Privacy Policy

We may collect personal information including:

• Full name
• Date of birth
• Gender
• Mobile number
• Email address
• Residential and delivery address
• Emergency contact details (where applicable)
• Profile photograph (optional)

For healthcare services, we may collect:

• Medical history
• Current medications
• Allergies and health conditions
• Doctor prescriptions
• Diagnostic test requests
• Laboratory reports and test results
• Consultation records
• Other health-related information voluntarily provided by the User

When purchasing prescription medicines, Users may upload or submit:

• Valid medical prescriptions issued by a Registered Medical Practitioner (RMP)
• Doctor's details
• Prescription date
• Supporting medical documents, where required

Prescription information is used solely to verify eligibility for medicine dispensing and to comply with applicable laws.

For processing payments, we may collect:

• Billing details
• Payment method
• Transaction reference number
• UPI, debit card, credit card, net banking, or wallet payment details processed through secure third-party payment gateways.

MediHub does not store complete card numbers, CVV, or banking passwords.

When you use our website or mobile application, we may automatically collect:

• IP address
• Device type and model
• Operating system
• Browser type and version
• App version
• Device identifiers
• Network information
• Crash reports and diagnostic logs

With your permission, we may collect:

• GPS location
• Delivery location
• Approximate location based on IP address

Location data is used to provide medicine delivery, doctor services, diagnostic sample collection, and other location-based healthcare services.

We may collect information regarding:

• Pages visited
• Search history
• Medicines viewed
• Orders placed
• Diagnostic bookings
• Doctor appointments
• Customer support interactions
• Time spent on the Platform

We use cookies and similar technologies to:

• Remember login sessions
• Store user preferences
• Improve website performance
• Measure traffic and analytics
• Enhance security
• Personalize the user experience

Users may manage cookie preferences through their browser settings; however, disabling certain cookies may affect the functionality of the Platform.

We may receive information from:

• Licensed pharmacy partners
• Diagnostic laboratories
• Registered medical practitioners
• Payment gateway providers
• Delivery partners
• Government-authorized verification services
• Other healthcare partners, where permitted by law

Such information is used only for providing, improving, and securing our Services and for complying with applicable legal and regulatory requirements.

We use your information to:

• Process medicine orders and home deliveries.
• Verify prescriptions for regulated medicines.
• Book diagnostic tests and schedule sample collection.
• Arrange doctor consultations, including teleconsultations.
• Maintain your healthcare records for service continuity.

Your information is used to:

• Register and authenticate your account.
• Verify your identity where required.
• Maintain your user profile and preferences.
• Enable secure login and account recovery.

We use payment-related information to:

• Process online payments securely.
• Generate invoices and payment confirmations.
• Detect fraudulent or unauthorized transactions.
• Maintain financial and tax records as required by law.

Your information helps us:

• Improve website and mobile application performance.
• Enhance user experience and platform functionality.
• Develop new healthcare services and features.
• Analyze user behavior to improve service quality.

We may use your information to:

• Respond to inquiries and complaints.
• Resolve technical or service-related issues.
• Provide order updates and healthcare assistance.
• Verify previous interactions with our support team.

We may contact you through SMS, email, phone calls, WhatsApp, push notifications, or other electronic means regarding:

• Order confirmations.
• Delivery updates.
• Appointment reminders.
• Diagnostic test notifications.
• Prescription-related communications.
• Customer support responses.
• Service announcements and security alerts.

Marketing communications will be sent only where permitted by applicable law or with your consent, and you may opt out at any time.

Your information may be processed to:

• Comply with applicable laws, regulations, and government directives.
• Meet obligations under healthcare and pharmaceutical regulations.
• Prevent fraud, misuse, or illegal activities.
• Respond to lawful requests from courts or government authorities.

We use personal information to:

• Detect suspicious or fraudulent activities.
• Protect user accounts from unauthorized access.
• Monitor platform security.
• Prevent misuse of our Services.

We may use aggregated or anonymized information to:

• Analyze trends and platform usage.
• Measure service performance.
• Improve operational efficiency.
• Conduct internal research and business planning.

Navharsh Private Limited does not sell, rent, or trade your personal or health-related information to third parties for their independent marketing purposes. Any sharing of information is carried out only as described in this Privacy Policy, with your consent where required, or as mandated by applicable law.

We may share relevant information with authorized healthcare partners, including:

• Licensed pharmacies for processing medicine orders.
• Diagnostic laboratories for booking and conducting medical tests.
• Registered Medical Practitioners (RMPs) for consultations and prescription-related services.
• Hospitals and healthcare providers where necessary to deliver requested services.

