100% Genuine AYUSH Certified & Clinical Medicines
Track Order | Society Health Partner | Seller Studio |
Healthways Store

Ayurveda • Clinical Pharmacy
Live Catalog
All Products Health Journal Articles Ayurvedic Classical & Rasayana Immunity & Daily Vitality Joint, Bone & Muscle Care Digestive Health & Gut Care Diabetes & Metabolic Balance Skin, Hair & Personal Hygiene Clinical Devices & Diagnostics Prescription Medicines (Rx)
Digital Personal Data Protection Act (DPDPA 2023) Compliant

Privacy Policy

How Healthways Store safeguards your sensitive personal health data, uploaded doctor prescriptions, and electronic records with military-grade 256-bit encryption.

Effective Date: January 1, 2026 • Zero Third-Party Health Data Sale • AES-256 Encrypted Storage

Our Fundamental Privacy Promise

At Healthways Store (`healthways.store`), your trust is our highest priority. As a licensed digital healthcare and Ayurvedic wellness portal, we understand that health information is deeply sensitive. We strictly maintain that:

Confidential Prescription Records

Uploaded prescription scans are only accessible to verified registered pharmacists for dispensing verification.

Never Sold or Monetized

We will never rent, trade, or sell your health records, phone number, or purchase history to third-party ad networks.

1 Categories of Data We Collect

To fulfill pharmaceutical deliveries, register Local Society Health Ambassadors, and process orders, we collect the following types of information:

A. Personal Identifiers: Name, email address, mobile phone number, residential address, apartment/society name, and postal PIN code.
B. Sensitive Health & Prescription Information: Digital scans or camera photos of prescriptions issued by Registered Medical Practitioners (RMPs), patient name, doctor’s registration number, medical dosage notes, and clinical conditions relevant to Ayurvedic formulations.
C. Transaction & Financial Tokens: Order history, items purchased, gateway transaction reference numbers. Note: Healthways Store never stores your complete 16-digit debit/credit card numbers, CVV, or UPI MPINs. All payments are tokenized via PCI-DSS compliant RBI-authorized gateways.
D. Technical & Device Telemetry: IP address, device type, operating system, browser configuration, and site engagement analytics collected via Google Analytics 4.

2 Purposes of Processing & Legal Basis

Under the Digital Personal Data Protection Act, 2023 (DPDPA), we process your personal data solely for specified lawful purposes based on your explicit consent:

  • Order Fulfillment & Delivery: Verifying order details, temperature-safe packing, dispatching with courier partners, and coordinating society delivery with your assigned Health Ambassador.
  • Mandatory Pharmacist Audit: Scrutinizing uploaded prescriptions for Schedule H/H1/X medications to comply with the Drugs and Cosmetics Rules, 1945.
  • Transactional Communications: Sending order confirmations, milestone notifications, OTP authentications, and delivery alerts via SMS, WhatsApp, and email.
  • Regulatory & Legal Compliance: Retaining statutory records mandated by the Central Drugs Standard Control Organization (CDSCO), State Drug Licensing Authorities, and Ministry of AYUSH.

3 Security Standards & Data Protection Protocols

We deploy industry-grade organizational and technical measures to prevent unauthorized access, loss, or alteration of your records:

SSL 256-bit Encryption All traffic between your browser and our servers is secured with TLS 1.3 encryption.
Encrypted Prescriptions Medical attachments are stored on secure cloud object storage with AES-256 rest encryption.
Role-Based Access Control Dispensary staff only access the minimum patient data required to fulfill the specific order.
Indian Data Sovereignty Core customer and medical data servers are domiciled exclusively within the territory of India.

4 Your Rights as a Data Principal

Under Indian privacy laws, you possess unequivocal rights over your data:

  • Right to Access: You can request a summary of personal data held about you and the processing activities undertaken.
  • Right to Correction & Updating: You can update inaccurate profile details directly in your customer account or by emailing support.
  • Right to Erasure / Deletion: You can request deletion of your account and personal data, subject to mandatory statutory retention periods under pharmaceutical laws (e.g. Schedule H register requirements).
  • Right to Withdraw Consent: You may withdraw consent for promotional communications at any time with a single click.

5 Cookies & Telemetry Technologies

Healthways Store uses session cookies to maintain your shopping cart, preserve your selected delivery pincode, and authenticate your user session. We also utilize Google Analytics 4 (GA4) with IP anonymization to evaluate aggregate traffic patterns and improve portal usability. You can configure your browser settings to reject cookies, though doing so may limit cart functionality.

Data Protection & Grievance Officer

For any queries regarding this Privacy Policy, your health records, or to exercise your rights under DPDPA 2023, please reach out to our designated Data Protection Officer:

Designation: Data Protection Officer (DPO) & Privacy Counsel

Company: Healthways Store (healthways.store)

Physical Address: Legal Compliance Wing, Connaught Place, New Delhi 110001, India

Direct Privacy Email: care@healthways.store

Support Phone: +91 1800-243-2584

Resolution SLA: Acknowledgment within 24 hours; complete resolution within 15 working days