DawaPata helps people find information about medicine availability and prices. We designed it to work without an account and to collect as little personal data as possible. This notice is drafted with India's Digital Personal Data Protection Act in mind and must be reviewed by counsel before launch.
What we do not collect
- No prescriptions, diagnoses, symptoms or health histories. Please never send them to us.
- No consumer accounts and no medicine search history linked to you.
- No third-party analytics or advertising trackers on our pages, so medicine searches never reach advertisers.
Location
You can always type a city or PIN code. If you choose “Use my current location”, your browser asks for permission; the position is rounded to about 100 metres, used only for that search, and not stored with your identity. The chosen location may be kept in your own browser tab (session storage) so you do not have to re-enter it.
Stock enquiries
When you send an enquiry you consent to us passing the medicine pack and, only if you provide them, your phone or email to the one pharmacy you selected. Contact details are encrypted at rest and deleted automatically after 30 days (configurable), or earlier if you delete the enquiry using your reference and access code on the enquiry status page.
Correction and privacy requests
Reports sent through Report incorrect information are reviewed by our team. Contact details you add are kept only until the report is closed.
Pharmacy partners
Partner accounts store name, email, a hashed password and pharmacy business details. Drug licence references are encrypted and visible only to DawaPata reviewers. Actions in the partner portal are recorded in an audit log for accountability; IP addresses in that log are stored as keyed hashes.
Security and retention
- Data is transmitted over HTTPS in production and sensitive fields are encrypted at rest.
- Uploaded price lists are never stored as files; parsed previews are deleted after 7 days.
- Server request logs are configured to exclude search query strings where possible.
Your rights
You may ask to access, correct or delete personal data we hold about you via the report form (choose “Privacy or data deletion request”). A grievance officer contact will be published before launch.