Privacy Policy

Pharmalister Health Experience Center, 100 Iju Road, Agege, Lagos, is the data controller for the personal data described here. You can contact us about it at [email protected] or +234 807 665 0000.

• When you order: your name, mobile number and email address, what you ordered, the total and the order number, and when it was paid and collected.
• When you pay by bank transfer: we keep the transfer details needed to match the payment to your order. We never receive your card number or PIN.
• When you order on WhatsApp: your WhatsApp number, name and the messages you send us. WhatsApp is run by Meta and has its own privacy terms.
• When you use the site: your IP address, device and browser type, and the pages requested, in server and security logs, to keep the site working and safe.
• When you contact us: what you tell us, so that we can answer and keep a record of it.

What you buy can reveal something about your health. Under the NDPA, health information is sensitive personal data, so we handle order details with extra care and only for the purposes below.

If a pharmacist needs health details to supply a medicine safely, they ask you in person or by phone.

• To take, prepare, pay for and hand over your order, and to contact you about it. Legal basis: performing our contract with you.
• To process order details that may reveal health information. Legal basis: your explicit consent, which you give by ticking the box at checkout, and our duty to supply medicines safely.
• To keep financial records, pay tax and meet pharmacy and consumer law. Legal basis: a legal obligation.
• To prevent fraud and misuse, and to keep the site secure. Legal basis: our legitimate interest in protecting our customers and business.
• To answer your questions and complaints. Legal basis: our legitimate interest, or your request.

We do not sell your data. We do not use it to profile you, to make automated decisions about you, or for third party advertising. We will only send you marketing messages if you clearly agree to them first, and you can stop them at any time.

Only the people and services we need to run your order, and only what each one needs:

• Our pharmacy staff, who prepare and hand over your order.
• Our hosting, database, content delivery and security providers, who run the website for us under contract and may not use your data for their own purposes.
• Meta (WhatsApp), if you choose to order or chat with us there.
• Our professional advisers, and the authorities, where the law requires us to disclose something or to protect someone from harm.

If our business were ever sold or merged, your data would pass to the new owner on the same terms as this policy.

Some of our technology providers store or process data outside Nigeria, for example in Europe. When your data leaves Nigeria we rely on providers that protect it by contract and security measures that are appropriate under the NDPA, and we do not send more than is needed.

• Order and payment records: for as long as tax, accounting and pharmacy rules require us to keep them, which we treat as six years.
• Messages and complaints: for as long as needed to deal with them and to show that we did, then deleted.
• Server and security logs: for a short period, then deleted or anonymised.

Where you ask us to erase your data, we remove your identity from the record and keep only what we are legally obliged to keep, such as the sale itself, without your name, number or email.

The site uses encrypted connections. Access to customer and order data is limited to the staff who need it and is protected by individual logins. Payment card details never touch our systems. Our systems separate the online shop from the pharmacy's patient records, which are not stored on this website.

No system is perfectly secure. If a breach puts your data at risk, we will tell you and the Nigeria Data Protection Commission within the time the NDPA requires.

Under the NDPA you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• erase your data, where there is no legal reason for us to keep it;
• restrict how we use it, or object to a use that relies on our legitimate interest, including any direct marketing;
• give you your data in a common format, or pass it to another provider, where this applies;
• withdraw your consent at any time. This does not affect what we did before, and it may mean we cannot take an order that needs the data.

To use a right, email [email protected] or visit the pharmacy. We may need to check who you are first, to avoid giving your data to someone else. We will reply within 30 days. There is no charge unless a request is clearly unfounded or excessive.

If you are not happy with how we handled your data, please tell us first.

We use only what the site needs to work:

• A basket cookie that remembers what is in your basket for up to 14 days. It holds product codes and quantities, not your name or details.
• A sign-in cookie, used only by our staff.
• A saved light or dark display choice, kept in your browser.
• Security and performance cookies set by our content delivery provider, where they are used.

We do not use advertising cookies or cross-site tracking, and we do not currently use analytics that follow you around. If that changes, we will update this policy and ask for your consent first. You can block or delete cookies in your browser settings, but the basket will then not work.

This site is for adults. We do not knowingly collect data from anyone under 18. A parent or guardian may order medicines for a child, and we will treat that information as the adult's. If you think a child has given us their data, contact us and we will delete it.

Our site links to other websites, for example WhatsApp and regulators. We are not responsible for their privacy practices. Please read their policies.

We will update this page when our practices or the law change, and change the date at the top. If a change matters to how we use your data, we will tell you in a clear way before it applies.

Questions about this policy or your data: [email protected], +234 807 665 0000, or visit 100 Iju Road, Agege, Lagos.

Contact page · Terms and Conditions