Privacy Policy – MedExpress
Effective Date: 12 December 2025
Website: medexpress.online
1. About MedExpress
MedExpress (“MedExpress,” “we,” “us”) operates medexpressonline.com (the “Website”).
Contact:info@medexpress.online | +1 630 753 9260 | 1611 Firethorn St, Bolingbrook, IL 60490 USA
2. Scope of this Policy
This Privacy Policy explains how we collect, use, share, store, and safeguard personal information when you visit the Website, create an account, upload prescriptions, passport and/or visa copies, place a service request, or contact our support team.
3. Information We Collect
A. Account & Contact Details
Name, email address, phone number, shipping address, billing address (if applicable), passport copy along with country, visa copy, and last entry into the USA.
B. Prescription and Health-Related Details
Prescription images/files and any details visible on the prescription (such as doctor name, patient name, medicine name, dosage), as well as information you provide in messages related to your service request.
C. Service Request and Payment Details
- Medications ordered, quantities, order history, invoices, and transaction status.
- Payments are processed through third-party payment gateways; we do not store full Credit Card / Debit Card numbers in our database.
D. Technical and Usage Data
- IP address, device and browser information, cookies, pages visited, timestamps, and activity logs (used for security, analytics, and performance) for security and analysis.
4. How We Use Your Information
We use your information to:
- Verify prescriptions (where required) and confirm service request eligibility
- Process, pack, and ship based on your service request
- Provide service request updates and customer support
- Detect and prevent fraud or misuse
- Meet legal and regulatory requirements
- Improve website performance and user experience
5. Sharing Information
We may share limited information with:
- Fulfillment, packaging, and shipping partners in India (for service request preparation)
- courier/logistics partners and customs documentation providers
- Payment processors to complete transactions, IT teams, web hosting, and security vendors who support our Website operations
- Regulators or law enforcement agencies, where required by law
We do not sell your prescription or health-related and personal information to any third parties.
6. Cross-Border Processing
Your information may be processed in India and/or other countries where our service providers operate. Cross-border transfers may occur as part of providing our services.
7. Data Retention
We retain personal information as long as necessary for:
- Service request fulfillment and support
- Legal, tax, and compliance requirements
- Fraud prevention and dispute resolution
Prescription records may be retained where required for compliance/audit purposes and then securely deleted or stored in an encrypted format.
8. Security Measures
We apply reasonable security safeguards (including access controls, monitoring, vendor controls, and encryption in transmission, where applicable). However, no data transmission or storage system can be guaranteed to be completely secure.
9. Your Rights and Choices
Depending on your location and applicable law, you may request access to, correction of, deletion of, or withdrawal of consent for your personal data (where applicable).
To make a request, email us at info@medexpress.online with the subject “Privacy Request.”
10. Cookies
We use cookies for sessions, preferences, analytics, and security. You can manage cookies via browser settings; disabling them may affect functionality.
11. Children’s Privacy
Our services are intended for users 18 years and older. Do not upload a child’s prescription unless you are the parent/guardian and /or legally authorized to do so.
12. HIPAA Notice (USA)
MedExpress is an e-commerce and cross-border fulfillment service. HIPAA generally applies only to specific “covered entities” and their “business associates.” Unless MedExpress is acting as a covered entity or business associate for a particular service, information you share with us (including prescription uploads) may not be protected under HIPAA.
Even if HIPAA does not apply, we treat prescription information as sensitive and use reasonable safeguards to protect it.
13. Personal Data Breach Notification (India – DPDP)
We maintain reasonable safeguards to reduce the risk of personal data breaches. If personal data breach occurs, we will notify affected individuals and the relevant authority in the form and manner required under applicable law. Where feasible, notifications may include the nature of the breach, the type of data affected, recommended steps for you, mitigation actions taken, and contact details for assistance.
14. Updates to This Policy
We may update this Privacy Policy from time to time. Updated versions will be posted on the Website with a revised effective date.