Only the minimum information required to provide the requested healthcare service will be shared.

To facilitate medicine delivery and sample collection, we may share:

• Customer name.
• Delivery address.
• Contact number.
• Order reference details.

Delivery partners are not provided access to confidential medical information unless required for completing the service.

Online payments are processed through secure third-party payment gateways. We may share limited transaction-related information with these providers solely for payment processing, fraud prevention, refunds, reconciliation, and compliance with applicable financial regulations.

We may engage trusted third-party vendors for services such as:

• Cloud hosting and data storage.
• Website and mobile application maintenance.
• Customer support systems.
• SMS, email, and notification services.
• Analytics and cybersecurity.

These service providers are contractually obligated to maintain confidentiality, implement appropriate security measures, and process data only for authorized purposes.

We may disclose information when required to:

• Comply with applicable laws, regulations, court orders, or lawful requests from government authorities.
• Respond to investigations involving fraud, criminal activity, or public safety.
• Protect the rights, property, or safety of the Company, its users, employees, or the public.

If Navharsh Private Limited undergoes a merger, acquisition, restructuring, investment, or sale of assets, user information may be transferred to the successor entity, subject to the same or equivalent privacy protections.

We may share your information with third parties when you have provided explicit consent for a specific purpose. You may withdraw such consent at any time, subject to legal or contractual obligations.

We may use or disclose aggregated or anonymized information that does not identify any individual for research, statistical analysis, business intelligence, service improvement, or reporting purposes.

Whenever personal information is shared, Navharsh Private Limited implements reasonable contractual, technical, and organizational safeguards to ensure that recipients protect the information in accordance with applicable laws and this Privacy Policy.

We employ industry-standard security practices, including:

• Secure Socket Layer (SSL/TLS) encryption for data transmission.
• Encryption of sensitive information where appropriate.
• Secure servers and cloud infrastructure.
• Firewalls, antivirus, and intrusion detection systems.
• Regular software updates and security patches.
• Role-based access controls to limit access to authorized personnel only.

Access to personal and health-related information is restricted to employees, healthcare partners, and authorized service providers who require such access solely for the purpose of delivering Services. All such individuals are required to maintain the confidentiality of user information.

Users are responsible for maintaining the confidentiality of their account credentials, including passwords and one-time passwords (OTPs). You should not share your login credentials with any other person. Any activity carried out through your account may be treated as authorized by you unless reported otherwise.

We retain personal and health-related information only for as long as necessary to:

• Provide our Services.
• Fulfill contractual obligations.
• Comply with applicable legal, regulatory, tax, and healthcare record-keeping requirements.
• Resolve disputes and enforce our legal rights.

Upon expiry of the applicable retention period, data will be securely deleted, anonymized, or archived as required by law.

In the event of a suspected or confirmed data security incident, Navharsh Private Limited will take reasonable steps to investigate, contain, and mitigate the impact. Where required by applicable law, affected users and competent regulatory authorities will be notified within the prescribed timelines.

While we strive to use commercially reasonable security measures to protect your information, no method of electronic transmission or data storage is completely secure. Accordingly, Navharsh Private Limited cannot guarantee absolute security and shall not be liable for unauthorized access resulting from circumstances beyond its reasonable control, including cyberattacks, internet failures, or force majeure events.

We regularly review and update our security practices, conduct internal audits, monitor system vulnerabilities, and implement appropriate improvements to enhance the protection of user information and maintain compliance with applicable laws and industry standards.

We retain your personal, transactional, and health-related information only for the period necessary to:

• Provide healthcare services and customer support.
• Process medicine orders, diagnostic bookings, and doctor consultations.
• Maintain healthcare and transaction records.
• Comply with legal, regulatory, tax, accounting, and healthcare obligations.
• Resolve disputes and enforce our legal rights.

When your information is no longer required, it will be securely deleted, anonymized, or archived in accordance with applicable laws and our internal data retention policies.

Subject to applicable law, you may have the following rights regarding your personal information:

• (a) Right to Access — You may request access to the personal information that Navharsh Private Limited maintains about you.
• (b) Right to Correction — You may request correction or updating of inaccurate, incomplete, or outdated personal information maintained on the MediHub platform.
• (c) Right to Withdraw Consent — Where processing is based on your consent, you may withdraw such consent at any time. Withdrawal of consent will not affect processing carried out before such withdrawal and may limit our ability to provide certain Services.
• (d) Right to Delete Information — You may request deletion of your personal information, subject to legal, regulatory, healthcare record retention, contractual, or fraud prevention requirements that require us to retain certain information.
• (e) Right to Restrict Processing — You may request restriction of the processing of your personal information where permitted by applicable law.
• (f) Right to Grievance Redressal — If you believe your privacy rights have been violated or your personal information has been misused, you may submit a complaint to our designated Grievance Officer. We will make reasonable efforts to acknowledge and resolve complaints within the timelines prescribed under applicable law.

