Privacy Policy

We collect information that you provide directly to us, including your name, email address, phone number, delivery address, prescription details, and payment information.

We also automatically collect certain information when you use our platform, such as your IP address, browser type, device information, and usage patterns through cookies and similar technologies.

For prescription services, we collect prescription images, medication details, and any notes provided by your healthcare provider.

We implement industry-standard security measures including 256-bit SSL encryption for all data transmissions, secure server infrastructure, and regular security audits.

Your payment information is processed through PCI-DSS compliant gateways. We do not store your full card details on our servers.

Prescription data is encrypted at rest and access is restricted to licensed pharmacists who need it to fulfill your order.

We use your information to:

• Process and deliver your orders
• Verify and fulfill prescriptions
• Communicate order updates and promotional offers (with your consent)
• Improve our products and services
• Comply with legal and regulatory obligations (NAFDAC, PCN)
• Prevent fraud and ensure platform security

We will never sell your personal information to third parties for marketing purposes.

We only share your information with trusted third parties when necessary to provide our services:

• Delivery partners — to fulfill and track your orders
• Payment processors — to securely process transactions
• Regulatory authorities — when required by law (NAFDAC, PCN, etc.)
• Healthcare professionals — only with your explicit consent for prescription verification

All third parties are bound by strict confidentiality and data protection agreements.

We use cookies and similar technologies to enhance your browsing experience, remember your preferences, analyze site traffic, and personalize content.

Types of cookies we use:

• Essential cookies — required for the website to function (cart, authentication)
• Analytics cookies — help us understand how visitors interact with our site
• Preference cookies — remember your settings and choices

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect site functionality.

Under the Nigeria Data Protection Regulation (NDPR), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data (where legally permissible)
• Object to or restrict certain processing activities
• Withdraw consent for marketing communications at any time
• Request a copy of your data in a portable format

To exercise any of these rights, please contact our Data Protection Officer using the contact details below.

Card and electronic payments are processed by Paystack (Paystack Payments Limited), a CBN-approved processor. Your full card details never touch our servers — we only store the payment reference, amount, status and channel returned by Paystack.

Transactional emails (receipts, delivery updates, prescription statuses) are sent through Resend; courier partners receive only the name, phone number and delivery address required to fulfil your order. We never sell your data, and we share it only with these processors, regulators (PCN/NDPR audits) or when required by law.

Your data is hosted on secure servers within Nigeria with TLS encryption in transit and encrypted storage at rest.

If you believe we have mishandled your personal data, write to our Data Protection Officer at privacy@carefortepharm.com — we respond to data-subject requests within 72 hours and resolve complaints within 30 days.

You also have the right to lodge a complaint directly with the Nigeria Data Protection Commission (NDPC)at any time. This policy is issued in accordance with the Nigeria Data Protection Regulation 2019 (NDPR).

Our platform is intended for adults. Children's personal data is not knowingly collected except through a parent or guardian ordering pediatric medication, in which case only the data necessary to dispense safely is processed.

We may update this policy; material changes will be announced in-app and by email at least 14 days before taking effect. The "Last updated" date below reflects the current version.

Prescription and dispensing records are retained for the statutory period required by the PCN regardless of account deletion.