This Privacy Policy explains how Cosmeds collects and processes personal information in accordance with the Information Technology Act 2000 and related rules (SPDI Rules) applicable in India.

• Personal Information: name, email, phone, delivery address, date of birth (optional).
• Sensitive Data (SPDI): health-related information, prescriptions and medical history — collected only with explicit consent when required to fulfil an order.
• Technical Data: IP address, device information, cookies and usage logs.

• Process orders, payments and deliveries.
• Verify prescriptions when selling regulated medicines.
• Provide customer support and communications.
• Improve service, detect fraud and comply with legal obligations.

We process personal data to perform contractual obligations, comply with legal requirements and with your consent for marketing or sensitive data processing. You may withdraw consent, however withdrawal may affect our ability to provide certain services.

We do not sell personal data. We may share information with:

• Delivery partners and courier services to fulfil orders.
• Payment gateways and banks for transaction processing.
• Authorized medical professionals or pharmacists when needed.
• Government or law enforcement agencies if required by law.

We implement reasonable administrative, technical and physical safeguards. SPDI is retained only as long as necessary for the purpose, or as required by law.

We use cookies and similar technologies for analytics, security and to improve user experience. You can disable cookies via your browser but some features may not function properly.

• Access and correction of your personal information.
• Request deletion or restriction where permitted by law.
• Opt-out of marketing communications.

In accordance with IT Rules, Cosmeds appoints a Grievance Officer to address privacy concerns. Contact: [Name], Email: grievance@cosmeds.example, Phone: [Phone].

For privacy-related requests write to: privacy@cosmeds.example