Users may exercise the above rights by contacting Navharsh Private Limited through the contact details provided in this Privacy Policy. Before processing any request, we may verify your identity to protect your information from unauthorized access or disclosure.

Certain rights may be limited where Navharsh Private Limited is legally required to retain or process information, including obligations under healthcare, pharmaceutical, taxation, consumer protection, law enforcement, or other applicable laws. In such cases, we will inform you of the applicable legal basis where permitted.

MediHub uses cookies, web beacons, and similar technologies to enhance user experience, improve website functionality, remember user preferences, analyze website traffic, maintain security, and personalize services. Cookies do not generally collect personally identifiable information unless voluntarily provided by the User.

Users may disable or manage cookies through their browser settings; however, doing so may affect certain features and functionality of the Platform.

The Platform may integrate with trusted third-party service providers, including:

• Payment Gateway Providers
• SMS and Email Service Providers
• Cloud Hosting Providers
• Analytics Platforms
• Mapping and Location Services
• Video Consultation Providers
• Customer Support Platforms
• Diagnostic Laboratory Partners
• Licensed Pharmacy Partners

These third parties may process personal information only for the specific purpose of providing services on behalf of Navharsh Private Limited and are contractually required to maintain appropriate confidentiality and security standards.

Navharsh Private Limited is not responsible for the privacy practices of third-party websites or applications that are not owned or controlled by the Company. Users are encouraged to review the privacy policies of such third-party platforms before sharing any information.

The Services offered through MediHub are intended for individuals who are legally competent to enter into a binding agreement under applicable law.

We do not knowingly collect personal information directly from children below the age prescribed by applicable law without the consent of a parent or legal guardian. If we become aware that personal information of a child has been collected without appropriate authorization, we will take reasonable steps to delete such information in accordance with applicable legal requirements.

Where necessary for business continuity, cloud hosting, disaster recovery, cybersecurity, or technical support, personal information may be processed using secure infrastructure located outside the User's state or country, subject to applicable legal requirements and appropriate safeguards.

Navharsh Private Limited reserves the right to amend, modify, or update this Privacy Policy at any time to reflect changes in business operations, legal obligations, technological developments, or regulatory requirements.

The revised Privacy Policy will be published on the official MediHub website with an updated Effective Date. Continued use of the Platform after such publication shall constitute acceptance of the revised Privacy Policy.

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal information, you may contact:

In accordance with applicable Indian laws, users may contact the designated Grievance Officer regarding complaints relating to privacy, personal information, or data protection.

The Company will acknowledge and make reasonable efforts to resolve grievances within the timelines prescribed under applicable law.

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising from or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts located in Lucknow, Uttar Pradesh, unless otherwise required by applicable law.

By accessing, registering, or using the MediHub website, mobile application, or any services provided by Navharsh Private Limited, you acknowledge that you have read, understood, and agreed to this Privacy Policy and consent to the collection, use, storage, processing, and disclosure of your personal information as described herein.

You expressly consent to Navharsh Private Limited collecting and processing your personal information, health information, prescriptions, diagnostic records, payment-related information, and other data necessary to provide healthcare services, comply with legal obligations, improve our platform, and ensure the safe and efficient operation of our Services.

By using the Platform, you agree to receive communications from Navharsh Private Limited through email, SMS, WhatsApp, telephone calls, in-app notifications, and other electronic means regarding account verification, medicine orders, deliveries, diagnostic bookings, doctor consultations, payment confirmations, service updates, security alerts, and customer support. Promotional communications may be sent only where permitted by law, and you may opt out at any time.

You represent and warrant that all information provided by you is true, accurate, complete, and up to date. You agree to promptly update your information if any changes occur. Navharsh Private Limited shall not be responsible for any loss, delay, or incorrect service resulting from inaccurate or incomplete information provided by the User.

Where permitted by applicable law, you may withdraw your consent by contacting the Company through the details provided in this Privacy Policy. Withdrawal of consent shall not affect the legality of processing carried out prior to such withdrawal and may limit or prevent your ability to access certain Services that require the processing of personal or health-related information.

