Ginomeds > Privacy Policy

Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how GINOMEDS (OPC) PRIVATE LIMITED (“Ginomeds”, “we”, “us” or “our”) collects, uses, shares and protects your personal data when you visit ginomeds.com or buy from us. It is written in line with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it, and the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).

By using our website or placing an order, you confirm that you have read this policy. Where we rely on your consent, we will ask for it clearly and you can withdraw it at any time.

1. Who we are

For the purposes of the DPDP Act, Ginomeds is the “Data Fiduciary” for the personal data described in this policy.

2. Personal data we collect

Information you give us

  • Contact and account details: name, mobile number, email address, billing and delivery addresses, and your account password (stored in encrypted form).
  • Order details: products purchased, order value, order history, and any notes you add at checkout.
  • Payment information: payments are processed by our payment gateway, Razorpay. We receive only limited details such as the transaction ID, payment status and payment method. We do not receive or store your full card number, CVV, UPI PIN or net banking password.
  • Communications: messages, emails, call details, reviews, feedback and any photos or videos you send us (for example, to report a damaged product).

Information collected automatically

  • IP address, device type, browser type, operating system, pages visited, time spent on pages, referring website and approximate location (city level), collected through cookies and similar technologies.

Information from others

  • Payment status from our payment gateway, and delivery status from our courier partners.

3. How we use your personal data

We use your personal data only for clear, lawful purposes:

  • To create and manage your account.
  • To process, pack, ship and deliver your orders, and to send order and delivery updates.
  • To process payments, refunds and cancellations.
  • To respond to your questions, complaints and return requests.
  • To prevent fraud, misuse of our website and unauthorised transactions.
  • To comply with legal obligations, such as tax, accounting and invoicing requirements, and requests from government authorities.
  • To improve our website, products and services using aggregated information.
  • To send you offers and product updates – only if you have agreed to receive them. You can opt out at any time.

4. Legal basis for processing

We process your personal data on the basis of:

  • Your consent, which you give when you create an account, place an order, subscribe to updates or accept non-essential cookies; and
  • Legitimate uses permitted under Section 7 of the DPDP Act – for example, where you voluntarily share your data for a specific purpose (such as placing an order), or where we must process data to comply with a law or a court order.

5. Withdrawing consent

You can withdraw your consent at any time by emailing care@ginomeds.com, by using the unsubscribe link in our emails, or by changing your cookie settings. Withdrawing consent will not affect processing that was carried out before you withdrew it. If you withdraw consent needed to fulfil an order or keep your account, we may not be able to provide that service.

6. Cookies

We use cookies and similar technologies to keep you signed in, remember your cart, keep the website secure and understand how visitors use our site. Essential cookies are needed for the website to work. Any analytics or marketing cookies are non-essential, and you can control or delete them through your browser settings or our cookie banner.

7. Who we share your data with

We share personal data only when it is needed, and only with parties who are required to protect it:

  • Payment gateway: Razorpay, to process payments and refunds.
  • Shipping and courier partners: Shiprocket and the courier companies it works with, to deliver your orders (name, phone number and delivery address only).
  • Technology service providers: website hosting, email, SMS and IT support providers who help us run our website and services.
  • Professional advisers: such as auditors, accountants and lawyers, where needed.
  • Government and law enforcement authorities: where required by law, court order or a lawful request.
  • A buyer or successor: if our business is merged, sold or restructured, subject to the same protections.

We do not sell or rent your personal data to anyone.

8. Where your data is stored

Your data is stored on secure servers operated by our website hosting provider. If any personal data is stored or transferred outside India, we will do so only in line with the DPDP Act and any restrictions notified by the Government of India.

9. How we protect your data

We follow reasonable security practices and procedures as required under the IT Act and the SPDI Rules. These include encrypted (HTTPS) connections, secure password storage, restricted access to personal data on a need-to-know basis, and regular updates to our website software. No method of transmission or storage is completely secure, but we work hard to protect your data.

If a personal data breach occurs, we will inform the Data Protection Board of India and the affected users as required under the DPDP Act.

10. How long we keep your data

We keep personal data only as long as it is needed for the purposes described in this policy, or as required by law. Order and invoice records are kept for 8 years, as required for tax and company-law record-keeping. If you ask us to delete your account, we will delete or anonymise your personal data unless we are legally required to keep it.

11. Your rights

Under the DPDP Act, you have the right to:

  • Access: ask for a summary of the personal data we hold about you and how we use it, and the names of those we have shared it with.
  • Correction and updating: ask us to correct inaccurate or incomplete data, or update it.
  • Erasure: ask us to delete data that is no longer needed, unless we must keep it by law.
  • Withdraw consent: at any time, as explained above.
  • Grievance redressal: raise a complaint with our Grievance Officer.
  • Nominate: nominate another person to exercise your rights in the event of your death or incapacity.

To use any of these rights, email care@ginomeds.com or write to our Grievance Officer (see Section 15). We may need to verify your identity before acting on your request. We will respond within the time required by law.

When exercising your rights, please provide accurate information and do not file false or frivolous complaints, as required of Data Principals under the DPDP Act.

12. Children’s data

Our website is intended for adults. Under the DPDP Act, a “child” is anyone below 18 years of age. We do not knowingly collect personal data of children without verifiable consent from a parent or lawful guardian, and we do not track, monitor or send targeted advertising to children. If you believe a child has shared personal data with us, please contact us and we will delete it.

13. Marketing messages

We will send you offers and promotional messages only if you have agreed to receive them. You can unsubscribe at any time using the link in our emails or by contacting us. We will still send you important messages about your orders and account.

14. Links to other websites

Our website may contain links to other websites. We are not responsible for their privacy practices, so please read their privacy policies.

15. Grievance Officer

In accordance with the Information Technology Act, 2000, the SPDI Rules and the DPDP Act, you can contact our Grievance Officer as follows:

  • Email: care@ginomeds.com (please mention “Grievance Officer” in the subject line)
  • Address: GINOMEDS (OPC) PRIVATE LIMITED, Plot No.3, Door No.1, 3rd Cross Street, Veeraragavulu Nagar Extn, Near Grapes Super Market, Kadirvedu, Chennai, Tamil Nadu 600066
  • Available: Monday – Friday: 9:00 – 20:00 | Saturday: 11:00 – 15:00

We will acknowledge your complaint within 48 hours and aim to resolve it within one month of receiving it. If you are not satisfied with our response, you may approach the Data Protection Board of India once it accepts complaints under the DPDP Act.

16. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page with the “Last updated” date. If we make significant changes, we will notify you by email or through a notice on our website.

Add to cart