Overview
This notice explains how Debraj Pharma collects, uses and safeguards the information you share with us, including protected health information (PHI) such as prescriptions and prescriber details.
What we collect
- Identity and contact details — name, date of birth, phone, email, delivery address.
- Prescription information — the prescription image or PDF you upload, prescriber name, NPI/DEA identifiers, issue date and refill count.
- Order records — the medications dispensed to you and the status history of each order.
- Technical data — IP address, browser, device type and pages visited, used for security and to understand site usage.
How prescription files are stored
Prescription uploads are written to private server storage that is not reachable from the public web. Files are renamed on upload, access requires an authenticated staff session, and every single access is written to an audit log recording who opened the file and when.
Who we share information with
We share information only where it is necessary to dispense your medication or where the law requires it: with the pharmacist reviewing your prescription, with the courier delivering your order, with your prescriber when clarification is needed, and with regulators or law enforcement when we are legally compelled.
We do not sell your information, and we do not share it with advertisers.
Your rights
You may request a copy of the information we hold about you, ask us to correct it, or ask about our disclosures. Contact us using the details on our contact page.
Retention
Prescription and dispensing records are retained for the period required by federal and state pharmacy law, which is generally a minimum of two years and longer for controlled substances.
Changes
We will post any change to this notice on this page with a revised effective date.
Last updated August 12, 2026.