Privacy policy

Who we are

The website is run by Latif Ur Rahman Alvi (“we”, “us”). We decide how your information is used on MedsPK. The pharmacy you order from also uses your information to fill your order. Our contact details are on the Contact and complaints page.

What we collect

• Your order: your name, phone number, delivery address and area, a note if you write one, the medicines you ordered and the amounts.
• A photo of your prescription, only when a medicine needs one.
• A screenshot of your payment, and the transaction number if you give it, when you send proof of payment.
• A location pin, only if you choose to share it: your phone’s position (when you press “Share my location” and allow it) or a Google Maps link that you paste. It is used only so the rider can find your address.
• A record of what happened to your order (for example “payment sent”, “confirmed”, “delivered”) with the time.
• Technical information: your IP address, which we use to stop abuse and fake orders, and the cookies described below.
• Messages you send us.

We do not ask for your national ID card number, your card number, or your wallet PIN or OTP. A payment screenshot can show your name, phone number and balance. Before you upload it you can crop or cover anything that is not needed (the amount, date, time, the pharmacy’s account and the transaction number must stay visible). Sharing your location is always your choice: if you leave it out or refuse, you can still place your order.

Why we use it

• To take your order and let the pharmacy check your payment and prescription, pack the order and deliver it.
• To contact you about your order.
• To help the pharmacy’s rider find your address, if you shared a location pin.
• To refund you and to handle returns and complaints.
• To stop fake orders, fraud and misuse of the website, and to keep it secure.
• To follow the law and answer lawful requests from the authorities.

We do not sell your information. We do not show advertisements. We do not send marketing messages.

Who can see your information

• The pharmacy you order from sees your order details, your prescription photo, your payment screenshot and, if you share it, your location pin. It needs them to fill your order. Each pharmacy agrees to use your information only for your order and to keep it private.
• MedsPK staff who handle orders and complaints.
• Our website hosting company, whose computers store the data for us.
• Public authorities, courts or the police, when the law requires it or when we need to report a crime such as a forged prescription.

Prescription photos and payment screenshots are kept in private storage, not on public web pages. They can be opened only by a person who is logged in as staff of the pharmacy concerned, or by MedsPK staff. If you also send a message or screenshot to a pharmacy on WhatsApp, that chat is outside our website and is under WhatsApp’s own terms.

Your location pin is shown only on your order page and to the pharmacy’s staff. We do not send it to Google or anyone else ourselves. When you or the pharmacy open it in Google Maps, Google’s own terms apply to that.

How long we keep it

• Prescription photos, payment screenshots and location pins are deleted 90 days after the order is finished (delivered or cancelled).
• Your name, phone number, address, note and IP address are removed from an order 2 years after it is finished. The amounts stay, because the pharmacy needs them for its accounts.
• An order that is still open, or whose refund has not been sent yet, is not touched until it is finished.
• We may keep something longer if the law requires it, or if it is needed for a complaint or a legal case.

Cookies

We use only the cookies the website needs: one that keeps your cart and your place on the site (it lasts up to 14 days), and one that remembers the language and area you picked. Staff use a login cookie. We do not use advertising or tracking cookies, and the website does not load trackers or fonts from other companies.

Keeping it safe

• Photos you upload are re-saved as a new clean image. This removes hidden information such as the place where a photo was taken.
• Prescription photos and payment screenshots are stored privately and are opened only through a protected page that checks who you are.
• Staff passwords are stored in a protected form, and staff are logged out when they stop using the system.
• We limit how many orders and login attempts one phone number or address can make, to stop abuse.

No system is perfectly safe. If something happens that puts your information at risk, we will tell the people affected as the law requires.

Your choices

You can ask us to show you the information we hold about you, to correct it, or to delete it. Write to us through Contact and complaints with your phone number and, if you have one, an order number. We may ask you to prove that the phone number is yours. We will delete the details of your finished orders. We cannot delete an order that is still open, or one whose refund has not been sent, until it is finished. We may have to keep something that the law says we must keep.

To have your information removed from a pharmacy’s own records or its WhatsApp chats, you also need to ask the pharmacy.

Children

MedsPK is for adults. We do not knowingly collect information from anyone under 18. If you think a child has sent us information, tell us and we will remove it.

Changes to this policy

If we change this policy, we will change the date at the top. If a change is important, we will say so on the website.

Questions or complaints

Write to us through Contact and complaints.