Privacy Policy

1. Who we are

The data fiduciary responsible for your personal data is Mittal Medical Shop, with its registered office at GF-43, Vyapar Kendra, Sushant Lok-1, Gurugram, Haryana 122009, India. You can reach us at admin@mmplus.in or +91 98109 14589.

2. Scope of this Policy

This Policy applies to personal data we collect online through our website, offline at our retail stores, and through any communication you have with us by phone, email, messaging or in person. It does not apply to third-party websites, applications or services that we do not control.

3. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity and contact details — such as your name, delivery and billing address, email address and mobile number.
• Order and transaction details — products purchased, order value, order history, store visited, and delivery preferences.
• Payment information — we use third-party payment service providers and do not store your full card, UPI or bank details on our systems. Payment information is processed securely by our payment partners.
• Technical and usage data — IP address, browser type, device identifiers, pages viewed and other analytics data collected automatically when you visit our website.
• Communications — feedback, queries, complaints and records of your communication with our customer-care team.

We do not knowingly collect special categories of sensitive data unless it is necessary for a specific service and you have given your consent.

4. How we collect your data

We collect personal data directly from you when you place an order, create an account, make a purchase at our stores, contact us, or fill in a form. We also collect certain technical data automatically through cookies and similar technologies when you use our website (see Section 10).

5. How we use your data

We process your personal data for the following purposes:

• to process, fulfil and deliver your orders, and to manage returns, replacements and refunds;
• to communicate with you about your orders, enquiries and customer-service requests;
• to operate, maintain and improve our website, stores and services;
• to send you updates, offers and promotional information where you have consented to receive them;
• to prevent fraud, ensure security, and protect our rights and the rights of our customers; and
• to comply with applicable legal, regulatory and tax obligations.

6. Legal basis and consent (DPDP Act)

Under the DPDP Act, we process your personal data on the basis of your consent or for certain legitimate uses permitted by law. Where we rely on consent, you may withdraw it at any time by contacting us using the details in Section 13. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, and may affect our ability to provide certain services to you.

7. Sharing and disclosure

We do not sell your personal data. We may share it only with:

• delivery and logistics partners, to fulfil and deliver your orders;
• payment service providers and banks, to process your payments securely;
• the brand owners and manufacturers of products, where required to resolve a product quality issue or replacement;
• IT, analytics and other service providers who support our operations under appropriate confidentiality obligations; and
• government, regulatory or law-enforcement authorities, where required by law or to protect our legal rights.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

8. Data retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, tax or reporting requirements. When personal data is no longer required, we will securely delete or anonymise it.

9. Data security

We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Cookies and similar technologies

Our website may use cookies and similar technologies to remember your preferences, keep your shopping session active, analyse traffic and improve your experience. You can control or disable cookies through your browser settings, though some features of the website may not function properly if you do so.

11. Your rights

Subject to applicable law, you have the right to:

• access a summary of the personal data we hold about you and how it is processed;
• request correction, completion or updating of inaccurate or incomplete data;
• request erasure of your personal data where it is no longer required;
• withdraw consent previously given for processing;
• nominate another individual to exercise your rights in the event of death or incapacity; and
• register a grievance with our Grievance Officer (see Section 13).

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before acting on your request.

12. Children’s data

Our products and services are intended for customers aged 18 years and above. We do not knowingly collect personal data of children without verifiable parental or guardian consent, and we do not undertake any processing that is likely to cause harm to a child. If you believe a child has provided us personal data without appropriate consent, please contact us so we can take suitable action.

13. Grievance Officer and contact

In accordance with the DPDP Act and the Information Technology Act, 2000, the details of our Grievance Officer are set out below. You may contact the Grievance Officer for any questions, requests or complaints relating to your personal data, and we will respond within the timelines prescribed by law.

14. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The revised version will be posted on our website with an updated effective date. We encourage you to review this Policy periodically.