This draft should be reviewed against Ghana’s Data Protection Act, applicable pharmacy requirements and CindyPharma’s final operational practices.
Information we collect
We may collect names, email addresses, telephone numbers, delivery addresses, digital addresses, account details, order history, contact messages, appointment requests, payment references and technical information about website use.
When you request pharmacy or clinical support, we may also receive prescriptions, medicine information, service notes, laboratory information and other health-related details that you choose or are required to provide.
How information is used
Information is used to provide pharmacy services, review prescriptions, process and deliver orders, respond to enquiries, manage customer and staff accounts, prevent fraud, maintain audit records, improve services and meet legal or professional obligations.
Marketing messages are sent only where appropriate consent has been given. You may withdraw marketing consent at any time.
Health and prescription information
Health and prescription information is treated as sensitive. Access should be limited to authorised staff who need it for professional review, dispensing, service delivery, safety, compliance or support.
Do not send unnecessary health details through general email, social media or the chatbot. Use designated secure workflows where available.
Retention and deletion
Records are retained only as long as needed for the purpose collected, professional and legal record-keeping, safety, accounting, dispute handling and security. Different records may require different retention periods.
When retention is no longer required, information should be securely deleted, anonymised or destroyed.
How we protect information
Current safeguards include password hashing, role permissions, authenticated staff sessions, CSRF protection, audit logging, private prescription storage, file validation and optional authenticator two-factor authentication.
No system is completely risk-free. Production deployment should also use HTTPS, encrypted backups, secure object storage, monitoring, tested recovery procedures and independent security assessment.
Your privacy rights
Subject to applicable law, you may request access, correction, restriction, objection, portability or deletion of personal information. Some pharmacy, clinical, legal or accounting records may need to be retained.
We may verify identity before responding to a privacy request.
Privacy contact
Send privacy questions or requests to info@cindypharmalimited.com, call +233 24 488 5090, or write to CindyPharma Limited at F195 LETTUCE STREET, Digital Address GB-064-7821.