Data Protection Note
Youhexa Technologies Pvt. Ltd. · 2nd Floor, Apex Tower, Mahatma Gandhi Marg, Hazratganj, Lucknow, Uttar Pradesh 226001
Subscription plan prices are not shown on public pages. Fees appear only on the billing page at checkout.
Status of the law. The Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 (notified 13–14 Nov 2025) are being brought into force in phases. Most obligations, including notice, consent, data principal rights, security safeguards, breach intimation and children's data, apply from 14 May 2027. DavaSetu follows these principles from launch. Until then, the Information Technology Act, 2000 and the rules made under it continue to apply, including the IT Rules, 2021.
Notice
Before we collect your personal data, we tell you what we collect and why (see the Privacy Policy, Sections 1.4–1.6). Each item is listed in plain language.
Consent
Where we rely on your consent, we ask for it clearly and separately. Examples are optional notifications and a pharmacist's photo being published. You can withdraw consent as easily as you gave it, from your dashboard or by writing to support@davasetu.co.in. If a pharmacist withdraws consent, their details are removed from the public site within 48 hours.
Cookies
At launch, only essential cookies (login, security, language) are used. There are no analytics or advertising cookies.
Purpose limitation and minimisation
We collect only what is needed to provide the pharmacy website, billing, security and support. We use it only for those purposes. We do not ask public visitors to register. We do not collect patient, prescription or health records.
Accuracy
Pharmacies can update their information at any time. Pharmacists and users can ask us to correct their data.
Storage limitation
We keep data only as long as needed or as the law requires, then delete it. Security logs and transaction-linked processing records are kept for one year (DPDP Rules, 2025, Rule 8(3)). See the Privacy Policy, Section 1.9.
Security
We use reasonable security safeguards. If a personal data breach affects you, we will inform you and the Data Protection Board of India as required.
Your rights as a Data Principal
Access a summary of your data. Correction, completion, updating and erasure. Grievance redressal. Nominate another person to exercise your rights.
Children
DavaSetu is for adults and businesses. We do not knowingly process the personal data of children (under 18). We do not track or target advertising at children. If a child's data reaches us, we will delete it. If a future feature needs it, we will first obtain verifiable parental consent.
Grievance contact
Ajay Sharma, Grievance Officer, support@davasetu.co.in, +91 7607216033, office address: 2nd Floor, Apex Tower, Mahatma Gandhi Marg, Hazratganj, Lucknow, Uttar Pradesh 226001. We acknowledge complaints within 24 hours and resolve them within 7 days (IT Rules, 2021, Rule 3(2)). That is well within the 90-day limit in DPDP Rules, 2025, Rule 14(3). If your grievance is not resolved, you may appeal to the Grievance Appellate Committee and, once its functions are in force, approach the Data Protection Board of India.
Pharmacy data
Each pharmacy is responsible for the information it publishes about itself and its pharmacist, and for getting the pharmacist's consent. DavaSetu hosts that information on the pharmacy's behalf.