Privacy Policy

1. INTRODUCTION

MedRx Wholesale Limited ("we," "us," "our," or "Company") is committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website www.medrxapp.com (the "Website") and use our pharmaceutical wholesale platform and mobile application.

2. INFORMATION WE COLLECT

2.1 Personal Information

We may collect the following types of personal information:

• Business Information: Pharmacy name, business registration number, physical address, postal address
• Professional Information: Ghana Pharmacy Council registration number, pharmacist license details, authorized representative information
• Contact Information: Names, email addresses, phone numbers, mobile numbers
• Financial Information: Bank account details, payment information, credit history (for credit applications)
• Order Information: Product purchases, order history, delivery preferences, payment records

2.2 Technical Information

When you visit our Website, we automatically collect:

• IP address and location data
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Device information and screen resolution
• Cookies and similar tracking technologies

2.3 Communications

We collect information from:

• Contact forms and inquiries
• Email correspondence
• Phone calls and voicemails
• Live chat interactions
• Customer support tickets

3. HOW WE COLLECT INFORMATION

3.1 Direct Collection

• Registration and account creation forms
• Order placement and checkout processes
• Contact and inquiry forms
• Subscription to newsletters or updates
• Customer service interactions

3.2 Automatic Collection

• Website analytics and tracking technologies
• Cookies and web beacons
• Server logs and access records

3.3 Third-Party Sources

• Ghana Pharmacy Council (for license verification)
• Business registration authorities
• Credit bureaus (for credit applications)
• Payment processors

4. HOW WE USE YOUR INFORMATION

4.1 Primary Business Purposes

• Account Management: Creating and managing user accounts, authentication, and access control
• Verification: Verifying pharmacy licenses with the Ghana Pharmacy Council and business registration status
• Order Processing: Processing, fulfilling, and tracking orders; managing inventory and deliveries
• Payment Processing: Processing payments, managing credit accounts, and financial transactions
• Customer Service: Responding to inquiries, providing support, and resolving issues

4.2 Operational Purposes

• Website Improvement: Analyzing usage patterns to enhance user experience and functionality
• Security: Monitoring for fraud, unauthorized access, and security threats
• Quality Assurance: Monitoring service quality and performance
• Product Development: Developing new features and services

4.3 Communication Purposes

• Sending order confirmations and shipping notifications
• Providing important account and service updates
• Sharing product information and availability updates
• Sending newsletters and marketing communications (with consent)

4.4 Legal and Regulatory Purposes

• Complying with pharmaceutical regulations and licensing requirements
• Maintaining records as required by law
• Cooperating with regulatory authorities and law enforcement
• Protecting our legal rights and interests

5. INFORMATION SHARING AND DISCLOSURE

5.1 Authorized Disclosures

We may share your information with:

• Regulatory Authorities: Ghana Pharmacy Council, Food and Drugs Authority, and other relevant regulatory bodies for verification and compliance purposes
• Service Providers: Trusted third-party vendors who assist with:
  • Payment processing and financial services
  • Logistics and delivery services
  • IT support and cloud hosting
  • Customer service and call center operations
  • Marketing and communication services
• Business Partners: Pharmaceutical manufacturers and authorized distributors for order fulfillment and product authenticity verification
• Legal Requirements: When required by law, court order, or legal process
• Business Transfers: In connection with mergers, acquisitions, or sale of business assets

5.2 Data Protection Measures

All third parties with whom we share information are required to:

• Maintain appropriate confidentiality and security measures
• Use information only for specified purposes
• Comply with applicable data protection laws
• Return or securely destroy information when no longer needed

6. COOKIES AND TRACKING TECHNOLOGIES

6.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality and security
• Performance Cookies: Help us understand how visitors use our website
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

6.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may limit website functionality.

7. DATA SECURITY

7.1 Security Measures

We implement comprehensive security measures including:

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive information
• Multi-factor authentication for account access
• Regular security audits and penetration testing
• Employee training on data protection
• Access controls and monitoring systems
• Regular software updates and security patches

7.2 Data Breach Response

In the event of a data breach, we will:

• Immediately investigate and contain the breach
• Notify relevant authorities within 72 hours as required by law
• Inform affected users without undue delay
• Take steps to prevent future incidents

8. DATA RETENTION

We retain personal information for different periods depending on the purpose:

• Account Information: While your account remains active and for 7 years after closure for regulatory compliance
• Order Records: 7 years from the date of transaction for business and tax purposes
• Financial Records: 7 years as required by Ghanaian financial regulations
• Marketing Communications: Until you unsubscribe or request deletion
• Website Analytics: 24 months from collection

We regularly review and securely delete information that is no longer needed.

9. YOUR RIGHTS UNDER GHANA'S DATA PROTECTION ACT

Under the Data Protection Act, 2012 (Act 843) and its regulations, you have the following rights:

9.1 Access Rights

• Request access to your personal information
• Obtain copies of your data we hold
• Understand how your information is being used

9.2 Correction Rights

• Request correction of inaccurate information
• Update incomplete or outdated information

9.3 Deletion Rights

• Request deletion of your personal information (subject to legal and regulatory requirements)
• Request restriction of processing in certain circumstances

9.4 Objection Rights

• Object to processing of your information for marketing purposes
• Withdraw consent where processing is based on consent

9.5 Exercising Your Rights

To exercise any of these rights, please contact us using the details in Section 13. We will respond within 30 days of receiving your request.

10. INTERNATIONAL DATA TRANSFERS

Your information is primarily stored and processed in Ghana. If we transfer information outside Ghana, we ensure:

• Adequate protection through appropriate safeguards
• Compliance with applicable data protection laws
• Contractual protections with international service providers

11. CHILDREN'S PRIVACY

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child, we will promptly delete it.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect:

• Changes in our business practices
• Legal or regulatory requirements
• Technological developments

We will notify you of significant changes through:

• Prominent notice on our website
• Email notification to registered users
• In-app notifications

The updated policy will be effective from the date specified in the revised version.

14. CONSENT

By using our website and services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our website or services.

For marketing communications, we will obtain your explicit consent before sending promotional materials. You can withdraw this consent at any time by unsubscribing or contacting us directly.

15. LANGUAGE

This Privacy Policy is written in English. In case of any translation, the English version shall prevail in the event of any conflict or inconsistency.

---