Privacy Policy

Privacy Policy for Leleshwa Pharmacy

Leleshwa Pharmacy ("we", "our", or "us") is committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This privacy policy explains how we collect, use, share, and protect your personal data in compliance with the Kenya Data Protection Act, 2019.

1. Data Controller

Leleshwa Pharmacy is the Data Controller responsible for deciding how and why we process your personal data. We determine the purposes and means of processing the personal data we collect from you.

2. Information We Collect

We may collect and process the following types of personal data:

• Personal Information: Name, email address, phone number, and any other information you provide when registering on our website or contacting us directly.
• Sensitive Personal Data: Health information or prescription details, which are collected when necessary for the purposes of fulfilling your request or providing health-related services.

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you voluntarily provide your data (e.g., registering on our website or subscribing to our newsletter), we process your data with your explicit consent.
• Contractual Necessity: To fulfill orders or respond to your inquiries, we may process your data to perform our contractual obligations.
• Legitimate Interests: In certain cases, we process your data based on our legitimate interest in maintaining business relationships and promoting our services, provided that your rights and interests do not override these interests.

4. Purpose of Data Collection

We collect and use your personal data for the following purposes:

• To respond to your inquiries and provide customer service.
• To process and fulfill orders, including shipping or delivery.
• To send marketing communications about new products, services, or special offers, provided you have given your consent.
• To ensure the security and functionality of our website.
• To comply with legal or regulatory obligations.

5. Data Minimization

We only collect personal data that is necessary for the specified purposes. We ensure that we do not request or store excessive or irrelevant personal information.

6. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Once the data is no longer needed, it will be securely deleted or anonymized.

7. Data Sharing with Third Parties

We will not share your personal data with third parties except as necessary for:

• Processing orders (e.g., shipping providers, payment processors).
• Complying with legal obligations (e.g., regulatory authorities).

When we share data with third parties, we ensure that they are bound by data protection agreements, and that your data is handled in compliance with the Kenya Data Protection Act, 2019.

8. Data Security

We are committed to ensuring that your personal data is secure. We have implemented appropriate technical and organizational measures to protect your data from unauthorized access, loss, or damage, including:

• Encryption of sensitive personal data.
• Access controls to restrict data access to authorized personnel only.
• Regular reviews of our data processing activities to ensure continued compliance.

9. Data Subject Rights

You have the following rights concerning your personal data:

• Right to be informed: You have the right to know how we process your data.
• Right of access: You can request access to the personal data we hold about you.
• Right to rectification: You can request that we correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): You can request that we delete your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to restrict processing: You can request that we restrict the processing of your data under certain conditions.
• Right to data portability: You can request a copy of your personal data in a commonly used format.
• Right to object: You can object to the processing of your personal data, particularly for direct marketing purposes.

To exercise any of these rights, please contact us using the details in Section 11.

10. Updates to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal obligations, or regulatory requirements. Any updates will be posted on this page, and if significant changes are made, we will notify you via email or other appropriate means.

This privacy policy was last updated on [11/10/2024].

11. Contact Information

If you have any questions or concerns regarding this privacy policy or wish to exercise your data subject rights, please contact us at:

• Email: support@leleshwapharmacy.com
• Phone: +254 702 087 853
• Address: PO Box 416-00202 Nairobi, Kenya

These terms of service ("Terms", "Agreement") are an agreement between the website ("Website operator", "us", "we" or "our") and you ("User", "you" or "your"). This Agreement sets forth the general terms and conditions of your use of this website and any of its products or services (collectively, "Website" or "Services").

Although this Website may be linked to other websites, we are not, directly or indirectly, implying any approval, association, sponsorship, endorsement, or affiliation with any linked website, unless specifically stated herein.

You should carefully review the legal statements and other conditions of use of any website which you access through a link from this Website. Your linking to any other off-site pages or other websites is at your own risk.