Privacy policy

This policy explains what Davaa Pharma Private Limited (“Davaa.in”, “we”) collects when you use this site, why we collect it, and what control you have over it. Prescriptions and order history are health information, and we treat them accordingly.

1. What we collect

• Account details — name, email address, phone number and password (stored only as a bcrypt hash, never in readable form).
• Delivery details — the addresses and contact numbers you save for orders.
• Health information — prescriptions you upload and the medicines you order. This is the most sensitive data we hold.
• Transaction records — orders, invoices and payment status. We do not store card numbers, CVVs or UPI credentials; those go directly to the payment gateway.
• Technical data — IP address, browser type and session information, used to keep you signed in and to detect abuse.

2. Why we use it

We use your information only to:

• fulfil and deliver your orders, and let you track them;
• allow a licensed pharmacist to verify a prescription before dispensing;
• issue invoices and meet our tax and pharmacy record-keeping obligations;
• provide customer support when you contact us;
• detect fraud, prevent abuse and secure your account.

We do not sell your data, and we do not use your prescriptions or order history to target advertising.

3. Who we share it with

• The fulfilling pharmacy — receives your name, delivery address, phone number, order contents and prescription, because it cannot dispense without them.
• Delivery partners — receive only the name, address and phone number needed to deliver the package.
• Payment gateways — receive the order amount and reference. They handle card and UPI details directly; those never reach our servers.
• Authorities — where we are legally required to disclose, such as a valid order from a court or a drug-control authority.

4. How long we keep it

Prescription and dispensing records are retained for the period Indian pharmacy regulations require. Invoices are retained for the statutory tax period. Everything else is deleted or anonymised when you close your account.

5. How we protect it

Data is transmitted over HTTPS, passwords are hashed with bcrypt, sessions are stored in httpOnly cookies that JavaScript cannot read, and access to prescription images is restricted to the customer, the fulfilling pharmacy and authorised staff. No system is perfectly secure; if a breach affects you, we will tell you.

6. Your rights

You can ask us to:

• show you a copy of the data we hold about you;
• correct anything inaccurate;
• delete your account and associated data, subject to the retention rules above;
• stop sending you marketing messages, at any time.

Write to support@davaa.in and we will respond within 30 days.

7. Cookies

We use a single essential cookie to keep you signed in. Without it you cannot maintain a session. We also use privacy-preserving analytics to count page views; this does not track you across other websites.

8. Children

This service is not intended for anyone under 18. We do not knowingly create accounts for minors. A parent or guardian must place any order on a child's behalf.

9. Changes

If we change this policy materially, we will update the date at the top and notify account holders by email before the change takes effect.

10. Contact

Davaa Pharma Private Limited, Silao, Nalanda, Bihar 803117, India.
Email: support@davaa.in · Phone: +91 9508178521