This policy explains what information MedBooks collects when you use medbooks.in, what it is used for, and the choices you have. We collect only what is needed to sell and deliver books, and we do not sell your information to anyone.
1.What we collect
| Information | When | Why |
|---|---|---|
| Name, email address, phone number, delivery address | When you order or save an address | To deliver your order, send order emails, and let the courier reach you |
| Email address and password (stored only as a one-way hash) | When you create an account | To sign you in and show your orders |
| Order history — what you bought, when, and its delivery status | Every order | To fulfil, support and, where required, account for the sale |
| Reviews you write | When you post one | To display on the product page with your first name |
| Messages you send us | Contact form or email | To reply to you |
| Basic technical data — IP address, browser, pages requested | Every visit, in server logs | Security, rate limiting and keeping the site working |
We never see your payment details. Card, UPI and bank information is entered directly with Razorpay, our payment processor, under their own privacy policy. We receive only a payment reference, the amount, and whether it succeeded.
3.How long we keep it
- Order records are kept for as long as required for tax and accounting purposes in India (currently 8 years), then deleted.
- Your account and saved addresses are kept until you delete them or ask us to.
- Contact-form messages are deleted within 12 months of being resolved.
- Server logs are kept for 90 days.
5.Your choices and rights
- See and update your details, addresses and reviews under your account.
- Delete your account by emailing us. Order records that we must keep by law are retained but detached from your login.
- Ask what we hold about you, or to correct it, at support@medbooks.in. We reply within 7 days.
- Emails: order and delivery emails are part of the service and are sent for every order. We do not send marketing email unless you subscribe to the newsletter, and every newsletter has an unsubscribe link.
These rights follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Our grievance contact is support@medbooks.in.
6.Security
The site is served over HTTPS. Passwords are stored as bcrypt hashes and cannot be read by us. Access to order data is limited to staff who need it to fulfil orders and help customers. No system is perfectly secure; if we ever learn of a breach affecting your data we will tell you promptly.
7.Children
The site is intended for nursing and medical students and professionals. We do not knowingly collect information from children under 13.
8.Changes
If we change how we handle your information we will update this page and the date at the top. Significant changes will be announced by email to account holders.
Registered address to be added.
support@medbooks.in