This page explains what data L'Anuwa Pharmacy collects, why we collect it, how we share it, and the rights you have under the Nigeria Data Protection Act (NDPA) 2023 and other applicable laws. This page is maintained by L'Anuwa Pharmacy.
1. Data we collect
- Account data: name, phone number, email, password hash, role.
- Health data: prescriptions you upload, medicines you purchase, consultation notes (only what the provider records), service results shared with you.
- Order & delivery data: delivery addresses, recipient name, order contents, status timestamps.
- Location data: rider live GPS during an active delivery (riders only), pickup/drop coordinates.
- Payment data: processed by our payment partners; we store the reference, amount, and status — never card numbers.
- Device data: IP address, browser, basic analytics needed to operate the service.
2. How we use your data
- To fulfil orders, bookings, and deliveries.
- To verify pharmacies, providers, and riders before they go live.
- To send transactional SMS, email, and in-app notifications (status updates, receipts).
- To prevent fraud, abuse, and misuse of prescriptions.
- To meet our legal and regulatory obligations.
3. Lawful basis
We process personal data based on the contract we have with you (your order or booking), our legitimate interests (running a safe marketplace), your consent (where required for marketing or sensitive data), and our legal obligations.
4. Who we share with
- The pharmacy, provider, or rider fulfilling your order — limited to what they need.
- Payment processors and SMS providers acting as our processors.
- Regulators or law enforcement when legally compelled.
- We do not sell your personal data.
5. Retention
We keep order and prescription records for as long as required by Nigerian pharmacy and tax regulations. Account data is kept while your account is active and deleted (or anonymised) when you ask us to close it, subject to legal retention requirements.
6. Security
We use encryption in transit, row-level security on our database, restricted storage buckets for prescription files and verification documents, and strict role-based access for staff. No system is perfectly secure — please use a strong, unique password.
7. Your rights
You can request access, correction, or deletion of your data, object to certain processing, or withdraw consent at any time. Email us via the Contact page and we will respond within the timelines set by the NDPA.
8. Children
The Services are not intended for children under 18. A parent or guardian must place orders on a child's behalf.
9. Changes
We will post any material changes on this page and, where appropriate, notify you in-app.