MENDINE PHARMACEUTICALS PRIVATE LIMITED

Website Policy Document

Privacy Policy |  Return & Refund Policy  |  Terms of Service  |  Shipping Policy  |  Legal Notice

Last Updated: April 1, 2026

Mendine Pharmaceuticals Private Limited operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience.

This website is powered by Shopify, which enables us to provide our online store and related services to you.

DPDPA 2023 — Data Fiduciary Notice

Mendine Pharmaceuticals Private Limited (Address: 36 A&B, Alipore Road, Kolkata, West Bengal – 700027, India; Email: info@mendine.in) is the Data Fiduciary within the meaning of the Digital Personal Data Protection Act, 2023 in respect of the personal data collected through this website.

 

This Privacy Policy explains how Mendine Pharmaceuticals Private Limited collects, uses, stores, shares, and protects your personal data when you visit our website, browse our products, create an account, make a purchase, contact us, subscribe to our communications, or otherwise interact with our services.

Consent — DPDPA S.6

Your continued use of this website DOES NOT constitute consent for the processing of your personal data. We will request your free, specific, informed, and unambiguous consent at the point of data collection (e.g., during account creation or checkout) through an explicit opt-in mechanism. You may withdraw consent at any time by contacting us at info@mendine.in, subject to applicable legal obligations.

 

When you interact with our website or services, we may collect or process the following categories of personal data, depending on how you use the website:

Contact Information

This may include your name, billing address, shipping address, email address, and phone number.

Account Information

This may include your username, password (stored in encrypted form), account preferences, saved addresses, and account settings.

Order and Transaction Information

This may include products you view, add to cart, add to wishlist, purchase, return, exchange, or cancel, along with order history, invoice details, and delivery-related information.

Payment Information

Payments are processed securely through Shopify, payment gateways, banks, or other authorised payment service providers. Mendine Pharmaceuticals Private Limited does not store your complete credit card, debit card, UPI, net banking, or payment account details on its own servers. Payment-related information may include transaction status, payment confirmation, payment method, and other details required to process your order securely.

Communication Information

This may include information you provide when you contact us for customer support, product queries, complaints, feedback, order issues, return requests, or other service-related communication.

Device and Technical Information

This may include your IP address, browser type, device type, operating system, network information, cookies, pixels, identifiers, and information about how you access and use our website.

Usage Information

This may include pages visited, products viewed, search activity, cart activity, wishlist activity, time spent on the website, links clicked, and other interactions with our website.

We may collect your personal data from the following sources:

Directly From You

We collect information when you create an account, place an order, fill out a form, subscribe to updates, contact us, submit a review, participate in a quiz, or otherwise provide information to us.

Automatically Through the Website

We may collect certain information automatically through cookies, pixels, analytics tools, tracking technologies, and similar technologies when you visit or use our website. Please see Section 6 (Cookies) for details.

From Shopify and Service Providers

As our website is powered by Shopify, Shopify may collect and process information required to operate the website, process orders, manage checkout, support payments, improve store performance, and provide related services. We may also receive information from service providers such as payment gateways, logistics partners, customer support tools, marketing platforms, analytics services, wishlist apps, and review apps.

From Third-Party Partners

We may receive information from third-party platforms or partners if you interact with us through social media, advertisements, login integrations, or marketing campaigns.

Purpose Limitation (DPDPA S.4)

Personal data is processed only for the specific, clear, and lawful purposes listed below. We do not use personal data for any purpose that is incompatible with the purpose for which it was originally collected.

 

We may use your personal data for the following purposes:

To Provide and Improve Our Services

We use your information to operate our website, process orders, manage payments, arrange shipping, deliver products, process returns or exchanges, manage your account, remember preferences, provide customer support, and improve your shopping experience.

To Process Orders and Payments

We use your information to confirm orders, process payments, generate invoices, verify transactions, prevent payment fraud, arrange delivery, and handle order-related communication.

