Privacy Policy

This policy explains what personal information Natsay Myanmar collects on natsaymyanmar.com, why we use it, and the choices you have. It covers browsing, accounts, checkout, delivery, payment proofs, and customer support.

Personal information means information that identifies you or can reasonably be linked to you, such as your name, phone number, delivery address, or order history.

Orders are also covered by our Terms and Conditions.

We handle customer information for a healthcare shop operating in Myanmar, with these rules in mind:

• Law Protecting the Privacy and Security of Citizens (2017). This law protects the privacy of personal affairs and communications. We keep your account, messages, and orders confidential, and we do not disclose them except as this policy describes.
• Consumer Protection Law (2019). Businesses that sell online must deal fairly with consumers and give clear information about who they are buying from. This policy is part of that disclosure.
• Electronic Transactions Law. Electronic records of your orders and account can be used as records of the transaction. We keep them so they stay reliable and available for support, refunds, and lawful requests.
• National Drug Law (1992) and FDA rules. Supplying medicines can require us to keep a limited record of what was supplied, and to whom, so the sale stays within pharmacy and drug control rules.
• Cybersecurity Law (2025). Where that law applies to this website as a digital service, we secure account and order information and use it only for the purposes in this policy.

We do not sell your personal information.

Account. Username, Myanmar phone number, and password. The password is stored in a protected form. We send a one-time code to your phone when you register or reset a password. Email is collected only if you choose to provide it.

Addresses and orders. First and last name, province, township or zone, street address, phone number, and email on the billing or delivery address. We also keep the products, quantities, prices, coupons, delivery fees, and status of each order, and the items you save to a wishlist.

Payment. The method you choose: cash on delivery, KBZ Pay, Wave Pay, or Aya Pay. For wallet payments, we store the payment-proof image you upload. We do not collect your wallet PIN, password, or payment-app login.

Support and site operation. Messages you send us, a login session so you stay signed in, and information stored in your browser so the shop works between pages. Hosting logs may include an IP address and browser type, used to keep the site secure and available.

An order can show that you bought a particular medicine. We treat the contents of an order as confidential. We use them to fulfil the order, handle a return or a safety issue, and meet record-keeping duties. We do not use purchase history for unrelated advertising.

We use the information above to:

• create your account and confirm it with a one-time code;
• take, pack, deliver, and support your orders;
• calculate the delivery fee for your township or zone;
• check a wallet payment proof before dispatch;
• send the order and account messages you need in order to shop;
• keep records required for accounting, consumer complaints, and the lawful supply of medicines;
• detect misuse, fraud, and unauthorised access;
• improve the catalogue, checkout, and delivery experience.

We do not use your information to build advertising profiles, and we do not sell lists of customers.

We share only what the task requires:

• Delivery partners receive your name, phone number, and delivery address so they can bring the order.
• The pharmacy or supplier fulfilling a product receives the order details needed to prepare it.
• KBZ Pay, Wave Pay, and Aya Pay process the transfer when you pay in those apps. Their own privacy terms cover information you enter in the app. We receive the proof you upload and confirmation of the payment, not your wallet secrets.
• Hosting and file storage providers process account data and payment-proof images on our instructions, solely to run the website.
• Authorities and advisers receive information when Myanmar law requires it, or when we must answer a lawful request, a medicine-safety investigation, or a court or consumer-protection process.

We do not authorise those parties to use your information for their own marketing.

We keep account and order records while your account is active, and for a further period needed for refunds, complaints, tax, and medicine-supply records. Payment-proof images are kept only while we need them to verify payment and resolve a payment dispute. One-time codes are used for that verification step and are not kept as part of your profile.

When information is no longer needed, we delete it or remove the details that identify you, unless a law requires us to retain the record.

Access to order and account tools is limited to people who need it for their work. Passwords are stored in a protected form. Your login uses an encrypted session cookie that page scripts cannot read. Payment proofs are stored as order files, separate from any wallet login.

Please use a password you do not use on other sites, and do not share one-time codes. Our staff will not ask you for your password, wallet PIN, or one-time code.

You may:

• review and update delivery and billing details in your account;
• sign out on a shared device when you finish;
• ask what account and order information we hold, ask for a correction, or ask us to close your account;
• object to a use that is not required to perform your order or to meet a legal duty.

Email support@natsay.com or call 09 123 456 789. We may confirm the request using the phone number on the account. We may keep a limited order record where the law, a tax duty, or an open complaint requires it, even after the account is closed.

Clearing this site's data in your browser removes the cart and similar details stored on that device. Signing out ends the login session.

The shop is for adults, and for minors only when a parent or guardian places the order. We do not knowingly open accounts for children. If you believe a child has registered, contact us and we will delete the account unless we must keep a record of an order that was already completed.

The shop uses a small set of tools on your device:

• A session cookie that keeps you signed in. It is limited to our site, is not readable by page scripts, and expires after a set period.
• Local storage for the shopping cart, a coupon you enter, the checkout address, and the order summary shown after you place an order.
• Local storage of the phone number only while a registration or password-reset code is in progress.

These are used to run the shop. We do not use them to follow you across other websites, and we do not run third-party advertising trackers. If you block the session cookie, you will need to sign in again. Clearing site data removes the cart stored in that browser.

We operate the shop for customers in Myanmar. Delivery, support, and order handling take place in Myanmar. Hosting and file storage may use infrastructure that processes data for us. Those providers are instructed to protect the information and to use it only to provide the service.

When this policy changes, we update the date at the top of the page. If a change materially affects how we use information we already hold, we will post a notice on the website or contact you through the phone number or email on your account.

Questions about your information, or a request to correct or close an account:

• Email: support@natsay.com
• Phone: 09 123 456 789
• Website: natsaymyanmar.com

Please contact us first. If the issue is about an online purchase and we do not resolve it, you may also raise a consumer complaint under the Consumer Protection Law (2019).