Privacy Policy

Effective date: September 1, 2026
Last updated: September 1, 2026

This Privacy Policy explains how MedsGrove (“MedsGrove,” “we,” “us,” or “our”), an online store operated from Hong Kong, collects, uses, discloses, stores, and protects personal information when you visit MedsGrove.com, create an account, place an order, contact us, submit a review, or otherwise use our services.

By using our website, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, we will request it separately.

1. Information We Collect

Depending on how you use MedsGrove, we may collect the following categories of information:

Identity and contact information: name, email address, telephone number, billing address, shipping address, and country or region.
Account information: username, encrypted password, account preferences, saved addresses, and account activity.
Order information: products purchased, order value, transaction status, shipping details, returns, refunds, replacements, and customer-service history.
Payment information: payment method, transaction identifier, payment status, and limited billing details. Full card information is generally processed by payment providers and is not stored directly by MedsGrove.
Communications: emails, WhatsApp messages, customer-service enquiries, feedback, complaints, and information you provide when requesting assistance.
Reviews and user content: product reviews, ratings, names or initials, location information, and other content you choose to submit.
Wishlist and preference information: saved products, shopping preferences, and marketing choices.
Technical and usage information: IP address, browser type, device information, operating system, referring pages, pages viewed, approximate location, cookie identifiers, and interaction data.
Health-related information: information about allergies, health conditions, medicines, product reactions, or similar matters only when you voluntarily provide it during a customer-service enquiry.
Fraud and security information: information used to identify suspicious orders, misuse, chargebacks, or security threats.

Please do not send prescriptions, identification documents, full medical records, or unnecessary sensitive information unless MedsGrove specifically requests it through an authorised process.

2. How We Collect Information

We may collect information:

Directly from you when you register, order, contact us, submit a review, or update your preferences.
Automatically through cookies, pixels, log files, and similar technologies.
From payment processors, shipping providers, fraud-prevention providers, analytics providers, advertising partners, and customer-service providers.
From publicly available sources where permitted by law.

3. How We Use Information

We may use personal information to:

Create and manage customer accounts.
Process payments, orders, deliveries, refunds, and replacements.
Provide order tracking and discreet-shipping services.
Respond to questions, complaints, and customer-service requests.
Maintain wishlists and shopping preferences.
Publish verified reviews with the customer’s permission.
Improve website performance, product selection, and customer experience.
Measure advertising and understand how visitors use the website.
Send marketing communications where permitted and allow customers to unsubscribe.
Prevent fraud, abuse, unauthorised transactions, and security incidents.
Comply with tax, accounting, customs, consumer-protection, and other legal obligations.
Establish, exercise, or defend legal claims.

4. Legal Bases for Processing

Where the GDPR, UK GDPR, or similar laws apply, we process personal information using one or more of the following legal bases:

Contract: processing necessary to provide products, process orders, deliver purchases, and manage customer accounts.
Legal obligation: processing necessary for tax, accounting, consumer-protection, fraud-prevention, or regulatory requirements.
Legitimate interests: operating and protecting the website, improving services, preventing fraud, and handling customer enquiries, provided those interests do not override your rights.
Consent: marketing, non-essential cookies, advertising tracking, and certain uses of sensitive information where consent is legally required.
Legal claims and substantial public interests: limited processing of sensitive information where permitted by applicable law.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. Health-Related and Sensitive Information

MedsGrove only receives health-related information when customers voluntarily provide it during customer-service enquiries. We use it only to respond to the enquiry, investigate a reported product issue, meet a legal obligation, or protect the customer’s safety.

Providing health-related information does not create a doctor–patient, pharmacist–patient, or other healthcare-professional relationship. MedsGrove does not create formal medical records and does not provide diagnosis, treatment, prescriptions, or personalised medical advice.

6. How We Disclose Information

We may disclose information to the following categories of recipients only where reasonably necessary:

Website hosting, cloud-storage, and technical service providers.
Payment processors, banks, and transaction providers.
Delivery, warehouse, fulfilment, customs, and logistics providers.
Analytics, advertising, and marketing providers.
Customer-service, email, and communications providers.
Fraud-prevention, cybersecurity, and identity-verification providers.
Professional advisers, including accountants, insurers, auditors, and legal advisers.
Government authorities, courts, customs agencies, regulators, or law-enforcement bodies where legally required.
A buyer, investor, or successor in connection with a merger, sale, restructuring, or transfer of business assets.

