Privacy Policy

We collect only the information needed to fulfil your order and stay in touch:

• Account details — name, email, mobile number, password (stored hashed), and the address you save during signup or checkout.
• Order details — the items you ordered, delivery address, payment method, order notes, and any prescription you upload.
• Contact messages — anything you send through our contact form (name, email, phone, subject, message body).
• Technical data — IP address, browser type, and pages viewed for security and basic site analytics. No advertising trackers.

We do not store full credit-card numbers, debit-card numbers, or mobile-wallet credentials. Online payments are processed entirely by JazzCash and Easypaisa under their own privacy policies.

• To confirm, prepare, and deliver your order.
• To verify prescriptions through a licensed pharmacist before dispatching prescription medicines.
• To contact you about the order, a delivery update, or a safety recall.
• To answer messages you send through our contact form.
• To meet our legal obligations under Pakistani drug-control regulation (record keeping for prescription items).
• To prevent fraud, abuse, and unauthorised access to your account.

We do not sell, rent, or trade your personal data to anyone, ever.

Prescription images you upload are stored in a private, encrypted bucket. Only you and our licensed pharmacist can view them — they are not public, indexable, or visible to other staff. We retain prescription images only as long as required by Pakistani drug regulation, then permanently delete them.

We share the minimum necessary data with these third parties — strictly to deliver our service:

• Couriers (TCS, Leopards, local riders) — recipient name, address, and phone for delivery only.
• Payment gateways (JazzCash, Easypaisa) — order code and amount; no card or wallet credentials pass through us.
• Hosting and email infrastructure (Vercel, Supabase, Resend) — under their data-processing agreements; data is stored on secure servers with encryption in transit and at rest.

We may disclose information when required by law, court order, or a legitimate request from Pakistani drug-regulatory authorities.

We use a minimal set of cookies for cart persistence, login sessions, and security. We do not run third-party advertising trackers, social-media pixels, or cross-site profiling on this website.

You can, at any time:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate or out-of-date information.
• Request deletion of your account and associated personal data (we’ll keep order records to the extent legally required).
• Withdraw consent for any processing where consent is the basis.

Email hafizimranpharmacy@gmail.com with the subject “Privacy request” and we’ll respond within 30 days.

This site is not intended for users under 18. We do not knowingly collect personal information from minors. Prescription medicines are dispensed only against a prescription written by a registered medical practitioner.

All data is encrypted in transit (HTTPS/TLS) and at rest. Passwords are hashed and never stored in plain text. We follow industry-standard practices to protect your information, but no online service can guarantee absolute security; please use a strong, unique password.

We may update this policy as our service evolves. The “Last updated” date at the top will reflect the most recent revision. Material changes will be announced on the homepage for at least 14 days.

Questions about your privacy or this policy? Email hafizimranpharmacy@gmail.com or use the contact form.