Privacy Policy

1. Commitment to Privacy

AYUCUREX HEALTHCARE PVT. LTD. (“Company”, “we”, “us”, or “our”) respects your privacy and is dedicated to protecting your personal, healthcare, and commercial data.

This Privacy Policy explains how we collect, process, store, and safeguard your information when you register an account, browse our catalogue, upload medical prescriptions, or procure medicines through our digital portal (www.ayucurex.com) and official WhatsApp coordination channels.

2. Data We Collect

We collect only the minimum personal data necessary to provide safe pharmaceutical dispensing and fulfillment:

• Account Credentials: Full name, firm/pharmacy name, email address, password hash (encrypted using industry-standard bcrypt), and contact phone number.
• Delivery & Logistics: Shipping street address, city, state, postal PIN code, and dispatch instructions.
• Medical Prescriptions (Schedule H/H1): Scanned images or PDF copies of doctor prescriptions uploaded exclusively for statutory pharmacist audit and drug dispensing verification.
• Commercial / B2B Information: Drug Licence numbers (Form 20/21) and GSTIN numbers for wholesale and institutional buyers.

3. Purpose and Legal Grounds for Processing

We process your data strictly under valid lawful grounds recognized by Indian law:

• Order Fulfillment: Processing medicine orders, printing tax-compliant invoices, and arranging courier or WhatsApp dispatch.
• Statutory Pharmaceutical Verification: Complying with regulatory obligations under the Drugs and Cosmetics Act, 1940 to maintain dispensing records for Schedule H/H1 drugs.
• Security & Account Recovery: Sending one-time password (OTP) verification codes, password reset links, and transactional email confirmations via secure Google SMTP transport.
• Audit & Quality Control: Tracking system actions in tamper-evident internal audit logs to prevent unauthorized access or drug diversion.

4. Strict Confidentiality of Medical Prescriptions

We treat patient medical records and prescriptions with the highest standard of healthcare confidentiality:

• Prescriptions are securely stored in private Cloudflare R2 cloud storage with encrypted access tokens.
• Only qualified registered pharmacists and authorized fulfillment personnel can view uploaded prescriptions for safety verification.
• We never sell, rent, monetize, or publicly share patient prescription documents with any third-party advertisers.

5. Data Security Measures

We deploy multi-layered technical and administrative safeguards:

• All web traffic is encrypted end-to-end using TLS 1.3 cryptographic protocols.
• User passwords are protected with salted bcrypt hashes; plaintext passwords are never stored or logged.
• Stateless cryptographic HMAC-SHA256 tokens and time-boxed 6-digit OTPs are used for all account recovery operations.
• Strict sliding-window rate limiters defend against brute-force, scraping, and enumeration attacks.

6. Your Rights Under DPDP Act 2023

As a Data Principal, you possess statutory rights regarding your personal information:

• Right to Access: View and download your complete order history, profile details, and invoices at any time from your account dashboard.
• Right to Correction: Update your contact number, name, and address details directly in your profile settings.
• Right to Erasure: Request deletion of your account and personal data, subject to mandatory statutory retention periods under Indian drug laws.
• Right to Grievance Redressal: Submit any inquiry or grievance regarding your personal data directly to our grievance desk.