Last updated
Last updated: May 2026. This policy explains what data MedCare Surgical collects, how we use it, and the rights you have over it. We follow plain-language principles: collect only what we need, use it only for what we said we would, and keep it safe.
1. What we collect
We collect the information needed to fulfil your order and improve your experience on MedCare Surgical. That includes your name, email address, shipping and billing address, phone number, and the items you order. Payment details (card number, CVV) are processed by our payment provider and are never stored on our servers.
If you create an account, we also store a one-way bcrypt hash of your password and any addresses you save. If you sign up for our newsletter, we keep your email and the date you subscribed.
For analytics, we record anonymised events such as pages viewed, time on page, and the country your visit came from. We do not record passwords, payment fields, or any free-text you type into forms.
2. How we use it
- To process your orders, payments, and returns.
- To send you order confirmations, shipping updates, and delivery notifications.
- To answer your messages to our customer care team.
- To send marketing emails, only when you have opted in. Every email has a one-click unsubscribe link.
- To detect and prevent fraud, abuse, and security incidents.
- To meet legal obligations such as tax invoicing and law-enforcement requests.
3. Cookies and similar technologies
We use a small number of cookies. The essential ones power the cart, checkout, and login. Optional ones help us understand which pages are useful and which need work. You can disable optional cookies at any time. See our Cookie Policy for the full list.
4. Who we share it with
We do not sell your data. We share information only with the third-party services we need to operate, and only the minimum needed for them to do their job. Today that includes:
- Payment processors (eSewa, Khalti, Fonepay, and card networks).
- Shipping carriers, for the address on the package.
- Our email service provider, for transactional and marketing email.
- Cloud hosting and security providers, for keeping the site running and safe.
If MedCare Surgical is ever acquired or merges with another company, your data may be transferred as part of that transaction. You will be notified by email if that ever happens.
5. Your rights
You can ask us at any time to:
- Send you a copy of the data we hold about you.
- Correct anything that is inaccurate.
- Delete your account and the personal data attached to it. Note: we may keep order records for tax and legal reasons.
- Export your data in a portable format.
- Stop sending you marketing email.
Write to support@medcaresurgical.com and we will respond within 30 days.
6. How long we keep it
Account profile data: until you ask us to delete it. Order records: 7 years, to satisfy tax law. Marketing-list data: until you unsubscribe, then we delete it within 30 days. Anonymised analytics: 26 months.
7. Security
All traffic to and from MedCare Surgical is encrypted with TLS. Passwords are stored as bcrypt hashes; we never see them in clear text. Payment data is handled exclusively by PCI-DSS compliant providers. Internal access to customer records is limited to staff who need it for their job and is logged. We run regular reviews and patch promptly when issues are reported.
8. Children
MedCare Surgical is intended for adults and for healthcare organisations. We do not knowingly collect data from anyone under 18. If you believe we have, write to support@medcaresurgical.com and we will delete it.
9. Changes to this policy
We update this policy when our practices change. The date at the top of the page reflects the most recent revision. Material changes will be communicated by email to registered customers at least 14 days before they take effect.
10. Contact
Questions or requests? Write to support@medcaresurgical.com or use our contact form. We read every message.