Privacy Policy

1. Who We Are

DrMeds ("we", "us", "our") is a global specialty pharmaceutical access platform operated by DrMeds.org Ltd, with its registered head office at Business Bay, Dubai, UAE. We are the data controller for personal data collected through drmeds.org and our services.

Contact for privacy matters: privacy@drmeds.org

2. Data We Collect

We collect the following categories of personal data:

• Identity data: Full name
• Contact data: Email address, phone/WhatsApp number, delivery address
• Medical data: Prescription documents and medicine information submitted through the dedicated prescription form
• Transaction data: Order details, enquiry history, payment reference (we do not store payment card data)
• Technical data: IP address, browser type, device, pages visited (via cookies)
• Communications data: Messages sent to us via email, WhatsApp, or contact forms

We collect information you provide when you submit a prescription, make an enquiry, create an account, place an order or contact us. Price Request and availability enquiries are emailed to info@drmeds.org without a saved website enquiry record. New Contact form enquiries are emailed to info@drmeds.org without a saved website message or address-book record. Older Contact messages may remain in the website archive. Prescription enquiries and attachments are emailed to info@drmeds.org, with a separate encrypted website copy subject to the expiry described below. Please use the dedicated prescription form for documents; do not include medical records, identification documents or payment details in other enquiry forms.

3. How We Use Your Data

We use your personal data for the following purposes:

• Processing your medicine requests and prescription orders
• Verifying prescriptions with our licensed pharmacists
• Communicating order status, tracking, and delivery updates
• Complying with pharmaceutical and customs regulatory requirements
• Responding to customer service enquiries
• Understanding website use and improving our services

We use prescription information to handle your enquiry and assess the requested medicine supply, subject to applicable requirements. Please do not send medical histories or unrelated health records through our other enquiry forms.

4. Data Sharing

We do not sell your personal data. We share your data only with:

• Certified manufacturers and distributors: Only the minimum data necessary to source and dispatch your medicine
• Logistics partners: Name, address, and phone number for shipping and customs clearance
• Regulatory authorities: Where legally required by pharmaceutical import/export regulations
• IT service providers: Providers used for hosting, email delivery, website operation, security, chat and analytics. These include Hostinger, Tawk and Google services. Communications through WhatsApp, Viber or Telegram are also processed by those services

All third parties are required to handle your data securely and in accordance with applicable law.

5. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request we limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for medical data processing at any time

To exercise any of these rights, email privacy@drmeds.org. We will respond within 30 days.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy:

• Website prescription uploads: administrator download access expires after 24 hours; scheduled cleanup deletes the encrypted website copy. Files emailed to info@drmeds.org are retained separately and are not deleted by the website cleanup.
• Enquiries and other personal data: We retain personal data for as long as needed to respond to enquiries, provide requested services and meet applicable legal obligations.
• Analytics retention depends on the service settings and the purposes described in this policy.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. This website uses HTTPS. When prescription uploads are enabled, website file copies are encrypted outside the public website directory and downloads require WordPress administrator access. Prescription documents must be sent through the private prescription upload form. Availability, price-request and contact forms do not accept prescription attachments. Files submitted through the private form are emailed to info@drmeds.org; the website cleanup does not delete those mailbox copies.

8. Contact & Complaints

For any privacy-related questions or concerns, contact our Data Protection team at privacy@drmeds.org.

If you are located in the EU/EEA and believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.