Privacy Policy

1. Overview & Commitment

VEDHA Health & Essentials Private Limited (“VEDHA”, “we”, “us”) is committed to safeguarding the privacy and confidential personal data of our users. In compliance with the Digital Personal Data Protection Act (DPDP Act), 2023, the Information Technology Act, 2000, and related healthcare standards in India, this Privacy Policy outlines how we collect, store, process, and protect your information.

2. Categories of Information Collected

• Identity Data: Full name, mobile phone number, and optional email address.
• Delivery Information: Physical delivery addresses, landmarks, and postal pincodes.
• Health & Prescription Records: Uploaded medical prescription slips, clinical diagnostic test requests, and appointment history.
• Transaction Data: Payment transaction references (processed via PCI-DSS compliant third-party payment gateways; VEDHA never stores credit card CVVs or net banking passwords).

3. Use of Health & Prescription Data

Medical prescriptions uploaded to VEDHA are accessed exclusively by licensed clinical pharmacists and authorized healthcare coordinators for the strict purpose of validating drug authenticity, confirming dosages, and dispensing orders under the Drugs and Cosmetics Act, 1940. Health data is never sold, leased, or monetized for commercial advertising.

4. Security & Data Storage

All patient records and personal data are encrypted in transit using Transport Layer Security (TLS 1.3) and encrypted at rest utilizing AES-256 standard encryption on secure servers situated within the territory of India. Access controls are strictly role-delimited based on organizational RBAC.

5. User Rights & Grievance Redressal

In accordance with the DPDP Act, users retain the right to review, update, or request deletion of their personal profiles. For inquiries or data grievances, contact our Grievance Officer at privacy@vedha.org.in.