MediStore Pro Legal & Compliance

Clinical Data Governance & Patient Health Information Security

256-Bit AES Encryption · DPDP Act 2023 & HIPAA Aligned

Privacy Policy & Patient Health Information (PHI) Protection

Effective Date: October 1, 2026 · Applicable to MediStore Pro Cloud & On-Premises Pharmacy Instances

01 Commitment to Pharmacy & Healthcare Confidentiality

MediStore Pro is engineered exclusively for licensed retail pharmacies, hospital dispensaries, and wholesale distributors in India. We treat all medical dispensation records, patient prescription attachments, doctor prescriber identifications, and retail billing histories with the highest standard of clinical confidentiality.

Strict Zero-Monetization Policy:

MediStore Pro never sells, leases, monetizes, or shares patient medication profiles or transaction histories with pharmaceutical advertising networks or third-party brokers.

02 Types of Information Collected & Stored

Prescription & Patient Records

  • Patient name, phone number, and delivery address.
  • Registered Medical Practitioner (RMP) prescriber details.
  • Scanned doctor prescription images & PDF uploads.
  • Dispensation logs for Schedule H, H1, and X medicines.

Fiscal & Inventory Ledger Data

  • Distributor purchase invoices & GST tax rates.
  • POS sales invoices, cash registers & UPI settlement IDs.
  • Medicine batch numbers, expiry dates & MRP records.
  • Drug license numbers (Form 20, 21) & GSTIN credentials.

03 Statutory Data Retention Under Indian Law

Under the Drugs and Cosmetics Rules, 1945 (Rule 65) and the Central Goods and Services Tax Act, 2017 (Section 36), pharmacies are mandated to preserve all dispensation registers, prescription counterfoils, and purchase/sales vouchers for a statutory period of not less than five (5) to eight (8) years.

Consequently, while user login credentials or active subscriptions may be cancelled or decommissioned upon request, underlying fiscal invoices and controlled medicine dispensation registers remain cryptographically archived to satisfy statutory drug inspector audits.

04 Security Infrastructure & Access Controls

MediStore Pro incorporates defense-in-depth protection:

Encrypted in Transit

TLS 1.3 encryption across all API requests, SignalR sockets, and web sessions.

Role-Based RBAC

Strict separation between Cashier POS billing, Pharmacist verification, and Owner administration.

Audit Trail Logging

Every price adjustment, stock deduction, and return is permanently recorded in system audit logs.

05 Contact Data Protection Officer (DPO)

For inquiries regarding clinical privacy, data correction, or HIPAA/DPDP compliance audits, please contact our pharmacy data governance officer at:

MediStore Compliance & Privacy Cell

Email: privacy@medistore.local · Support Helpline: +91 (033) 2800-4500

Account Deletion Request →

© 2026 MediStore Pro. All rights reserved. Clinical Pharmacy ERP.