Privacy Policy

1. Who is responsible for your data

Andractim.Shop decides how and why your data is used (the “data controller”). Contact: hello@andractim.shop. Privacy requests and complaints can also go to our Grievance Officer.

2. What we collect

• Account and contact: name, email address, phone number.
• Orders: delivery and billing addresses, items ordered, shipping and tracking details, payment method, and the screenshot or reference you upload as proof of payment.
• Health information: prescriptions and related documents you upload, and what you tell our pharmacists. This is sensitive data.
• Technical: IP address, device and browser details, pages viewed and searches, used to run and secure the site.
• Messages: what you send through our forms, chat, email and WhatsApp.

3. Why we use it

You may withdraw consent at any time. This does not affect processing already done. If you withdraw consent for health data we need to fill an order, we may not be able to complete it.

4. Who sees your data

Your prescriptions and health details are seen only by the pharmacists and staff handling your order. We share the minimum necessary with:

• shipping carriers, postal services and customs, to deliver your order;
• email, hosting and technical service providers, to run the site;
• payment and fraud-prevention services involved in your payment;
• professional advisers, and courts, regulators or law-enforcement bodies where the law requires or allows it.

We do not sell your personal data and we do not share it for third-party advertising.

5. International transfers

We ship worldwide, so your data may be processed in countries other than yours, including where our team, suppliers and carriers are based, and those countries may have different data-protection rules. We take reasonable steps to protect your data wherever it is processed, and we send only what is needed for delivery to the carriers and customs authorities involved.

6. Security and how long we keep data

Prescriptions and payment proofs are stored in a private area that is not publicly reachable, available only to you and authorised staff. No system is completely secure, and we cannot guarantee absolute security.

We keep data only as long as needed for the purposes above, including the legal, tax, customs and pharmacy record-keeping periods that apply to us. After that we delete or anonymise it.

7. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR, California law or India’s Digital Personal Data Protection Act, 2023), you may have the right to access your data, correct it, delete it, restrict or object to its use, receive a copy, withdraw consent and complain to your data-protection authority.

To use a right, email hello@andractim.shop. We may need to verify your identity first, and some records we must keep by law. We will reply within the time the law of your country requires.

8. Cookies and third parties

9. Children

The site is for adults aged 18 and over. We do not knowingly collect data from children. Medicines for a child should be ordered by a parent or guardian. If you think a child has given us data, contact us and we will delete it.

10. Questions and complaints

Contact us first at hello@andractim.shop or use the grievance process. You also have the right to complain to the data-protection authority of your country.

11. Changes to this policy

We may update this policy. The revision date is at the bottom of the page. If a change is significant we will tell you in a clear way, for example by email or a notice on the site.