Privacy Policy

ONVE processes personal data only for lawful purposes and in accordance with applicable law. We process your personal data to:

• provide and operate the Platform and facilitate medicine orders;
• verify prescriptions and coordinate order fulfilment through licensed partner pharmacies;
• process payments and deliveries;
• communicate with you regarding orders and support;
• comply with applicable legal and regulatory requirements; and
• prevent fraud, misuse of the Platform and other unlawful activities.

By using the Platform, placing an order, uploading a prescription or otherwise providing your personal data, you consent to such processing where required under applicable law.

• Personal Information: Name, phone number, email address, delivery address
• Prescription Information: Prescription images uploaded for order fulfillment
• Payment Data: Processed by Razorpay — we do not store card/bank details
• Location Data: Delivery address coordinates for rider dispatch
• Usage Data: App interactions, order history, device information

• To process and fulfill your medicine orders
• To share prescription images only with the selected licensed pharmacy and its authorised registered pharmacist for lawful prescription verification and order fulfilment
• To coordinate delivery with our rider network
• To send order updates and notifications
• To improve our platform and services
• To detect and prevent fraud, fake prescriptions, misuse of the Platform, duplicate accounts and other unlawful activities
• To comply with legal and regulatory requirements

Prescription images are classified as health-related personal data and personal data requiring enhanced protection under applicable law. We handle them with extra care:

• Prescriptions are shared only with the selected pharmacy for order fulfillment
• All prescriptions are stored with permanent audit trails (order ID, timestamp, pharmacy)
• Prescription data is not used for profiling, behavioural advertising, disease-based marketing or any purpose unrelated to lawful order fulfilment.
• Prescriptions are retained for such period as may be required under applicable law, regulatory requirements and ONVE's internal compliance policies.
• Access is restricted to the User, the selected licensed pharmacy, its authorised personnel, and authorised ONVE personnel on a need-to-know basis.

We share data only with:

• Pharmacies: Order details and prescription images for fulfillment
• Delivery Partners: Delivery address and order info for logistics
• Razorpay: Payment processing (PCI-DSS compliant)
• Google Maps or Similar Mapping Services: For address geocoding, route optimisation and delivery assistance
• Cloud Hosting Providers: For secure storage and processing of Platform data
• Analytics Service Providers: To analyse Platform performance and improve user experience
• Communication Service Providers: For sending OTPs, order updates, notifications and customer communications
• Customer Support Service Providers: To assist in responding to customer queries and resolving grievances
• Government Authorities, Regulators or Law Enforcement Agencies: Where disclosure is required by applicable law, court order or regulatory direction.

We do not sell or rent your personal data to third parties.

We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss or misuse. Such measures include encrypted data transmission (HTTPS/TLS), secure cloud hosting infrastructure, encryption of data at rest (where appropriate), role-based access controls, authentication mechanisms, audit logs, periodic security reviews, and other appropriate administrative, technical and physical safeguards.

Subject to DPDP Act 2023 and other applicable laws, you have the right to:

• Access your personal data
• Request correction or updating of inaccurate or incomplete personal data
• Request deletion of your personal data (subject to legal retention requirements)
• Withdraw consent for data processing, where such processing is based on consent
• Nominate another person to exercise your rights in the event of your death or incapacity; and
• Raise grievances regarding the processing of your personal data.

To exercise these rights, contact our Grievance Officer at Help@onve.io. Withdrawal of consent shall not affect processing already undertaken or any processing required under applicable law.

Our web platform may use cookies and similar technologies to enable essential Platform functionality, remember user preferences, improve performance, analyse Platform usage and enhance user experience. We may also use third-party analytics service providers to help us understand how the Platform is used. You can manage or disable cookies through your browser or device settings; however, doing so may affect certain Platform functionalities.

We may update this Privacy Policy from time to time to reflect changes in applicable law, our business operations or our data processing practices. The updated version will be published on the Platform with the revised "Last Updated" date.

For any questions, concerns or grievances relating to this Privacy Policy or the processing of your personal data, you may contact our Grievance Officer:

We will acknowledge and address your grievance within the timelines prescribed under applicable law.