Privacy Policy
This policy explains what the Abdullah Pharmacy app collects, why we need it, who can see it, and how you can change or delete it. It is written to be read, not to be survived.
1. Who we are
Abdullah Pharmacy ("we", "us", "the pharmacy") operates the Abdullah Pharmacy mobile and web application. We are a retail pharmacy based in Pakistan, at Kolo Road, Hafizabada, Punjab, trading as Abdullah Medical Store.
Through the app you can browse and order vitamins, supplements, over-the-counter medicines and medical devices such as blood pressure monitors and glucometers; upload a doctor's prescription for us to price and dispense; set medicine reminders; and look up doctors, hospitals and emergency numbers.
We are the data controller for the information described here. Using the app means this policy applies to you.
2. At a glance
The short version, all of which is expanded below:
3. What we collect
We collect only what an order actually needs. Most of it you type in yourself; the rest is created by using the app.
| Category | What it includes | Why we need it |
|---|---|---|
| Account | Your name, email address, phone number, and a profile photo if you sign in with Google or choose an avatar | To create your account, sign you in and let us reach you about an order |
| Delivery | Delivery addresses, contact name and phone for each address, and any landmark you add | To get the order to the right door |
| Orders | What you ordered, quantities, prices, order status and history | To dispense and deliver, and to keep the sales records a pharmacy is required to keep |
| Prescriptions | Photos or PDFs of prescriptions you upload, notes you write, and messages you exchange with our pharmacist | To read the prescription, quote a price and dispense the correct medicine |
| Reminders | Medicine names and the times you want to be reminded | To send the reminder you asked for |
| Reviews | Ratings and review text you submit about a product, shown with your display name | To publish the review once our staff approve it |
| Notifications | A device notification token, and your notification preferences | To send order updates and reminders to this device |
| Technical | Device type, operating system, app version and basic error logs | To keep the app working and diagnose crashes |
What we do not collect: we do not ask for your national identity number, we do not request GPS or background location, we do not read your contacts, and we do not access photos on your device other than the ones you deliberately pick or capture for a prescription.
4. How we use it
We use your information to:
- Create and secure your account, and sign you in
- Show you the catalog, your cart, your wishlist and your order history
- Read and price a prescription, and dispense what it says
- Deliver your order and let our delivery rider contact you about it
- Send order updates, prescription replies and the medicine reminders you set up
- Answer your questions, whether in the app or on WhatsApp if you start a chat
- Keep the sales, dispensing and tax records the law requires us to keep
- Detect fraud and abuse, and keep the service running correctly
- Understand which products are in demand, using order totals rather than individual customer profiles
We do not use your information to build an advertising profile, and we do not make automated decisions about you that have a legal or similarly significant effect.
Marketing messages are opt-in. If you have not opted in, the only messages you get are about an order, a prescription or a reminder you created — the ones that would make the app broken if they did not arrive.
5. Prescriptions and health information
A prescription is medical information about you, and we treat it as the most sensitive thing in the app.
- Access is restricted. A prescription file can be opened by you and by our pharmacy staff. It is never publicly readable, and its address is not guessable or shareable — no link to a prescription is ever placed in a notification, an email or an SMS.
- It is used to dispense, and nothing else. We do not share prescriptions or medicine histories with insurers, employers, advertisers or any other third party, and we do not sell them in any form, aggregated or not.
- Staff see it because they must. Only pharmacy staff handling your order can read it, and every staff action on a record is logged with who did it and when.
- Ordering medicine is itself health information. The same protection applies to the contents of your orders and your medicine reminders.
You are never obliged to upload a prescription. You can use the app purely for vitamins, supplements and devices that do not require one.
7. Payment
Orders are cash on delivery. The app has no card entry screen and no payment gateway, so we never see, transmit or store a card number, a CVV or a bank account number. The only money-related data we hold is what an order cost and whether it was paid.
If we add online payment later, this policy will be updated before it goes live and the payment details will be handled by the payment provider, not stored by us.
8. App permissions
The app asks for a permission at the moment it is needed, and explains why. Declining one only disables that feature.
| Permission | Used for | If you decline |
|---|---|---|
| Camera | Photographing a prescription | You can still upload an existing photo or a PDF |
| Photos & files | Choosing a prescription image or PDF already on your device | You can still take a fresh photo with the camera |
| Notifications | Order updates, pharmacist replies and medicine reminders | Everything still works; you check the app for updates yourself |
The app does not request location, contacts, microphone, calendar or SMS access. Tapping a phone number opens your dialler with the number filled in — the app cannot place a call by itself. Tapping an address opens your maps app; it does not read where you are.
9. How long we keep it
- Your account — for as long as it is open. Close it and the profile, addresses, cart, wishlist, reminders, saved notifications and avatar are deleted.
- Orders, prescriptions and reviews — kept after account closure. These are pharmacy business and dispensing records that we are required to retain, and an order that has been fulfilled and paid for cannot be erased because an app account was closed. They hold a copy of the name, phone and address as they were at the time of the order.
- Prescription files — retained for the period Pakistani pharmacy record-keeping rules require, then deleted.
- Technical logs — a short period, typically weeks, then discarded.
10. Your choices and your rights
Change what we hold
Profile → Edit profile changes your name, phone and photo. Profile → Addresses adds, edits and removes delivery addresses. Notification preferences are in Profile → Notifications, and each type can be turned off on its own.
Get a copy
Most of it is already visible in the app — your orders, prescriptions and reminders. For a full copy in a portable form, email us and we will send it within 30 days.
Delete your account
Profile → Edit profile → Delete account. You will be asked to type a confirmation, because it cannot be undone. Your profile, addresses, cart, wishlist, reminders and sign-in credentials are removed immediately; your order and prescription records are retained as described in section 9.
You can also ask us to delete your account by emailing info@oldsitewp.logicaspire.com from the address on your account.
Object or complain
You can ask us to stop using your information for a particular purpose, or object to how we handle it, by contacting us. If you are not satisfied with our answer, you may complain to the relevant data-protection or consumer authority in Pakistan.
11. How we protect it
- Traffic between the app and our servers is encrypted in transit (HTTPS/TLS), and data is encrypted at rest by Google Cloud.
- Access is denied by default at the database level: every record has an explicit rule about who may read or write it, enforced on the server rather than trusted from the app.
- Prescription files are locked to their owner and to pharmacy staff.
- Staff access is a separate role that cannot be granted from inside the app; every staff change to a record is written to an audit log with who and when.
- Order totals and prices are recalculated on our servers, so they cannot be altered from a device.
No system is perfectly secure. If a breach affects your personal information we will tell you and the appropriate authority without undue delay.
12. Children
The app is intended for adults aged 18 and over. We do not knowingly create accounts for children. A parent or guardian may order on a child's behalf using their own account.
If you believe a child has created an account, contact us and we will remove it.
13. Changes to this policy
We update this policy when the app changes. The effective date at the top always reflects the current version. For a change that materially affects how we handle your information, we will tell you in the app before it takes effect. Continuing to use the app after that means you accept the updated policy.
14. Contact us
Questions about this policy, or about your information, reach a person — not a form.