This Privacy Policy constitutes the complete understanding between the User and Navharsh Private Limited regarding the collection and processing of personal information and shall remain effective until replaced by an updated version published by the Company.

If you have any questions regarding this Privacy Policy, your personal information, or the Services offered through MediHub, you may contact us using the details below:

Navharsh Private Limited has established a grievance redressal mechanism to address complaints relating to privacy, personal data, healthcare information, and the use of the Platform.

Users may submit complaints regarding:

• Unauthorized use or disclosure of personal information.
• Inaccurate or outdated personal data.
• Account-related privacy concerns.
• Data deletion or correction requests.
• Any violation of this Privacy Policy.

The Company will acknowledge and investigate complaints promptly and make reasonable efforts to resolve them within the timelines prescribed under applicable Indian law.

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Republic of India, including but not limited to the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, the Consumer Protection Act, 2019, and other applicable laws and regulations.

Any dispute arising out of or relating to this Privacy Policy or the use of the MediHub Platform shall be subject to the exclusive jurisdiction of the competent courts located in Lucknow, Uttar Pradesh, India, unless otherwise required by applicable law.

If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue to remain valid and enforceable to the fullest extent permitted by law.

Failure or delay by Navharsh Private Limited in exercising any right or remedy under this Privacy Policy shall not constitute a waiver of such right or remedy.

This Privacy Policy, together with the Terms & Conditions, Refund & Cancellation Policy, Prescription Policy, and any other policies published by Navharsh Private Limited, constitutes the complete agreement between the User and the Company regarding the collection, processing, storage, and protection of personal information.

Navharsh Private Limited reserves the right to revise, modify, or update this Privacy Policy at any time. Updated versions will be published on the official website and mobile application with the revised "Effective Date." Continued use of the Platform after such updates constitutes acceptance of the revised Privacy Policy.

By registering an account, accessing the Platform, placing an order, uploading a prescription, booking a diagnostic test, consulting a healthcare professional, or otherwise using the Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy and consent to the collection, processing, storage, and disclosure of your information in accordance with its terms.

Navharsh Private Limited operates the MediHub platform in accordance with applicable laws of India, including but not limited to the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, the Drugs and Cosmetics Act, 1940, the Pharmacy Act, 1948, the Consumer Protection Act, 2019, and other applicable healthcare, pharmaceutical, and e-commerce regulations.

The Company works only with licensed pharmacies, registered medical practitioners, diagnostic laboratories, and other authorized healthcare partners, wherever required by law.

MediHub is a technology platform that facilitates access to healthcare services. The Company does not practice medicine, diagnose medical conditions, prescribe treatment, or provide emergency medical care.

Any medical advice, diagnosis, prescription, laboratory report, or treatment recommendation available through the Platform is solely the responsibility of the concerned licensed healthcare professional or healthcare institution.

The Platform is not intended for medical emergencies. If you are experiencing a medical emergency, you should immediately contact your nearest hospital, emergency medical service, or the applicable emergency helpline.

Prescription medicines will only be processed upon receipt and verification of a valid prescription issued by a Registered Medical Practitioner (RMP), in accordance with applicable Indian laws. Navharsh Private Limited reserves the right to reject, delay, or cancel any order that does not comply with legal or regulatory requirements.

Navharsh Private Limited shall not be responsible for:

• Medical decisions made by doctors or healthcare professionals.
• Accuracy of prescriptions issued by medical practitioners.
• Laboratory findings or diagnostic reports issued by partner laboratories.
• Adverse reactions arising from the misuse of medicines or failure to follow medical advice.

Users are advised to consult qualified healthcare professionals before starting, stopping, or changing any medication or treatment.

By using the MediHub Platform, you acknowledge that healthcare outcomes may vary based on individual medical conditions and that Navharsh Private Limited acts solely as a facilitator connecting users with licensed healthcare providers and related services.

Navharsh Private Limited maintains procedures for identifying, investigating, and responding to actual or suspected data security incidents. In the event of a personal data breach that is likely to affect the rights or interests of Users, the Company will take appropriate remedial measures and, where required under applicable law, notify the affected Users and the competent regulatory authorities within the prescribed time.

The Company maintains reasonable business continuity and disaster recovery measures to help ensure the availability and integrity of the MediHub Platform. However, uninterrupted access to the Services cannot be guaranteed due to maintenance, technical failures, internet disruptions, or events beyond the Company's reasonable control.

