Privacy policy
This policy explains what personal and health information MedsNepal collects, why, how it is protected, and the choices you have. It is written to align with Nepal's privacy law and good data-protection practice.
Last updated: 9 July 2026
Who we are
MedsNepal (“we”, “us”) operates the MedsNepal medicine catalog and pharmacy services. We are the data controller for the information described in this policy. To reach us, see contact us.
Information we collect
- Account details — name, email, phone and password (stored only in hashed form).
- Order information — items, delivery address, and order history.
- Health information — prescriptions you upload and medicine reminder schedules you create.
- Technical data — device, browser and log data needed to run and secure the service.
How we use your information
- To provide the catalog, fulfil orders, and review prescriptions before supplying Rx medicines.
- To operate features you use, such as reminders and consultations.
- To secure the service, prevent misuse, and meet legal and pharmacy obligations.
- To respond to your enquiries and support requests.
We do not sell your personal or health information, and we do not use it for third-party advertising.
Health data and prescriptions
Prescriptions and reminder schedules are treated as sensitive health information. Access is restricted to the practitioners and staff who need it to provide care, every access to another person's medical document is logged, and files are retained only as long as required by law or to provide the service.
Legal basis and consent
We process your information to deliver the service you request, to meet legal obligations, and — for sensitive health data — on the basis of your consent, which you may withdraw at any time by contacting us.
Sharing
We share information only with: reviewing practitioners and fulfilment partners strictly as needed to complete your order or care; service providers who process data on our behalf under contract; and authorities where required by law. We do not share health data for marketing.
Security
We use access controls, encryption in transit, row-level data isolation, and audit logging to protect your information. No system is perfectly secure, but we work to limit risk and respond promptly to incidents.
Retention
We keep information only as long as needed for the purpose it was collected, or as required by applicable pharmacy and record-keeping law, after which it is deleted or anonymised.
Your rights
- Access a copy of the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Request deletion, subject to legal retention requirements.
- Withdraw consent for optional processing.
To exercise any right, contact us and we will respond within a reasonable period.
Cookies
We use only the cookies needed to sign you in and keep the service working securely. We do not use advertising or cross-site tracking cookies.
Children
MedsNepal is intended for adults. Accounts and orders on behalf of a minor must be managed by a parent or legal guardian.
Changes to this policy
We may update this policy as the service evolves. Material changes will be reflected here with a new “last updated” date.
Contact
Questions or requests about your privacy? Please contact us.