, search terms and the path taken through the site.
- Referral information: The website, advertisement or campaign that brought you to us, including advertising campaign parameters in the link you clicked.
- Cookies and similar technologies: Details are provided in Section 6.
- Health Passport scans: When you scan the QR code on a product, we record the batch scanned, the date and time, and approximate location derived from your IP address. We do not link this information to your identity unless you are signed in.

3.3 Information From Other Sources

We may receive information from:

- Our courier partners, including delivery status, delivery confirmation and reasons for failed delivery.
- Our payment gateway, including payment success or failure and fraud-screening outcomes.
- Advertising and analytics platforms, including aggregated campaign performance and audience information where you have consented on those platforms.
- Marketplaces or retail partners where you purchase from them rather than directly from us.

4. Sensitive Personal Data — and What We Deliberately Do Not Collect

We sell a food product. We do not need your medical information to sell it, and our forms are deliberately designed not to ask for it.

We do not ask for, and ask you not to send us, information about your medical conditions, diagnoses, medications, test results or treatment.

If you voluntarily provide such information in a message to us, for example in a support email explaining your interest in the product, we will use it only to answer you. We will not add it to your marketing profile and will delete it from our records once your query is resolved.

Where we process data that qualifies as sensitive personal data or information under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we do so only with your explicit consent and only for the purpose for which you provided it.

5. Why We Use Your Data and on What Basis

We use personal data for the following purposes:

- Fulfilling your order: Processing payment, preparing and dispatching products, sharing your address with the courier and keeping you informed of delivery. Basis: performance of our contract with you.
- Customer support: Answering questions, resolving complaints, and processing returns and refunds. Basis: performance of our contract and our legitimate interest in supporting customers.
- Account management: Creating and maintaining your account and order history. Basis: performance of our contract.
- Marketing communications: Sending emails, SMS or WhatsApp messages about products, offers and content. Basis: your consent, which you may withdraw at any time.
- Advertising: Showing advertisements on other platforms and measuring their effectiveness. Basis: your consent to non-essential cookies and tracking.
- Improving our website and products: Understanding website usage, testing changes and analysing which products and content are useful. Basis: our legitimate interest in improving our service.
- Fraud prevention and security: Detecting fraudulent transactions, protecting the website and preventing misuse. Basis: our legitimate interest and compliance with law.
- Legal and regulatory compliance: Maintaining tax records, invoicing, FSSAI traceability, product recall records and responding to lawful requests. Basis: compliance with legal obligations.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to make the site work, remember your preferences, and understand and improve performance.

You can control non-essential cookies through the consent banner shown on your first visit. You can change your choice at any time through the link in the website footer.

- Strictly necessary cookies: Keep you signed in, remember your cart, process payments and protect against fraud. These cannot be turned off because the site cannot function without them.
- Preference cookies: Remember settings such as your language or region. These can be turned off.
- Analytics cookies: Help us understand how visitors use the site so we can improve it. We use Google Analytics 4. These can be turned off.
- Advertising and measurement cookies: Help us show advertisements elsewhere and measure whether they lead to purchases. We use the Meta Pixel, Meta Conversions API and Google Ads conversion tracking. These can be turned off.

Server-Side Measurement

We use the Meta Conversions API, which sends certain purchase information from our server directly to Meta rather than from your browser.

Where we do this, identifying fields such as your email address or phone number are converted into an irreversible cryptographic hash before being sent, so Meta receives a matching code rather than the underlying detail. We only send this information where you have consented to advertising cookies.

7. Who We Share Your Data With

We do not sell your personal data. We share it only with the following categories of recipients, to the extent they need it:

- Courier and logistics partners — Delhivery and Shiprocket: Your name, delivery address, mobile number and order contents, to deliver orders and handle returns and failed deliveries.
- Payment gateway: Payment and transaction data, processed directly by the gateway, to take payments securely and process refunds.
- Communication providers: Your email address or mobile number and message content, to send order updates and, with your consent, marketing messages.
- Analytics and advertising platforms: Usage data and hashed identifiers where you have consented, to measure website performance and advertising effectiveness.
- Cloud hosting and IT providers: Data stored on their infrastructure on our behalf, to operate our website and systems.
- Professional advisers: Data necessary for specific engagements involving accounting, audit, legal and tax advice.
- Regulators and authorities: Data we are legally required to disclose, to comply with law, court orders or lawful requests.