We do not require customers to provide full payment-card details directly to customer support. Payments should only be completed through the authorised checkout process.

7. Advertising, Analytics, and Sale or Sharing

MedsGrove may use analytics and advertising technologies to measure visits, understand conversions, prevent fraud, and display relevant advertising. These technologies may disclose device, browser, cookie, and website-activity information to advertising or analytics providers.

MedsGrove does not sell personal information for money. Certain advertising disclosures may, however, be treated as a “sale,” “sharing,” or use for targeted advertising under some privacy laws.

Where applicable, you may opt out through the website’s cookie preference tool or by contacting us. Where legally required and technically supported, we will also process recognised opt-out preference signals.

8. Cookies

We use necessary, preference, analytics, functionality, and advertising cookies. Non-essential cookies are disabled when required by law until you provide consent. You can withdraw consent or change your choices through the cookie preference tool.

For more information, please read our Cookie Policy.

9. International Data Transfers

MedsGrove operates from Hong Kong and serves customers internationally. Your information may be processed in Hong Kong, the United States, the United Kingdom, the European Economic Area, or other countries where our providers operate.

Where required, we use contractual protections or other legally recognised safeguards for international transfers. Data-protection standards may differ between countries.

10. Data Retention

We retain information only for as long as reasonably necessary for the purpose for which it was collected, including:

Account information while the account remains active and for a reasonable period afterward.
Order and transaction records for the period required by tax, accounting, fraud-prevention, and consumer laws.
Customer-service communications for as long as needed to resolve the enquiry and maintain reasonable business records.
Health-related information only for as long as necessary to respond to the relevant enquiry or meet legal and safety obligations.
Marketing information until you unsubscribe or withdraw consent.
Cookie preferences for up to 12 months, unless renewed or deleted sooner.

Information may be retained longer when required for disputes, investigations, chargebacks, security incidents, or legal claims.

11. Your Privacy Rights

Depending on where you live, you may have the right to:

Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of personal information, subject to legal exceptions.
Restrict or object to certain processing.
Receive certain information in a portable format.
Withdraw consent.
Object to direct marketing.
Opt out of sale, sharing, or targeted advertising where applicable.
Limit certain uses of sensitive personal information where applicable.
Not receive discriminatory treatment for exercising a privacy right.
Complain to the relevant privacy or data-protection authority.

We may request reasonable information to verify your identity before completing a privacy request. An authorised agent may submit a request where permitted by law, but we may require evidence of that authority.

12. California Privacy Notice

California residents may have rights to know, access, delete, and correct personal information; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive equal service when exercising their rights.

In the preceding 12 months, MedsGrove may have collected the categories described in Section 1 and disclosed them to the service-provider categories described in Section 6 for business purposes.

To submit a California privacy request or targeted-advertising opt-out request, contact us using the details below or use the website’s cookie preference tool.

13. European and United Kingdom Residents

If you are located in the European Economic Area or United Kingdom, you may exercise rights of access, correction, erasure, restriction, portability, objection, and withdrawal of consent. You may also complain to the data-protection authority in the country where you live or work.

Nothing in this Privacy Policy limits rights that cannot legally be waived.

14. Hong Kong Privacy Rights

Subject to the Hong Kong Personal Data (Privacy) Ordinance, you may request access to and correction of personal data held by MedsGrove. We may take reasonable steps to verify the request and may charge a fee where legally permitted.

15. Marketing Communications

You may unsubscribe from marketing emails using the unsubscribe link in the message or by contacting us. Transactional messages concerning accounts, orders, security, deliveries, or policy updates may still be sent when necessary.

16. Security

We use reasonable administrative, organisational, and technical measures designed to protect personal information. No website, transmission method, or storage system is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your password and notifying us if you believe your account has been compromised.

17. Children

MedsGrove is intended only for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided information, please contact us.

18. Third-Party Websites

Our website may link to third-party websites. Their privacy practices are governed by their own policies, and MedsGrove is not responsible for their content or privacy practices.

19. Policy Changes

We may update this Privacy Policy when our services, technology, or legal obligations change. The updated date will appear at the top of this page. Material changes may also be communicated through the website or by email where appropriate.

20. Contact Us

For privacy questions or requests, contact:

MedsGrove
Hong Kong
Email: support@medsgrove.com
WhatsApp: +1 555 123 4567