Privacy Policy

PocketPill Limited is responsible for the personal information we process to provide our services.

Address: 3 Gbemi Oluwa Close, Ikeja, Lagos, Nigeria

Privacy enquiries: privacy@pocketpill.co

Phone / WhatsApp: +234 708 372 5382

Depending on the service you use, we may process:

• Contact details: your name, email, phone number, city, and delivery address.
• Care information: medicine requests, prescriptions, uploaded photographs, medication history, and relevant information shared with a pharmacist, including sensitive health information.
• Lineage details: the organiser’s, parent’s, and caregiver’s contact details, medicines, care arrangements, and authorised family updates.
• Transaction details: orders, payment references, amounts, payment status, delivery records, and service correspondence.
• Website information: saved preferences and technical information needed to operate and protect the site.

The medicine request form prepares a draft in your browser. You review and copy it, open WhatsApp, attach any files there, and press Send. The Lineage form lets you review your details before sending them through our website to care@pocketpill.co using email. It does not upload prescription files; a pharmacist will arrange any prescription follow-up. A submission confirmation means the email service accepted the message, not that a pharmacist has reviewed it. Clearing a draft or leaving the page removes it from the form; copies already sent by email, copied to your clipboard, or sent in WhatsApp are separate.

Once you contact us, we obtain information from you, authorised representatives, and providers involved in your request. Share only what is relevant and let us know if important details change. If required information is missing, we may be unable to provide the requested service.

We use information to assess medicine requests, provide pharmacist support, coordinate sourcing and delivery, manage agreed refills, send care updates, confirm payments, resolve complaints, and meet legal obligations.

Depending on the activity, our lawful basis is your consent, a contract or steps you request before entering one, a legal obligation, or a legitimate interest such as fraud prevention that does not override your rights. Health information also requires an applicable sensitive-data condition, such as specific consent or a permitted healthcare purpose subject to professional confidentiality.

Browsing the website does not give blanket consent. Where we rely on consent, you can withdraw it through our privacy contact. Withdrawal does not affect earlier lawful processing.

Paying for someone’s care does not automatically give access to their health information. We confirm the patient’s permission or the representative’s legal authority and agree who may receive updates and what those updates cover.

If you arrange care for another person, make sure you are authorised to share their details and help them understand this policy. Where a patient cannot make the relevant decision, we establish the applicable authority before accepting instructions on their behalf.

A parent or legally authorised guardian should arrange care for a child. We apply the relevant consent and authority requirements before processing the child’s health information.

Where needed for your request, information may be shared with pharmacists, dispensing pharmacies, sourcing and delivery partners, payment providers, and providers supporting our communications or systems. We limit disclosure to the relevant purpose and require appropriate confidentiality and data-protection arrangements.

Delivery partners receive the information needed for delivery. Family members receive only authorised updates. We may disclose information when required by law. Any transfer connected with a business sale must have a lawful basis and appropriate safeguards.

We do not sell personal information or use prescription details to target advertising.

WhatsApp conversations involve both PocketPill and WhatsApp’s service. WhatsApp’s privacy terms apply to its own processing. Contact us if you prefer another communication method.

Where Paystack payments are enabled, Paystack processes the payment and provides transaction information needed for confirmation. Never send us your card PIN, banking password, or one-time passcode.

Authorised relatives or service providers may receive information outside Nigeria. We require a permitted transfer basis and appropriate safeguards under Nigerian law. Contact us for information about relevant destinations and protections. Permission to update a relative abroad does not authorise unrelated overseas uses.

The website uses local browser storage to remember acknowledgement of its privacy notice. This has no automatic expiry; clearing the site’s browser data removes it and the notice may appear again. It does not contain your request details.

Any additional analytics or advertising technology will be described before use, with consent obtained where required. Promotional communications are separate from care updates, and you can opt out of marketing without stopping messages needed to handle an active request.

Form drafts are not saved in a website care-record database. A draft remains in the page until cleared or the page is left or reloaded. Submitted Lineage details are processed by the website server and email service and retained in the care mailbox. Messages and attachments sent in WhatsApp exist separately on the services and devices used by you and PocketPill.

We keep personal information for as long as necessary to provide care, maintain appropriate pharmacy records, meet applicable legal and regulatory obligations, and handle complaints or legal claims. Where a competent authority lawfully requires records, we retain and disclose only what is necessary for that purpose. We do not keep every record indefinitely merely because it might be useful. Records should be deleted or anonymised when the relevant purpose and any required retention period end, subject to a lawful hold. A record-specific retention and deletion schedule remains to be finalised. Contact privacy@pocketpill.co with questions or deletion requests.

The medicine request form does not put your details in WhatsApp URLs. Copying a medicine draft places its contents on your device’s clipboard, so take care on shared devices. The Lineage email handler does not deliberately log request contents or email credentials.

Within PocketPill, access to patient care information is restricted to pharmacists who need it for their work, and to the information necessary for the relevant care task. This internal access rule does not exclude processing by the service providers described in this policy or disclosures required by law. Our privacy contact is privacy@pocketpill.co. Detailed account permissions, provider settings, backups, and incident-response procedures still need to be documented and checked. This draft does not claim independent security audits or end-to-end encryption of all PocketPill records. No system can guarantee absolute security.

Subject to applicable conditions, you may request access, correction, deletion, restriction, or portability of your information; object to certain uses; and withdraw consent. You also have protections concerning solely automated decisions with legal or similarly significant effects.

Send requests to privacy@pocketpill.co. We may make proportionate identity or authority checks before releasing information. We respond within the applicable legal period and explain any lawful limits, including records we must retain.

You may also complain to the Nigeria Data Protection Commission without first obtaining our permission.

We will publish updates with a revised effective date and communicate material changes appropriately. Updating this policy does not replace consent where new consent is required.