Scope and who we are

This Privacy Policy explains how DoctorCureCraft ("DoctorCureCraft", "we", "us" or "our") collects, uses, shares, stores and protects personal data when you visit our website, create an account, buy products, contact us, participate in a promotion or otherwise interact with us. It applies to our customers and website visitors in India.

DoctorCureCraft acts as the data fiduciary for personal data processed for its own purposes. Payment gateways, logistics providers and other partners may separately act under their own privacy terms.

Personal data we may collect

• Identity and contact information: name, phone number, email address, billing and delivery address.
• Order and transaction information: products ordered, order history, invoice details, payment status, discounts, replacements and customer-service records. We generally do not directly store complete card, UPI or banking credentials handled by an authorised payment provider.
• Account information: login details, preferences and communication choices.
• Device and usage information: IP address, browser/device type, approximate location, pages viewed, referral source, cookie identifiers and website interaction data.
• Information you choose to provide: product queries, feedback, photographs or videos submitted for a replacement claim, and health-related information you voluntarily share with customer support.

How we collect information

We collect information directly from you, automatically through cookies and similar technologies, and from service providers such as payment processors, marketplaces, logistics partners, analytics providers and advertising platforms where permitted.

Why we use personal data

• To create and manage accounts, confirm orders, process payments, issue invoices, ship products and communicate delivery updates.
• To verify and resolve damaged-product, wrong-item or missing-item replacement claims.
• To provide customer support, answer enquiries, improve products and services, maintain quality and safety records, and prevent fraud or misuse.
• To comply with tax, accounting, food-safety, consumer-protection and other legal obligations, and to establish or defend legal claims.
• To send marketing messages where you have consented or where otherwise permitted. You may opt out using the unsubscribe option or by contacting us.

Consent and lawful processing

We process personal data for lawful purposes connected with providing requested products and services, complying with law, protecting legitimate business and security interests, and based on consent where consent is required.

Where processing is based on consent, you may withdraw it by contacting us. Withdrawal does not affect processing already lawfully completed and may prevent us from providing a service that requires the data.

Cookies and similar technologies

We may use essential cookies for website operation, cart and checkout functions; analytics cookies to understand performance; and advertising or preference cookies where enabled.

You can control cookies through your browser and any consent tool displayed on the website. Blocking essential cookies may affect checkout or account functions.

When we share personal data

We may share only the information reasonably necessary with website and hosting providers, payment gateways, banks, logistics and fulfilment partners, customer-support tools, analytics/marketing providers, professional advisers, insurers, regulators, law-enforcement bodies, and a buyer or successor in a genuine business restructuring.

We do not sell personal data for money.

Service providers are expected to process information for authorised purposes and apply appropriate safeguards. If data is processed outside India, we will take measures required by applicable law.

Retention and security

We retain personal data only as long as reasonably necessary for the purposes described above, including order fulfilment, customer support, tax/accounting, food-safety traceability, dispute resolution and legal compliance.

Retention periods may differ by record type.

We use reasonable technical and organisational safeguards, including access controls and secure service providers. No internet or storage system is completely secure; please keep account credentials confidential and notify us of suspected unauthorised use.

Your rights and choices

Subject to applicable law, you may request access to information about your personal data, correction or completion of inaccurate data, erasure where permitted, withdrawal of consent, and grievance redressal.

You may also nominate another individual to exercise rights as permitted by law. We may verify your identity before acting on a request and may retain information where law requires it.

Children

Our products and website are intended for adults. We do not knowingly process a child's personal data without verifiable consent from a parent or lawful guardian where required.

If you believe a child has provided data improperly, please contact us.

Third-party links and marketplaces

Our website may link to third-party sites or marketplaces. Their privacy practices are governed by their own policies.

Orders placed on a marketplace may also be subject to that marketplace's privacy terms.

Changes to this policy

We may update this policy to reflect legal, operational or technology changes. The revised version will be posted with an updated date.

Material changes may be notified through the website, email or another appropriate channel.

Privacy questions and grievances

For privacy questions, requests or grievances, please use the contact details below.