Privacy Policy

Last updated: October 2026  ·  Governing law: India

How customer information, prescription images and chat data are collected, processed and protected when you interact with the askit website and WhatsApp service.

This policy explains what we collect when you use askit over our website or WhatsApp, why we collect it, how it is shared and protected, and what control you have. We handle personal data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Prescriptions are sensitive health data — we treat them with stricter care than anything else we hold.

1.Data we collect

• Contact & identity: your WhatsApp phone number, profile name, and the name you give us.
• Delivery details: the address you type, or the location pin you share, and the derived pincode — used to find nearby pharmacies and to deliver.
• Order content: the medicines you request, quantities, prescription images or PDFs you upload, and your order and payment history.
• Conversation data: the chat history you exchange with our WhatsApp service, so we can process and support your order.

2.Why we process it

• To take, quote, fulfil and deliver your order, and to confirm delivery by OTP.
• Prescription audit by licensed Partner Pharmacists, so they can quote accurately and dispense correctly and lawfully.
• Delivery logistics, customer support, refunds, and statutory record-keeping.
• To keep the service safe (fraud, misuse and spam prevention) and to meet legal obligations.

3.WhatsApp infrastructure consent

By initiating a chat with our WhatsApp Bot, you explicitly consent to the collection, transmission and processing of your personal information and health data via WhatsApp's end-to-end encrypted infrastructure and Meta's API services.

4.Prescriptions & health data

Prescription images are stored in private, access-controlled storage — never a public location — and are opened only through short-lived, expiring links. They are shared with the licensed Partner Pharmacies invited to quote on your order, because a pharmacist must see the actual prescription to dispense lawfully and correctly. That sharing is the sole purpose; we do not use prescriptions for advertising or profiling, and we never sell them.

5.Who we share with

• Partner pharmacies — the details needed to quote, dispense and deliver your order, including required delivery agents.
• Service providers — payment gateway, cloud hosting, and messaging (WhatsApp / Meta), acting on our instructions.
• Authorities — where required by law.

6.Retention

We keep order and prescription records for as long as needed to serve you and to meet legal, tax and pharmacy record-keeping obligations, then delete or anonymise them.

7.Your rights

You may ask us to access, correct or delete your personal data, or to stop messaging you, by writing to the email below. We may need to keep certain records where the law requires it. If you are unsatisfied, you may complain to the Data Protection Board of India. You can also reach our Grievance Officer.

8.Security practices

Data is encrypted in transit; prescription files are kept in private storage with least-privilege access; and access is limited to those who need it to fulfil your order — in compliance with the IT (Reasonable Security Practices) Rules, 2011. No system is perfectly secure, but we work to industry-standard practice.

9.Pharmacy partners

This section covers pharmacies that register with us at partner.askit24.com/join, and the people whose details they give us.

• What we collect: business and owner details; the drug licence; PAN, and GSTIN and FSSAI numbers where they apply; the registered pharmacist's details; shop location and business hours; bank account details; copies of the required documents; the mobile number verified by one-time code; and the signed declaration, with the time, IP address and device details recorded when it was signed.
• Why we use it: only to verify the pharmacy, send it orders and pay it.
• Storage and access: documents are stored encrypted in Google Cloud in India (asia-south2). Apart from the pharmacy that uploaded them, only the askit team can open them, and each view by the team is recorded. The full bank account number is stored separately and is shown only through an action that is recorded.
• Payments: the one-time registration fee is processed by Cashfree Payments India Private Limited. If we set up payouts to the pharmacy's bank account through Cashfree, we share the bank account details, PAN, GSTIN, contact details and the PAN and GST documents with Cashfree for that purpose.

Retention. A registration left unfinished is deleted after 30 days without changes, and one the pharmacy cancels before sending it is deleted straight away. If a pharmacy withdraws a registration after sending it, we keep only its reference number, its status history and its payment records. If the pharmacy chooses to leave us a note on why it withdrew or cancelled, we keep that note with its mobile number, and nothing else from the registration. An approved pharmacy's records are kept while it is a partner, and afterwards for as long as the law requires. Backup copies of deleted data expire within 7 days.