Last updated: 12 November 2026

This policy explains how MediNest Pte. Ltd. (UEN 202611222H) (“MediNest”, “we”, “us” or “our”) collects, uses, discloses and protects your personal data when you use the MediNest online pharmacy and related services (the “Service”). We comply with the Personal Data Protection Act 2012 of Singapore (“PDPA”). By using the Service, you agree to the collection, use and disclosure of your personal data as described in this policy.

1. Personal data we collect

We collect personal data that you give us and that is generated when you use the Service, including:

• Identity and contact details: name, email address, mobile number, delivery and billing addresses.
• Account details: login details, saved addresses, preferences and order history.
• Order and payment details: products bought, amounts, vouchers used, delivery or pickup details. Card details are handled by our payment provider; we receive only limited information such as the card brand and last four digits.
• Health-related information: the products you buy and anything you tell our pharmacist may reveal information about your health. We treat it as sensitive and use it only to supply your order safely and to answer your questions.
• Communications: messages, reviews, feedback and support requests you send us.
• Technical data: IP address, device and browser type, pages visited and cookie identifiers.

We do not ask for your NRIC or other national identification number, except where the law requires it (for example, photo ID when you collect an order).

2. How we use your personal data

• to create and manage your account;
• to process, deliver or prepare for pickup, and provide support for your orders, including pharmacist checks, payments, refunds and order updates;
• to verify transactions and prevent fraud and misuse of the Service;
• to respond to your enquiries, feedback and complaints;
• to improve our products, website and services;
• to send you marketing messages about our products and promotions, where you have consented to receive them;
• to comply with legal and regulatory obligations, including pharmacy, tax and accounting requirements.

3. Consent and marketing

We collect, use and disclose your personal data with your consent or where the PDPA otherwise permits. We will only send you marketing messages if you have opted in, and we comply with the Do Not Call provisions of the PDPA. We do not use health-related information for marketing. You may unsubscribe at any time using the link in our emails, in your account’s privacy settings, or by contacting us. You may also withdraw your consent to our use of your personal data by contacting our Data Protection Officer. If you withdraw consent, we may not be able to continue providing some parts of the Service, and we will tell you what the consequences are before acting on your request.

4. Disclosure of personal data

We do not sell your personal data. We share it only as needed for the purposes above with:

• payment service providers that process your card or PayNow payments;
• delivery partners and our pharmacy staff who deliver or hand over your order;
• IT, hosting, email and customer support providers who operate the Service on our behalf;
• professional advisers, auditors, and government or regulatory authorities where required by law.

These parties may only use your personal data for the purposes we specify and must protect it.

5. Cookies

We use essential cookies to run the website, such as keeping you logged in and remembering your cart. With your consent, we also use analytics and marketing cookies. You can change your choice at any time through “Privacy & Cookie Preferences” at the bottom of every page, or through your browser settings.

6. Transfers outside Singapore

Some of our service providers may store or process personal data outside Singapore. When this happens, we take steps to ensure that your personal data receives a standard of protection comparable to that under the PDPA.

7. Protection and retention

We use reasonable administrative, physical and technical safeguards, such as encrypted connections and access controls, to protect your personal data; access to health-related information is limited to the staff who need it. We keep your personal data only for as long as it is needed for the purposes for which it was collected, or as required by law (for example, transaction records kept for tax purposes), and then delete or anonymise it. If a data breach occurs that is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as required by the PDPA.

8. Access and correction

You may ask for access to the personal data we hold about you and information on how it has been used or disclosed in the past year, or ask us to correct it. You can update most details directly in your account. For other requests, contact our Data Protection Officer. We will respond as soon as reasonably possible and may charge a reasonable fee for an access request, which we will tell you about in advance.

9. Children

The Service is not intended for children under 13, and we do not knowingly collect their personal data without the consent of a parent or guardian.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page, with the date it was last updated.

11. Contact our Data Protection Officer

Data Protection Officer, MediNest Pte. Ltd.
60 Paya Lebar Road, #02-15, Paya Lebar Square, Singapore 409051
Email: [email protected]
Phone: +65 6100 2200