Privacy Policy

We Trust Pharmacy is operated by one individual seller. Data controller contact details:

• Email: support@wetrustpharmacy.com
• Phone: +91 93210 85185
• Address: Kenorita Garment Hub, Caves Rd, Jogeshwari East, Mumbai 400060

Only what an order needs:

• Contact details: your name, email address and phone number.
• Delivery address: street, city, state and PIN or ZIP code.
• Order details: what you bought, the quantity, the total, the payment method you chose and any note you added.
• Payment reference: the UTR or transaction reference from your bank transfer, if you send me one, so I can match your payment to your order.
• Country: worked out from your connection to decide whether to show you rupees or dollars.
• Reward points: a running list of the points each order earned and spent, kept against your email address. It holds the points, the order number and the date — no name, no address, nothing about what you bought.
• Sign in codes: if you ask to see your orders, a six digit code is emailed to you. Only a scrambled form of it is stored, never the code itself, and it is dead ten minutes later. There is no account, no password and no profile — proving you can read mail at an address is the whole of it.

Where a payment provider is involved, that transaction is handled entirely by the provider under its own privacy policy.

• To perform the contract: packing, shipping and supporting your order needs your address and contact details.
• Legitimate interest: keeping a basic record of orders so I can handle a return, a duplicate payment or a dispute later.
• Consent: anything optional, such as a note you choose to add, or getting in touch about a product you asked about.

Marketing email is opt in. There is one way to ask for it: the box at checkout. In India it arrives empty and stays empty unless you tick it. In the United States it arrives already ticked, which that country’s rules allow, so untick it and nothing is sent. Either way the box is next to the button, in plain words, and ordering without touching it does not subscribe you.

There is one kind of marketing email: a refill reminder. It is timed off the size of the pack you bought — a bigger pack waits longer — and nothing else. It is not a guess about how often you take anything, I have no way of knowing that, and it is never medical advice. At most one arrives every 30 days.

Every one carries an unsubscribe link, and most email apps also show their own unsubscribe button at the top of it. Either stops them on the spot. So does one message to support@wetrustpharmacy.com. Once you are off, you stay off: a later order will not quietly put you back on, even if its box was ticked.

Order updates and sign in codes are not marketing. Those are about something you bought or asked for and are sent whether or not you want offers.

One other email is sent without asking: if you have reward points about to lapse, you get one warning about 30 days beforehand. That is not an offer — it is telling you that something of yours is about to disappear, and keeping quiet about it to respect a box you did not tick would mean I kept the value and you never found out. It carries an unsubscribe link like everything else, and if you are on the unsubscribe list you will not get it.

• Couriers: your name, address and phone number go on the label. Without this a parcel cannot be delivered.
• Web3Forms: the service that delivers your order details to my inbox as an email.
• Vercel: hosts this website and processes requests to it.
• No payment provider at all: there is no card processor, no wallet and no payment gateway in this shop. You transfer to my bank, or you pay the courier in cash. Nobody else sees your payment, because nobody else is involved in it.
• Google: the Google Ads tag records page views and, when an order is placed, its value and order number, so I can see which adverts pay for themselves. Google also receives what any site visit sends it, such as your IP address and browser. It never gets your name, address or phone number.
• Google Customer Reviews: the order confirmation page offers you Google’s own review survey. To put that offer in front of you, the page sends Google your email address, in clear text and not scrambled, along with your order number, the country the parcel is going to and the date it is expected. Google emails you once, after that date, and only if you accept on that screen. It is not told your name, your address, your phone number, what you ordered or what you paid. If you would rather it had none of that, decline the offer and nothing further happens.

• Meta: the Meta pixel records page views and, when an order is placed, its value and currency. A second copy of that purchase is sent from my server, and it carries your email, phone number, name, city, state, postcode and country hashed — scrambled one way, so Meta can match you to an account it already has but cannot read any of it back out. It never gets your street address, what you bought, or your note.

That is the entire list. The two advertising platforms above get exactly what is described there and nothing else. Nothing goes to a data broker, and I never sell your data to anybody.

If you would rather Meta and Google received nothing at all, a tracker blocker stops both, and the shop works exactly the same without them.

Two pieces of browser storage are functional:

• Region cookie: remembers whether to show you rupees or dollars. It stores the letters IN or US, nothing else.
• Cart storage: keeps your basket in your own browser between visits. It never leaves your device until you place an order.

Two advertising platforms also set their own cookies, which is how an order gets matched back to the advert that led to it: Google Ads and the Meta pixel. Google’s review survey sets its own on the confirmation page. All three are described under “Who I share it with” above. Nothing is shared with a data broker, and clearing your browser data removes all of it from your device.

• Order records: kept for 3 years, so returns, payment queries and disputes can be checked.
• Support emails: kept for 2 years.
• Sign in codes: usable for 10 minutes, and the rows are cleared out monthly.
• Reward points: the list of what was earned and spent is kept as long as the orders it refers to, so a balance can always be explained. Points themselves lapse after 12 months with no order.
• Unsubscribe list: kept indefinitely, on purpose. Forgetting that you asked me to stop is how you would start hearing from me again.
• Region cookie: expires after 12 months.
• Cart storage: stays until you clear it or empty the cart.
• Google Ads cookies: kept to Google’s own schedule, which you can review in its privacy policy.

Email me and I will act on any of these within 30 days:

• A copy of everything I hold about you.
• Correction of anything wrong.
• Deletion of your details, once no order is still open and no return window is running.
• An objection to any particular use of your data.

Write to support@wetrustpharmacy.com with the subject line Privacy request. I will ask one question to confirm it is really you, then act on it.

The site runs entirely over HTTPS. Order details reach me as email and are not stored in any public database. It is a small operation, so I keep the amount of data I hold small on purpose. That is the strongest protection I can offer.

This shop is not intended for anyone under 18, and I do not knowingly collect data from children. If you believe a child has sent me their details, email me and I will delete them.

If this policy changes, the date at the top of the page changes with it. Material changes will also be mentioned on the home page. The current version always lives at this URL.