Privacy Policy

Effective Date: October 1, 2025 | Last Updated: February 18, 2026

MedbeW (operated by Lifestone Healthcare), refers to our collective healthcare services including our website (medbew.com), MedbeW Pharmacy, MedbeW Diagnostics, and MedbeW Polyclinic. We are committed to maintaining the highest standards of data privacy for our patients and users.

1. Consent and Scope

By using our platform or services, you provide explicit consent to the collection and processing of your personal and medical information. This policy applies to all users, patients, and visitors of MedbeW.

2. Types of Data We Collect

A. Personal Information

• Full name, age, gender, and contact details (Phone, Email, Address).
• Account credentials and login information.

B. Sensitive Personal Data or Information (SPDI)

• Health Data: Physical, physiological, and mental health conditions.
• Medical Records: Uploaded prescriptions, lab reports, and doctor consultation notes.
• Financial Data: Transaction details for pharmacy orders or lab bookings (handled by secure PCI-DSS compliant partners).

3. Purpose of Collection

Your data is processed only for specified, lawful purposes:

• Verification of prescriptions for the sale of scheduled drugs (Drugs and Cosmetics Act compliance).
• Scheduling and conducting diagnostic tests via MedbeW Diagnostics (Partner: Thyrocare).
• Providing specialized Orthopaedic and General consultations at MedbeW Polyclinic.
• Delivery of medicines and medical reports to your registered address.

4. Data Sharing and Transfer

We do not share your sensitive data with third parties for marketing purposes. Data sharing is limited to:

• Medical Professionals: Licensed doctors and pharmacists within the MedbeW network.
• Service Facilitators: Authorized diagnostic laboratories and logistics partners.
• Legal Obligations: When required by the Government of India or under a court order.

5. Data Security (Rule 8 Compliance)

We implement “Reasonable Security Practices and Procedures” as per the IT Rules 2011. This includes end-to-end encryption for prescription uploads, secure database management for health records, and periodic audits to ensure your medical history remains confidential.

6. Data Retention Policy

In accordance with Indian medical regulations, patient records and prescriptions are retained for the legally mandated period (typically 3 years for pharmacy records and longer for clinical history) to ensure continuity of care and regulatory compliance.

7. User Rights

Under the DPDPA 2023, you have the following rights:

• The right to access a summary of your personal data held by us.
• The right to correct or update inaccurate medical or personal information.
• The right to withdraw consent for data processing (subject to legal record-keeping requirements).
• The right to seek redressal for any grievances.

8. Grievance Redressal

In compliance with the IT Act and DPDPA, any discrepancies or grievances with respect to processing of information shall be reported to the Grievance Officer: