Privacy Policy
1. Introduction
Welcome to Yao App, a mobile application owned & operated by Parmanand & Sons Medical Stores ("we," "our," "us"). We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (the "Service") to purchase medicines, wellness products, cosmetics, and nutritional items for delivery across India.
By downloading, accessing, or using our Service, you signify that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree, please do not access or use our Service.
2. Information We Collect
We collect several types of information to provide and improve our Service to you.
A. Personal Data
This is information that can be used to identify you personally. We collect it with your consent and for lawful purposes, as required by the Digital Personal Data Protection Act, 2023.
-
Identity & Contact Data: Your full name, email address, phone number, and delivery address(s).
-
Health & Prescription Data: Prescriptions uploaded by you, health information you voluntarily provide for product recommendations (e.g., allergies, existing conditions), and your order history for medicines and wellness products.
-
Transaction & Payment Data: Details of your purchases, payment method (e.g., credit/debit card details, UPI ID, wallet information). Please note that we use secure third-party payment gateways, and we do not store your full card details on our servers.
-
Profile Data: Your username and password, preferences, feedback, and survey responses.
B. Non-Personal Data
This is data that does not directly reveal your identity.
-
Technical Data: Your device type, operating system (iOS/Android), unique device identifiers (e.g., IDFA for iOS, Android ID), IP address, mobile network information, and app crash logs.
-
Usage Data: Information about how you interact with our app, such as the features you use, the pages you view, the time spent on the app, and search queries.
3. How We Use Your Information
We use the information we collect for the following purposes, relying on the lawful bases of consent and necessary performance of a contract:
Service Provision
To process your orders, deliver products, manage your account, and process payments.
Prescription Verification
To validate prescriptions with registered medical practitioners or pharmacists as required by Indian law.
Communication
To send you order confirmations, delivery updates, alerts about your prescriptions, and respond to your customer service requests.
Personalization
To recommend relevant products, offers, and content based on your preferences and order history.
4. Legal Basis for Processing (Under DPDPA 2023)
We process your personal data based on the following grounds:
Consent
You have given clear, specific, and informed consent for one or more specific purposes (e.g., for marketing communications).
Legitimate Use
The processing is necessary for the performance of a contract with you (e.g., delivering your order) or for our legitimate interests.
Compliance with Law
The processing is necessary for compliance with a legal obligation to which we are subject.
6. Data Security
We implement appropriate technical and organizational security measures designed to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These include encryption (SSL/TLS), secure servers, and access controls.
7. Data Retention
We will retain your personal data only for as long as is necessary for the purposes set out in this Policy, or as required to comply with our legal obligations (such as retaining prescription records as per Indian law), resolve disputes, and enforce our agreements.
8. Your Data Protection Rights (Under DPDPA 2023)
Under the DPDPA, you have the following rights regarding your personal data:
Right to Access & Information
You can request a summary of the personal data we hold about you and how it is being processed.
Right to Correction & Erasure
You can request the correction of inaccurate or incomplete personal data. You can also request deletion, subject to legal exceptions.
Right to Withdraw Consent
You can withdraw your consent for the processing of your data at any time, where consent was the basis for processing.
Right to Grievance Redressal
You have the right to readily available means of grievance redressal. You can lodge a complaint with us or with the Data Protection Board of India.
You can exercise these rights by contacting us at the details provided in Section 10.
9. Third-Party Links
Our Service may contain links to other websites or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
10. Grievance Officer & Contact Us
In compliance with the Information Technology Act, 2000 and the DPDPA, 2023, we have appointed a Grievance Officer. If you have any questions about this Privacy Policy, wish to exercise your data rights, or have any grievances, please contact:
Grievance Officer
Name: [Name]
Email: info@yaoapp.in or sales@parmamed.in
Address
Shop No. 24, Shrivardhan Complex,
Wardha Road, Ramdaspeth
Nagpur, 440012
We will respond to all legitimate requests within the timelines prescribed by law.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we will provide a more prominent notice, such as an in-app notification or an email. You are advised to review this Privacy Policy periodically for any changes.