Effective Date: July 31, 2025

Dr. Med Pharmacy (“we,” “us,” or “our”) collects and processes your personal data in accordance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations (IRR).

1. Scope & Consent

By accessing or using our website or mobile app, you confirm your agreement to this Privacy Policy and consent to the collection, use, and processing of your personal data as outlined herein. If you do not agree with these terms, we kindly advise you not to proceed with using our services.

We will request your explicit consent where required before processing sensitive personal data such as health records or prescription information. If you have any concerns regarding the handling of your personal data, you may reach out to us directly so we can promptly address them. You also retain the right, under the Data Privacy Act of 2012, to seek guidance or assistance from the National Privacy Commission (NPC).

2. Definitions

• Personal Data: information that identifies you (e.g., name, address, contact info, birth date, gender, health info, payment details).
• Sensitive Personal Data: includes health records, prescription details.
• Processing: any operation on personal data (collection, storage, use, disclosure, deletion).

3. What We Collect

• Data You Provide:
  • Account info (name, email, password, date of birth, gender, civil status)
  • Shipping and billing addresses, phone/mobile number
  • Medical history, prescriptions submitted for dispensing
  • Payment details (credit/debit cards, GCash, Xendit)
• Automatically Collected:
  • Usage data (IP address, device/browser type, visited pages, timestamps)
  • Session cookies to keep you logged in and preserve your shopping cart
• Third-Party Sources:
  • Social sign-ins (Google, Facebook) when you opt to use them
  • Public registries (professional licensure) for verification

4. How We Use Your Data

We process your data to:

• Provide and deliver services (orders, prescriptions, deliveries)
• Manage your account securely (login, password resets, identity verification)
• Communicate important information (order updates, reminders, surveys)
• Send marketing and promotional materials only if you opt-in
• Comply with legal, regulatory, and safety requirements, including FDA adverse event reporting

5. Cookies & Tracking

We use session cookies and similar technologies to:

• Keep you logged in during your visit
• Preserve your shopping cart contents
• Collect basic site analytics for performance improvement

We do not use persistent marketing cookies without your explicit consent. Upon your first visit, you will be prompted to accept or decline cookie use as required by law.

Disabling cookies may limit site functionality, including login and checkout.

For more information, please see our separate Cookie Policy.

6. Disclosure of Data

We share your data only with:

• Affiliates for cross-promotional offers
• Service Providers such as courier services, payment gateways, IT hosting providers—all under strict confidentiality agreements
• Healthcare Partners including licensed pharmacists involved in prescription validation and dispensing
• Regulatory Authorities such as the National Privacy Commission (NPC), Food and Drug Administration (FDA), and Department of Trade and Industry (DTI) when required by law.
  We do not sell your personal data to marketers or third parties.

7. Data Security & Retention

• Your data is encrypted in transit using TLS/SSL (256-bit) and stored securely with role-based access controls.
• We retain data as follows:
  • Financial and transactional records: 7 years
  • FDA safety reports: 5 years
  • Marketing data: until you unsubscribe + 1 year
  • Account data: until deletion request + 1 year
• After retention periods, data is securely destroyed or anonymized.
  If your data is stored or processed outside the Philippines, we ensure protection consistent with Philippine data privacy laws.

8. Children’s Data

Our services are intended for persons aged 18 and above. If you are under 18, you may use our services only with the involvement or permission of a parent or guardian.

9. Your Rights

Under the Data Privacy Act, you have the right to:

• Access your personal data
• Rectify inaccuracies
• Erase data (subject to legal and regulatory obligations)
• Object to marketing communications
• Withdraw consent (note that this may limit our ability to provide certain services)
  To exercise your rights or inquire about your data, please contact our Data Privacy Officer at:
  Email: info@drmedpharmacy.com.ph

10. Data Breach Notification

In the unlikely event of a data breach that may affect your personal data, we will notify you and the National Privacy Commission without undue delay, in accordance with the Data Privacy Act.

11. Policy Updates

We may update this Privacy Policy to reflect changes in law or our practices. Updates will be posted on our website with an updated effective date. We encourage you to review it periodically.