Navharsh Private Limited shall not be liable for any delay, interruption, or failure to perform its obligations under this Privacy Policy where such delay or failure results from events beyond its reasonable control, including but not limited to natural disasters, floods, fires, earthquakes, epidemics, pandemics, government actions, war, terrorism, civil unrest, cyberattacks, power failures, internet outages, labor disputes, or failures of third-party service providers.

Any provisions of this Privacy Policy which by their nature are intended to survive the termination of a User's account or the cessation of Services—including provisions relating to confidentiality, data retention, legal compliance, limitation of liability, dispute resolution, governing law, and intellectual property—shall remain in full force and effect after such termination.

Navharsh Private Limited reserves all rights not expressly granted under this Privacy Policy. Nothing contained in this Policy shall be construed as limiting any legal rights or remedies available to the Company under applicable law.

By continuing to access or use the MediHub Platform, you confirm that you have carefully read this Privacy Policy, understand its contents, and agree to be bound by its terms. If you do not agree with any provision of this Privacy Policy, you should discontinue use of the Platform and its Services immediately.

By accessing or using the MediHub Platform, you voluntarily request and authorize Navharsh Private Limited to facilitate healthcare-related services, including but not limited to medicine ordering and delivery, diagnostic test booking, doctor consultations, telemedicine, prescription management, healthcare memberships, and other healthcare services made available through the Platform.

You acknowledge and agree that your prescriptions, laboratory reports, consultation records, invoices, order history, and other healthcare-related information may be created, stored, maintained, and processed in electronic form for the purpose of providing healthcare services, maintaining service history, improving continuity of care, and complying with applicable legal and regulatory requirements.

You consent to receive electronic communications from Navharsh Private Limited, including emails, SMS messages, WhatsApp messages, push notifications, OTPs, invoices, prescriptions, laboratory reports, appointment reminders, payment confirmations, security alerts, and other service-related communications. Such electronic communications shall be deemed valid and legally equivalent to written communications.

Users are solely responsible for ensuring that the personal, medical, and prescription information submitted through the Platform is accurate, complete, and up to date. The Company shall not be responsible for any loss, delay, incorrect treatment, or service disruption resulting from inaccurate, incomplete, or misleading information provided by the User.

Users confirm that all prescriptions, laboratory reports, identity documents, and medical information uploaded to the Platform are genuine, valid, and lawfully obtained. Submission of forged, altered, expired, or misleading medical documents may result in rejection of services, suspension of the User account, reporting to the appropriate authorities, and any other action permitted under applicable law.

By clicking "I Agree," "Accept," "Continue," "Place Order," "Book Test," "Consult Doctor," or any similar button on the Platform, you expressly provide your electronic consent to this Privacy Policy and authorize Navharsh Private Limited to process your personal and healthcare information in accordance with the terms set forth herein. Such electronic consent shall have the same legal validity and enforceability as a handwritten signature, to the extent permitted under applicable law.

Navharsh Private Limited may use Artificial Intelligence (AI), machine learning, automation tools, and analytical technologies to improve the quality, efficiency, security, and user experience of the MediHub Platform. Such technologies are intended to support operational processes and do not replace the professional judgment of licensed healthcare practitioners.

The Platform may use automated systems to:

• Recommend medicines based on user searches (where legally permitted).
• Suggest diagnostic tests or healthcare services.
• Detect duplicate or suspicious orders.
• Prevent fraud and unauthorized transactions.
• Optimize delivery routes and order allocation.
• Personalize user experience and healthcare recommendations.

Automated decisions are subject to applicable legal requirements and may be reviewed manually where appropriate.

To maintain security, reliability, and service quality, Navharsh Private Limited may monitor:

• Login activities and account access.
• Order and transaction history.
• Platform usage patterns.
• Device and browser information.
• System performance and security events.
• Suspected fraudulent or abusive activities.

Such monitoring is carried out only for legitimate business, operational, legal, and security purposes.

Any recommendations, reminders, health insights, or notifications generated by the Platform are provided for informational purposes only and do not constitute medical advice, diagnosis, or treatment. Users should always consult a qualified Registered Medical Practitioner (RMP) before making any healthcare decisions.

Information collected through analytics and automated systems may be used in aggregated or anonymized form to improve platform performance, enhance healthcare services, develop new features, strengthen cybersecurity, and improve customer experience. Where personal information is processed, it will be handled in accordance with this Privacy Policy and applicable laws.

All AI-based features, automated processing activities, and monitoring practices implemented by Navharsh Private Limited shall be carried out in accordance with applicable Indian laws relating to data protection, consumer protection, healthcare, information technology, and other relevant regulations.