Privacy Policy

Effective Date: June 2021

Last Updated: February 2026

Qurist (operated by Hemp Health Private Limited), hereinafter referred to as “Qurist,” “We,” “Us,” or “Our,” is committed to respecting the privacy of every person who shares information with us.

This Privacy Policy describes how we collect, store, process, disclosure, and transfer your Personal Information when you use our website www.qurist.in (the “Site”) or avail of any services, including the purchase of CBD/hemp products and online medical consultations (collectively, the “Services”).

By accessing our Site and using our Services, you verify that you are competent to contract under the Indian Contract Act, 1872, and you consent to the terms outlined in this policy.

Scope and Consent

This policy complies with the Information Technology Act, 2000, the SPDI Rules 2011, and prepares for the Digital Personal Data Protection (DPDP) Act.

By providing your information (including medical records for prescription verification), you consent to the collection and use of the information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.

Information We Collect

To provide holistic wellness solutions and compliant medical cannabis products, we collect two types of information: Personally Identifiable Information (PII) and Non-Personally Identifiable Information (Non-PII).

A. Personally Identifiable Information (PII)

This is information that identifies you as an individual. We collect this only when you voluntarily provide it:

  • Identity Data: Name, date of birth, age, and gender.
  • Contact Data: Delivery address, billing address, email address, and mobile number.
  • Health & Medical Data (Sensitive PII):
    • Medical history, existing health conditions, and symptoms.
    • Prescriptions: Copies of prescriptions uploaded for the purchase of Schedule E-1 drugs (Medical Cannabis/Vijaya).
    • Notes from consultations with third-party practitioners via our platform.
  • Financial Data: Payment instrument information (processed securely by third-party gateways; we do not store CVVs).

B. Non-Personally Identifiable Information (Non-PII)

We automatically collect technical data to improve your experience:

  • Device Information: IP address, browser type, device model, and operating system.
  • Usage Data: Pages visited, time spent on the site, and referring websites.
  • Cookies: Small text files stored on your device to remember preferences and analyze traffic.

How We Use Your Information

We use your data based on lawful grounds such as Contractual Necessity, Consent, and Legitimate Business Interests.

Order Processing: To process payments, deliver products, and manage billing, invoicing, and fulfillment of your requests.

Medical Compliance: To verify your age and validate prescriptions for medical cannabis products as strictly required by the Drugs and Cosmetics Act and other Applicable Laws.

Tele-Consultations: To facilitate the "Virtual Clinic" or medical consultations and second opinions offered by independent Ayurvedic practitioners to prescribe or recommend dosage.

Communication: To send order updates, transactional messages, and notify you regarding administrative changes to our terms, conditions, or policies.

Personalization: To suggest wellness regimens or products based on your history, subject to your explicit consent.

Marketing: To send messages including but not limited to emailers, SMS, and promotional content regarding healthcare packages and educational content about CBD/hemp (you may opt-out of these at any time).

Analytical Purposes: For research, development, and betterment of services in an anonymous or de-identified form to understand User experience and improve health delivery outcomes.

Security: To detect fraud, abuse, and security incidents.

Sharing and Disclosure of Information

Qurist maintains strict confidentiality. We do not sell your data. We share information only in the following scenarios:

  1. Medical Practitioners: Your health profile and medical history are only with our in-house doctors strictly for the purpose of consultation and issuing prescriptions.
  2. Service Providers: We share necessary data with trusted third parties for:
  • Logistics: Delivery partners to ship your order.
  • Payments: Secure payment gateways.
  • IT & Infrastructure: Web hosting and data analysis.
  1. Legal Requirements: We may disclose information if required by law, court order, or government authority (e.g., to comply with narcotics or drug control regulations).
  2. Business Transfers: In the event of a merger or acquisition, user data may be transferred as a business asset (you will be notified).

Medical Cannabis & Prescriptions (Disclaimer)

Qurist facilitates the sale of Ayurvedic medicines containing Vijaya (Cannabis Leaf), which falls under Schedule E-1.

  • Strict Verification: Any prescription uploaded constitutes Sensitive Personal Data. It is viewed only by our internal compliance team and the consulting doctor.
  • Minors: Our Services are strictly for individuals aged 18+. We do not knowingly collect data from minors. If we discover a minor has created an account, we will delete the data immediately.

Data Rights (Your Control)

In alignment with evolving data protection standards (including GDPR and Indian DPDP principles), you have the following rights:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request to correct inaccurate or incomplete data.
  • Right to Erasure (Right to be Forgotten): You may request the deletion of your account and data, provided it is not required to be retained by law (e.g., prescription records must often be kept for statutory periods).
  • Right to Withdraw Consent: You may withdraw consent for marketing or processing at any time.

To exercise these rights, email us at [hello@qurist.in].

Third-Party Links

Our Site may contain links to other websites (e.g., educational blogs, partner brands). This Privacy Policy applies only to Qurist. We are not responsible for the privacy practices of other sites.

No Absolute Security

Qurist has implemented commercially reasonable security measures to safeguard the personal information collected from Users. Notwithstanding these efforts, the User acknowledges and accepts that no security system is entirely immune to vulnerabilities. Qurist expressly disclaims any warranties or guarantees of absolute security. The Platform and its systems may remain susceptible to unauthorized access, hacking, data loss, or other forms of security breaches.

User Responsibility

The User further acknowledges and agrees that it is their sole responsibility to take appropriate precautions to protect their personal information. Qurist shall not be held liable for any unauthorized access, data breaches, hacking incidents, or data loss, whether arising directly or indirectly. The User agrees to access and use the Platform entirely at their own risk and shall bear full responsibility for any consequences arising therefrom.

Updates to Policy

We may update this Privacy Policy to reflect changes in our practices or legal obligations. The "Last Updated" date at the top of this page will indicate the latest revision. We encourage you to review this page periodically.

If you have any questions regarding this Privacy Policy, please contact us at:

Email: hello@qurist.in

Address: Hemp Health Private Limited, WeWork Platina Tower, Sector 28, Gurgaon, Gurugram, Haryana - 122002