← All legal documents

Privacy Policy

This Privacy Policy explains how LEGAL_ADDRESS= ("LEGAL_ADDRESS=", "we", "us", or "our") collects, uses, stores, protects, and otherwise processes personal information when you use our Platform.

LEGAL_ADDRESS= is designed primarily for pharmacies and pharmacy professionals.

We are committed to processing personal data responsibly and in accordance with applicable Ethiopian data-protection requirements, including the Personal Data Protection Proclamation No. 1321/2024.

1. Information We Collect

Depending on how you use LEGAL_ADDRESS=, we may collect the following categories of information.

Account information

  • name;
  • email address;
  • telephone number;
  • password credentials or authentication identifiers;
  • pharmacy name;
  • pharmacy address;
  • account role;
  • subscription information.

Pharmacy information

  • medicine records;
  • batch information;
  • expiry dates;
  • stock levels;
  • sales transactions;
  • suppliers;
  • purchase records;
  • staff information;
  • branch information;
  • operational reports.

Technical information

We may collect:

  • IP address;
  • browser type;
  • device information;
  • operating system;
  • log information;
  • approximate location derived from technical information where applicable;
  • authentication events;
  • security events.

Usage information

We may collect information about:

  • features used;
  • pages accessed;
  • account activity;
  • AI Assistant usage;
  • error reports;
  • performance information.

2. Patient Information

LEGAL_ADDRESS= is not designed to require unnecessary patient-identifying information.

Users should avoid entering patient-identifying or sensitive health information unless the relevant functionality requires it and the user has a lawful basis for processing that information.

If you enter personal or health information into LEGAL_ADDRESS=, your pharmacy or organization may act as the data controller and LEGAL_ADDRESS= may process that information on its behalf, depending on the circumstances.

3. How We Use Information

We may use information to:

  • create and manage accounts;
  • provide LEGAL_ADDRESS= services;
  • process subscriptions;
  • authenticate users;
  • manage pharmacy access;
  • provide support;
  • provide AI functionality;
  • generate reports;
  • send notifications;
  • detect security threats;
  • prevent fraud and abuse;
  • troubleshoot technical problems;
  • improve Platform performance;
  • understand product usage;
  • comply with legal obligations;
  • enforce our agreements.

4. Legal Basis for Processing

Where required by applicable law, personal data will be processed on an appropriate lawful basis.

Depending on the circumstances, this may include:

  • consent;
  • performance of a contract;
  • compliance with a legal obligation;
  • protection of vital interests;
  • legitimate interests where legally permitted;
  • other lawful grounds recognized by applicable law.

The Ethiopian Personal Data Protection Proclamation establishes requirements concerning lawful processing and consent, including requirements for valid consent to be informed, specific, clear, and based on an affirmative action.

5. AI Assistant Data

When you use the LEGAL_ADDRESS= AI Pharmacist Assistant, information submitted to the assistant may be processed to:

  • generate an answer;
  • retrieve relevant medicine information;
  • provide sources;
  • maintain conversation history where enabled;
  • enforce usage limits;
  • detect abuse;
  • improve reliability and security.

Users should not submit unnecessary personal or patient-identifying information to the AI Assistant.

AI conversations may be stored according to LEGAL_ADDRESS='s applicable retention practices.

6. Sources and Medicine Information

LEGAL_ADDRESS='s AI Assistant may retrieve information from medicine references, regulatory materials, guidelines, and other trusted sources.

The existence of a source in LEGAL_ADDRESS= does not constitute an endorsement of LEGAL_ADDRESS= by that source or organization.

Information retrieved by the AI Assistant should be independently verified before being relied upon for patient care or medicine-dispensing decisions.

7. How We Share Information

We may share information with service providers that help us operate LEGAL_ADDRESS=, including providers responsible for:

  • cloud hosting;
  • authentication;
  • payment processing;
  • email delivery;
  • notifications;
  • analytics;- security;
  • AI infrastructure;
  • technical support.

We may also disclose information:

  • when required by law;
  • in response to lawful government requests;
  • to protect rights or safety;
  • to investigate fraud or abuse;
  • to enforce our Terms;
  • during a corporate transaction such as merger, acquisition, financing, restructuring, or sale of assets.

We do not sell customer personal data as a commercial product.

