Drugstore (drugstore.ng) is an online pharmacy marketplace run by Drugstore Health Tech Services (“Drugstore”, “we”, “us”). This policy explains what personal information we collect when you use our website and services, why we collect it, who we share it with, and the choices and rights you have. It is written to meet the Nigeria Data Protection Act 2023.

Who is responsible for your information

Drugstore Health Tech Services is responsible for the personal information described here. You can reach us about anything in this policy at hello@drugstore.ng or +234 907 977 2482. Our address is 4/6 Itokin Road, Sabo, Ikorodu, Lagos.

What we collect

Information you give us

• Account details: your name, email address, phone number and password.
• Delivery details: your address, city, local government area and state.
• Orders and requests: the medicines and products you order or ask for, and your order history.
• Health information: prescriptions and photos you upload, and anything you tell our pharmacists in chat, on WhatsApp or by phone, such as symptoms, conditions or medicines you take.
• Messages: chats with us, including files you send, and emails or calls to our support team.
• Refund details: the Nigerian bank account you give us when we owe you a refund.

Information collected automatically

• Usage: pages and products you view, items you add to your cart, and buttons you tap (for example, the WhatsApp button).
• Device: your browser, device type, approximate location from your IP address, and the website that sent you to us.
• Cookies: see “Cookies and similar tools” below.

Payments: card payments are handled by our payment providers, such as Paystack. Your card details go directly to them; we do not see or store your full card number.

Information from Google

If you choose to sign in with Google, Google shares your name, email address and profile picture with us. We use this only to create your Drugstore account and sign you in. We do not use information from Google for advertising, we do not sell it, and we do not share it with anyone except as needed to provide your account. Our use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements. You can remove Drugstore’s access at any time from your Google Account’s security settings.

How we use your information

• To process, deliver and support your orders and requests.
• To have a licensed pharmacist check prescriptions and orders, as Nigerian pharmacy law requires, and to keep the records it requires.
• To answer your questions in chat, on WhatsApp, by phone or email.
• To send you updates about your orders, including push notifications if you allow them in your browser.
• To handle payments, refunds and returns.
• To keep accounts secure and prevent fraud and misuse.
• To understand how the website is used and improve it, and to measure whether our advertising works.
• To send you offers, only where you have agreed. You can opt out at any time.

We rely on the following legal bases: providing the service you asked for (your contract with us); our legal obligations, including pharmacy record-keeping; our legitimate interests in running and improving a safe service; and your consent, for example when you choose to send us health information or agree to receive offers.

Who we share it with

We do not sell your personal information. We share it only with:

• Partner pharmacies that fulfil your order: your name, phone number, delivery address, the items ordered and, where needed, your prescription.
• Delivery riders and logistics partners: your name, phone number and delivery address.
• Payment providers, such as Paystack, to take payments and make refunds.
• Service providers who run parts of our service for us, such as hosting and file storage, email, messaging, customer-support chat, and analytics (including Google). They may use your information only to provide their service to us.
• Regulators, law enforcement and courts, where the law requires it, for example the Pharmacy Council of Nigeria or NAFDAC.
• A buyer or successor if Drugstore’s business is sold or merged, under the same protections as this policy.

Cookies and similar tools

We use cookies and similar browser storage to:

• keep you signed in and remember your cart (needed for the site to work);
• remember a sales representative’s referral code for 60 days, if you arrived through their link;
• measure visits and advertising results, using Google Analytics, Google Tag Manager and Google Ads.

You can block or delete cookies in your browser settings. If you block the ones needed for the site to work, you may not be able to sign in or check out.

Where your information is stored

Some of our service providers, including our hosting and storage providers and Google, store or process information outside Nigeria. When that happens, we use providers that protect it to the standard the Nigeria Data Protection Act requires.

How long we keep it

We keep your information, including your orders, prescriptions, payment records and chat messages, for as long as we need it to provide our services, keep the records pharmacy, tax and accounting rules require, resolve disputes and protect our customers and business.

Your rights

Under the Nigeria Data Protection Act 2023, you can ask us to:

• give you a copy of the personal information we hold about you;
• correct information that is wrong or incomplete;
• delete your information, unless the law requires us to keep it (for example, pharmacy records);
• restrict or object to how we use it;
• send your information to you or another provider in a usable format;
• withdraw consent you have given, at any time.

To do any of these, email hello@drugstore.ng. We will reply within 30 days. If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission.

Keeping your information safe

We use encrypted connections, limit who on our team can see your information, and require our partners to protect it. No system is completely secure. If a breach puts your information at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.

Children

Our services are not for anyone under 18, and we do not knowingly collect information from children. A parent or guardian may order medicines for a child, and that information is handled under this policy.

Changes to this policy

We may update this policy. When we do, we will publish the new version on this page and, for important changes, tell you by email or on the website.