Privacy Policy

1. Who we are

Healthrite Pharmaceuticals Ltd ("Healthrite", "we", "us", "our") is a PCN-licensed pharmacy and supermarket operating in Lagos, Nigeria. We operate this website at healthritepharm.com and three physical store locations across Lagos.

As the business that decides how and why your personal data is processed, Healthrite Pharmaceuticals Ltd is the data controller for the purposes of the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR).

2. What information we collect

When you create an account, place an order, or use our website, we may collect the following:

We do not collect payment card numbers directly. All payment processing is handled by Paystack, a PCI-DSS compliant payment provider. We never see or store your card details.

3. Prescription uploads

Under the Pharmacists Council of Nigeria (PCN) guidelines, we are required to keep dispensing records for a minimum period. Your prescription data will be stored securely in line with those requirements and deleted once the retention period has passed.

4. How we use your information

We use your personal data for the following purposes:

• To process and fulfil your orders, including prescription medications
• To deliver your purchases and notify you of delivery status
• To process payments and handle refunds where applicable
• To respond to your enquiries and customer service requests
• To send you order confirmations and important account updates
• To send you health tips, offers, and promotions, only if you have opted in
• To detect and prevent fraud and comply with our legal obligations
• To improve our website, product range, and service based on how customers use our platform

We will never sell your personal data to any third party for their own marketing purposes.

5. Legal basis for processing

Under the NDPA 2023, we process your data on the following legal grounds:

• Contract: Processing necessary to fulfil your order and deliver your purchases.
• Legal obligation: Retaining prescription and dispensing records as required by PCN regulations and Nigerian law.
• Legitimate interest: Fraud prevention, website security, and improving our service.
• Consent: Marketing communications and use of non-essential cookies, where you have actively opted in.

6. Who we share your data with

We share your personal data only where necessary, with the following categories of third parties:

• Paystack for secure payment processing
• Delivery partners and courier services to get your order to you
• Shopify Inc. which hosts our online store platform
• Email and SMS service providers used to send order notifications
• Nigerian regulatory authorities where required by law (for example, NAFDAC or PCN in the event of a drug safety matter)

All third parties we work with are required to handle your data securely and only for the specific purpose we have engaged them for.

7. International data transfers

Some of our service providers, including Shopify, store data on servers outside Nigeria. Where your data is transferred internationally, we ensure appropriate safeguards are in place in line with the NDPA 2023, including contractual protections with those providers.

8. How long we keep your data

• Order and transaction records: 7 years, as required for tax and legal compliance under Nigerian law
• Prescription records: As required under PCN dispensing regulations, typically a minimum of 2 years
• Account data: For as long as your account remains active, plus 2 years after closure
• Marketing preferences: Until you unsubscribe or withdraw consent
• Technical and browsing data: Up to 12 months

9. Your rights

Under the Nigeria Data Protection Act 2023, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us using the details at the bottom of this page. We will respond within 30 days. We may need to verify your identity before acting on a request.

10. Cookies

Our website uses cookies to keep your shopping cart working, remember your preferences, and help us understand how customers navigate the site. Some cookies are strictly necessary for the website to function. Others, used for analytics and marketing, are only placed with your consent.

You can manage your cookie preferences at any time through your browser settings. Disabling cookies may affect some functionality, such as keeping items in your cart between sessions.

11. Children's privacy

Our website is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses SSL encryption, and access to sensitive data including prescription uploads is restricted to authorised pharmacists only.

Despite these measures, no internet transmission is completely secure. If you suspect a data breach involving your personal information, please notify us immediately.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

14. Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

We would however appreciate the opportunity to address your concern directly before you escalate to the NDPC. Please reach out to us first using the contact details below.