Privacy Policy

PharmaMarket Technology Limited ("PharmaMarket", "we", "us", or "our") is committed to protecting the privacy and personal data of all users of the PharmaMarket platform. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the Nigeria Data Protection Act 2023 (NDPA) and other applicable Nigerian data protection laws.

Registration Information:

• •Pharmacy or business name
• •Full name of the responsible pharmacist or business owner
• •Email address and phone number
• •Business address (state, city, LGA)
• •PCN licence number and CAC registration number
• •NAFDAC certificate number where applicable

Platform Usage Information:

• •Listings posted, including medication names, quantities, prices, and expiry dates
• •Requests posted on the Request Board
• •Messages exchanged with other platform users
• •Transaction history
• •Login activity, IP address, and device information

• •To verify your pharmaceutical licence and activate your account
• •To facilitate connections and transactions between platform users
• •To send you platform notifications, including expiry alerts and message notifications
• •To improve platform features and user experience
• •To comply with legal and regulatory obligations under Nigerian law
• •To detect and prevent fraud, abuse, or illegal activity on the Platform
• •To communicate important updates about the Platform or these policies

We process your personal data on the following legal bases under the Nigeria Data Protection Act 2023:

• •Contractual necessity: Processing is necessary to provide the services described in our Terms
• •Legal obligation: Processing is necessary to comply with applicable Nigerian laws and regulations
• •Legitimate interests: Processing is necessary for our legitimate business interests, such as fraud prevention and platform security
• •Consent: Where you have given explicit consent, such as for marketing communications

We do not sell your personal data to third parties. We may share your information in the following limited circumstances:

• •With other platform users: Your pharmacy name, city, state, and verification status are visible to other registered users to facilitate transactions
• •With regulatory authorities: We may disclose information to PCN, NAFDAC, or other regulatory bodies if required by law
• •With service providers: We share data with trusted third-party providers (such as Supabase for cloud hosting) under strict data protection agreements
• •In a business transfer: If PharmaMarket Technology Limited is acquired or merges with another entity, your data may be transferred as part of that transaction

We implement appropriate technical and organisational measures to protect your personal data, including:

• •Encryption of data in transit using HTTPS/TLS
• •Row-level security policies on our database
• •Restricted access controls for platform administrators
• •Regular security monitoring and review

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We retain your personal data for as long as your account is active or as necessary to provide our services. If you close your account, we will retain certain data for up to seven (7) years as required by Nigerian law. Anonymised and aggregated data may be retained indefinitely for analytical purposes.

As a data subject under the NDPA 2023, you have the following rights:

• •Right of access: You may request a copy of the personal data we hold about you
• •Right to rectification: You may request correction of inaccurate or incomplete data
• •Right to erasure: You may request deletion of your data, subject to legal retention requirements
• •Right to restriction: You may request that we limit how we process your data
• •Right to data portability: You may request your data in a structured, machine-readable format
• •Right to object: You may object to processing based on legitimate interests

To exercise any of these rights, please contact us at privacy@pharmamarket.com.ng. We will respond within 30 days.

The Platform uses essential cookies and session tokens to maintain your login session and ensure the Platform functions correctly. We do not use third-party advertising cookies or tracking pixels. By using the Platform, you consent to our use of essential cookies.

The Platform is intended for use by registered pharmaceutical businesses only. We do not knowingly collect personal data from individuals under the age of 18.

Your data may be processed and stored on servers located outside Nigeria, including servers operated by our cloud hosting provider. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data in accordance with the NDPA 2023.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notification. The date of the most recent revision is shown at the top of this document.

The data controller responsible for your personal data is:

PharmaMarket Technology Limited

Website: pharmamarket.com.ng

Email: privacy@pharmamarket.com.ng

If you have concerns about how we handle your data that we have not resolved satisfactorily, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).