To Communicate With You

We may use your contact information to respond to queries, send order updates, delivery updates, payment confirmations, return or exchange updates, account-related notifications, and customer service responses.

For Marketing and Promotions

With your prior, free, and explicit consent as required under DPDPA 2023 and TRAI regulations, we may use your information to send promotional messages, product updates, offers, or newsletters through email, SMS, WhatsApp, or other channels. You may opt out at any time. Even after opting out, we may still send non-promotional messages related to your orders, account, payments, or legal obligations.

For Personalisation

We may use your browsing activity, order history, and preferences to recommend products and improve product discovery.

For Analytics and Website Improvement

We may use analytics tools to understand website traffic, customer behaviour, product performance, and technical issues so that we can improve our services.

For Security and Fraud Prevention

We use your information to protect our website, prevent fraudulent transactions, detect unauthorised access, and maintain a safe shopping environment.

For Legal and Compliance Purposes

We may use your information to comply with applicable laws, taxation requirements, accounting obligations, legal notices, regulatory requests, dispute resolution, and enforcement of our terms and policies.

We may share your personal data with third parties only for legitimate, specific, and lawful business, operational, legal, or service-related purposes. We do not sell your personal data.

Such third parties may include:

•       Shopify, which hosts and powers our online store;

•       payment gateways and financial service providers;

•       logistics, courier, and delivery partners;

•       order fulfilment and warehousing partners;

•       customer support service providers;

•       email, SMS, WhatsApp, and marketing service providers (with your consent where required);

•       analytics and advertising platforms;

•       wishlist, review, quiz, loyalty, or other Shopify app providers used on our website;

•       professional advisors, auditors, consultants, or legal advisors;

•       government authorities, regulators, courts, or law enforcement agencies where required by law.

 

No Sale of Data

We do not sell your personal data in any manner. Certain privacy laws may characterise some advertising or analytics activities as 'sharing'. Where applicable, you may have the right to opt out of such activities by contacting us.

Our online store is hosted by Shopify. When you visit our website, create an account, place an order, or complete checkout, your information may be collected and processed by Shopify to operate the store, process transactions, improve services, detect fraud, and provide platform-related features. Information submitted through our website may be transmitted to Shopify and to third-party service providers who may be located in countries other than your country of residence. To understand how Shopify processes personal data, please review Shopify's own privacy policy on Shopify's official website.

Cookie Policy (CERT-In / DPDPA)

We use the following categories of cookies on our website. You may manage your consent for non-essential cookies through the cookie preference centre available on our website:  (a) Strictly Necessary Cookies: Essential for the website to function (checkout, cart, login). Cannot be disabled. (b) Functional Cookies: Remember your preferences and improve your experience. (c) Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics). Used only with consent. (d) Marketing/Advertising Cookies: Used to deliver relevant advertisements. Used only with consent.

 

Our website uses cookies, pixels, tags, and similar technologies to operate properly, remember your preferences, improve performance, analyse traffic, personalise content, and support marketing or advertising activities. You may manage or disable cookies through your browser settings or our cookie preference centre. However, disabling certain cookies may affect website functionality, checkout performance, or your ability to use some features.

Our website may contain links to third-party websites, social media platforms, payment pages, apps, or other online services that are not operated or controlled by Mendine Pharmaceuticals Private Limited. We are not responsible for the privacy practices, security, content, accuracy, or policies of such third-party websites. We recommend that you review the privacy policies and terms of those platforms before using them or sharing personal information.

Our website and services are not intended for persons below 18 years of age. We do not knowingly collect personal data from minors. If a parent or guardian believes that a child has provided personal data to us, they may contact us at info@mendine.in and we will take appropriate steps to delete such information in compliance with applicable law and DPDPA 2023.

We take reasonable technical, administrative, and organisational measures to protect your personal data from unauthorised access, misuse, loss, alteration, or disclosure, as required under Section 8(5) of the DPDPA 2023. However, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the confidentiality of your account login details. Please do not share your password, OTP, or account access information with anyone.