8. Business Data and Aggregated Information

LEGAL_ADDRESS= may generate aggregated or de-identified information from Platform usage.

Such information may be used for:

  • analytics;
  • product improvement;
  • research;
  • business planning;
  • reporting;
  • market analysis.

We will not intentionally use aggregated information to identify an individual.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:

  • providing the Service;
  • maintaining security;
  • complying with legal obligations;
  • resolving disputes;
  • enforcing agreements;
  • maintaining financial and business records.

Retention periods may vary depending on the type of information and legal requirements.

10. Data Security

We use reasonable technical and organizational safeguards designed to protect personal data.

These measures may include:

  • access controls;- authentication;
  • encryption where appropriate;
  • role-based permissions;
  • logging;
  • monitoring;
  • secure infrastructure;
  • backup procedures;
  • security reviews.

However, no security system is completely secure, and we cannot guarantee absolute security.

11. Data Breach

If we become aware of a personal-data security incident, we will assess and respond to it in accordance with applicable law and our internal incident-response procedures.

Where notification is legally required, we will make the required notifications within the applicable legal timeframe.

12. Your Privacy Rights

Subject to applicable law and relevant limitations, individuals may have rights relating to their personal data, including rights to:

  • know whether their personal data is being processed;
  • receive information about processing;
  • access personal data;
  • request correction of inaccurate information;
  • request deletion where legally applicable;
  • object to certain processing;
  • withdraw consent where processing is based on consent;
  • exercise other rights provided by applicable law.

The Ethiopian Personal Data Protection Proclamation establishes data-subject rights including information, access, correction, erasure, objection, and portability rights in applicable circumstances.

13. Pharmacy Administrators and Employee Data

If a pharmacy uses LEGAL_ADDRESS= to manage employee accounts, the pharmacy may determine how employee information is processed.

The pharmacy is responsible for:

  • providing appropriate notices to employees;
  • obtaining required permissions;
  • assigning appropriate user roles;
  • removing access when employment ends;
  • ensuring that employee information is processed lawfully.

14. Cookies and Similar Technologies

LEGAL_ADDRESS= may use cookies, local storage, session technologies, and similar mechanisms to:

  • maintain login sessions;
  • remember preferences;- maintain security;
  • understand Platform usage;
  • improve performance.

You may be able to control certain technologies through your browser or device settings.

15. Children's Privacy

LEGAL_ADDRESS= is intended for pharmacy businesses and professionals and is not directed toward children.

We do not knowingly design the Platform to collect children's personal data for marketing or profiling purposes.

If you believe that a child's information has been improperly submitted, contact us so that we can investigate and take appropriate action.

16. International Processing

LEGAL_ADDRESS= may use service providers located outside Ethiopia.

Where personal data is transferred or processed across borders, we will take steps required by applicable law and applicable data-protection requirements.

Because LEGAL_ADDRESS= may rely on international cloud and technology providers, the exact location of processing may depend on the infrastructure used to provide a particular service.

17. Third-Party Services

LEGAL_ADDRESS= may use third-party services.

Those providers may independently process information according to their own privacy policies and contractual obligations.

Where appropriate, LEGAL_ADDRESS= will require service providers to implement appropriate protections for information processed on our behalf.

18. Changes to This Privacy Policy

We may update this Privacy Policy when our practices, technology, services, or legal obligations change.

We will provide reasonable notice of material changes where required.

The latest version will be made available through LEGAL_ADDRESS=.

19. Contact and Privacy Requests

For privacy-related questions or requests, contact:

  • Company: LEGAL_ADDRESS=
  • Privacy Contact: [Privacy Email]
  • Address: [Business Address]
  • Phone: [Phone Number]

Subject line:

  • "Privacy Request – LEGAL_ADDRESS="

20. Data Controller / Data Processor Relationship

Depending on the particular processing activity:

  • The pharmacy/customer may act as the Data Controller, determining why and how certain customer, employee, or patient information is processed.
  • LEGAL_ADDRESS= may act as a Data Processor, processing information on behalf of the pharmacy to provide the Platform.
  • For LEGAL_ADDRESS='s own account, billing, security, product-management, and legal activities, LEGAL_ADDRESS= may act as a Data Controller where applicable.

The parties may enter into additional data-processing terms where necessary.