Privacy Policy

Pharmily Privacy Policy
Last Updated: 01/01/2026

Pharmily (“we,” “our,” or “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you access or use our website, mobile application, WhatsApp platform, and related services (collectively, the “Platform”).

By using Pharmily, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Personal Information

We may collect the following personal data:

• Full name
• Phone number
• Email address
• Delivery address and location details
• Account login credentials
• Government-issued prescription information (where applicable)

1.2 Health & Prescription Information

As an online pharmacy, we may collect sensitive health data, including:

• Uploaded prescriptions
• Medication history related to orders
• Pharmacist verification notes
• Adverse drug reaction reports (if submitted)

This information is collected strictly for lawful pharmaceutical services.

1.3 Payment Information

We collect payment-related data such as:

• Transaction references
• Payment method used (e.g., M-Pesa, card)

We do not store full card or mobile money credentials. Payments are processed via secure third-party payment providers.

1.4 Technical & Usage Data

We automatically collect:

• IP address
• Device type, browser type, operating system
• App usage data, page views, clicks
• Cookies and similar tracking technologies

1.5 Third-Party Sign-In Data

If you sign in using third-party services (e.g., Google), we may receive:

• Name
• Email address
• Profile identifier

We only access data explicitly authorized by you.

2. How We Use Your Information

We use your data to:

• Process and fulfill medication orders
• Verify prescriptions and ensure patient safety
• Deliver products to your location
• Communicate order updates and service notifications
• Provide customer support
• Improve platform performance and user experience
• Comply with legal and regulatory requirements
• Prevent fraud and misuse of services

We do not sell your personal data.

3. Legal Basis for Processing Data

We process your data under the following legal bases:

• Your explicit consent
• Performance of a contract (order fulfillment)
• Compliance with legal obligations
• Protection of public health and patient safety
• Legitimate business interests (platform improvement, fraud prevention)

4. Data Sharing & Disclosure

We may share your data with:

• Licensed pharmacists and internal staff on a need-to-know basis
• Third-party service providers (payment processors, delivery partners, IT providers)
• Regulatory authorities when legally required
• Law enforcement agencies where mandated by law

All third parties are contractually obligated to protect your data.

5. Cookies & Tracking Technologies

Pharmily uses cookies and similar technologies to:

• Enable core platform functionality
• Analyze usage patterns
• Improve services and performance

You may control cookies through your browser or device settings. Disabling cookies may affect platform functionality.

6. Data Storage & Security

We implement appropriate technical and organizational safeguards, including:

• Encrypted data transmission
• Secure servers and access controls
• Restricted access to health data
• Regular system monitoring

Despite our safeguards, no system is 100% secure. Users are encouraged to protect their account credentials.

7. Data Retention

We retain personal and health data only for:

• As long as necessary to fulfill services
• As required by applicable pharmaceutical, tax, and health regulations
• Legitimate business and legal purposes

Data no longer required is securely deleted or anonymized.

8. Your Rights Under Data Protection Law

You have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Withdraw consent (where applicable)
• Request deletion of your data (subject to legal obligations)
• Object to certain data processing activities
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

Requests may be submitted using the contact details below.

9. Children’s Privacy

Pharmily does not knowingly collect personal data from children without appropriate parental or guardian consent. Services involving minors are handled in accordance with applicable laws and medical guidelines.

10. Third-Party Links & Services

Our platform may contain links to third-party services. Pharmily is not responsible for the privacy practices of external websites or platforms. Users are encouraged to review third-party privacy policies independently.

11. Cross-Border Data Transfers

Where data is transferred outside Kenya, Pharmily ensures:

• Adequate data protection safeguards
• Compliance with applicable data protection laws
• Use of secure and reputable service providers

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any material changes will be communicated through the platform. Continued use of the platform constitutes acceptance of the updated policy.

13. Contact Information

For questions, requests, or concerns regarding this Privacy Policy or your personal data, contact:

Pharmily Email: [email protected]
Location: Muthaiga Business Center, Nairobi, Kenya