We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including order processing, customer support, legal compliance, accounting, taxation, fraud prevention, dispute resolution, and business recordkeeping, and in any event no longer than required by applicable law. When personal data is no longer required, we will delete, anonymise, or securely archive it.

10A. Personal Data Breach Notification

Data Breach Notification (DPDPA S.8(6))

In the event of a personal data breach that is likely to affect your rights or interests, we will notify you and the Data Protection Board of India within 72 hours of becoming aware of such breach, as required under Section 8(6) of the Digital Personal Data Protection Act, 2023. The notification will describe the nature of the breach, data affected, likely consequences, and measures taken or proposed to address it.

DPDPA Rights — S.11 to S.14

The following rights are available to you as a Data Principal under the Digital Personal Data Protection Act, 2023. Requests should be sent to info@mendine.in with the subject line 'Data Rights Request'. We will acknowledge your request within 48 hours and respond within 30 days.

 

Right to Access (DPDPA S.11)

You may request a summary of the personal data we hold about you and information about the processing activities undertaken with such data.

Right to Correction and Erasure (DPDPA S.12)

You may request correction of inaccurate or incomplete personal data, or erasure of personal data that is no longer necessary for the purpose for which it was collected, subject to legal, contractual, or legitimate business requirements.

Right to Grievance Redressal (DPDPA S.13)

You may raise a grievance with our Grievance Officer (details in Section 15). If you are not satisfied with our response, you may approach the Data Protection Board of India.

Right to Nominate (DPDPA S.14)

You have the right to nominate another individual who may exercise your data rights under the DPDPA in the event of your death or incapacity. To register a nominee, please contact us at info@mendine.in.

 

Right to Withdraw Consent

Where we rely on your consent to process personal data, you may withdraw such consent at any time by contacting us at info@mendine.in. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Right to Opt Out of Marketing

You may opt out of receiving promotional emails, SMS, WhatsApp messages, or other marketing communication at any time by using the unsubscribe mechanism in the communication or by contacting us.

DPDPA S.16 — Cross-Border Transfer

Under the DPDPA 2023, personal data may be transferred outside India only to countries that have been notified by the Central Government of India as permissible destinations for data transfer. We will ensure that all cross-border transfers of your personal data comply with the DPDPA 2023 and any rules or notifications issued thereunder. Transfers to Shopify's servers and other service providers are subject to applicable data protection safeguards.

 

As our website is powered by Shopify and may use third-party service providers, your personal data may be transferred, stored, or processed outside India, including in countries where Shopify, payment processors, logistics providers, analytics services, or other partners operate, subject to compliance with DPDPA 2023.

Our website may use third-party Shopify apps or tools for features such as product reviews, wishlist, customer accounts, quizzes, marketing, analytics, or customer engagement. When you use these features, the relevant app provider may process certain information required to provide the feature. Such providers process information in accordance with their own privacy policies and contractual obligations with us.

We may update this Privacy Policy from time to time to reflect changes in our business practices, website features, legal requirements, or operational needs. When we update this Privacy Policy, we will revise the 'Last updated' date at the top of this page. For material changes, we will endeavour to notify you via email or a prominent notice on our website. Continued use of our website after changes are posted means that you acknowledge the updated Privacy Policy.

Grievance Officer — IT Act S.5A / DPDPA / E-Commerce Rules 2020

A Grievance Officer has been designated as required under the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Consumer Protection (E-Commerce) Rules, 2020. Grievances will be acknowledged within 48 hours and resolved within 30 days.

 

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact:

 

Mendine Pharmaceuticals Private Limited

Designation of Grievance Officer: To be appointed

Address: 36 A&B, Alipore Road, Kolkata, West Bengal – 700027, India

Email: info@mendine.in

Phone: (033) 2479-7516 / 1800 4191 417

Response Timeline: Acknowledgement within 48 hours; resolution within 30 days.

Please mention 'Privacy Request' in the subject line of your email.

Reviewed and Revised: June 2026 | Indian Digital & Privacy Law Compliance Review