These parties are bound by contracts requiring them to use your data only for specified purposes, protect it, and not use it for their own purposes, except where they act as independent controllers under their own policies, as may be the case with payment gateways and advertising platforms.

8. The Doctors Committee Panel

Separately from customer data, we collect and hold personal and professional information about medical practitioners who join, or are approached to join, our Doctors Committee panel.

We may collect:

- Name, qualifications, registration details, specialty, years of experience, hospital or clinic affiliation, and contact details.
- Signed letters of intent and engagement documentation.
- Photographs, video recordings and written biographies, only where the practitioner has given separate, specific and recorded written consent.

We use this information to assess suitability for the panel, communicate about the engagement, maintain records of participation and document the terms of participation.

A practitioner's name, qualifications, photograph or likeness is used in our materials only where we hold specific written consent for that use. Consent may be withdrawn at any time by writing to our Grievance Officer. We will remove the material from channels we control within a reasonable period, subject to any print run already produced.

9. How Long We Keep Your Data

- Order, invoice and tax records: As long as required under Indian tax and company law, currently eight financial years from the end of the relevant year.
- Account information: For as long as your account is active and for [RETENTION PERIOD] after you close it or after a period of inactivity.
- Marketing contact details: Until you withdraw consent or unsubscribe. After that, we retain a minimal suppression record so that we do not contact you again.
- Customer support correspondence: [RETENTION PERIOD] from resolution, unless it relates to a dispute or legal claim.
- Website analytics and advertising data: As configured in the relevant platform, typically [RETENTION PERIOD].
- Batch and traceability records: As required under FSSAI rules and for product safety purposes.
- Doctors Committee panel records: For the duration of the engagement and [RETENTION PERIOD] afterwards, or until consent is withdrawn.

When a retention period ends, we delete the data or anonymise it so it can no longer be linked to you.

10. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the following rights in respect of your personal data:

1. Right to access: Request a summary of the personal data we hold about you, what we are doing with it and who we have shared it with.
2. Right to correction and erasure: Request correction or completion of inaccurate or incomplete data and erasure of data where it is no longer needed for the purpose for which it was collected.
3. Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect anything we lawfully did before you withdrew consent and may mean we can no longer provide part of the service.
4. Right to grievance redressal: Raise a complaint with our Grievance Officer and escalate it to the Data Protection Board of India if you are not satisfied with our response.
5. Right to nominate: Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise these rights, write to our Grievance Officer using the details in Section 14. We may ask you to verify your identity before acting, so that we do not disclose your data to someone else. We will respond within the period required by law and as quickly as reasonably possible.

11. Security

We maintain reasonable security practices and procedures appropriate to the nature of the data we hold. These include encryption of data in transit, access controls limiting who within our team can see personal data, contractual security obligations on our service providers, and periodic review of our systems.

No system is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as required by law.

12. Children

Our products and this website are intended for adults. We do not knowingly collect personal data from anyone under the age of 18. We do not carry out behavioural monitoring or targeted advertising directed at children.

If you believe a child has provided us with personal data, please contact our Grievance Officer and we will delete it.

13. Transfers Outside India

Some of our service providers, particularly cloud hosting, analytics and advertising platforms, process data on servers located outside India.

Where that happens, we transfer data only to jurisdictions permitted under Indian law and only under contractual arrangements requiring an appropriate standard of protection.

14. How to Contact Us

For privacy questions, personal data requests or complaints, contact us:

- Email: care@doctorsfoodstore.com
- Telephone: [CUSTOMER CARE NUMBER]
- Registered Office: 359, Near Laxmi Dharm Kata, Kusadi Post Office Pawan, Aliganj Road, Etah, Uttar Pradesh 207001, India
- Manufacturing Facility: Gat No. 493, Ranjangaon, Pune–Nagar Road, Opposite Sangram Hotel, Tal. Shirur, Dist. Pune, Maharashtra
- Grievance Officer: [NAME AND DESIGNATION]

We acknowledge every complaint within 48 hours of receipt and aim to resolve it within one month, in line with the Consumer Protection (E-Commerce) Rules, 2020.

15. Changes to This Policy

We may update this policy from time to time. The date at the top shows when it was last changed. Where a change materially affects how we use your data, we will bring it to your attention by email or by a notice on the website before it takes effect.