Privacy Policy

Account information: name, email address, phone number, role, and (for owners) pharmacy name, PCN licence number, address and contact details you provide during signup and setup.

Pharmacy operational data: products, batches, expiry dates, stock movements, sales, refunds, purchase orders, suppliers and staff activity that you record in the Service in the ordinary course of running your pharmacy.

Sale metadata: at the point of sale we record product, quantity, price, discount, payment method, cashier, timestamp and, where you attach one, a prescription image. We do not require or collect a customer's name, National ID or medical history — a sale is recorded against the pharmacy, not against a named patient.

Payment information: when you subscribe to a paid plan, our payment processor Paystack collects and holds your card / bank details. We never see or store your full card number. We store only the subscription status, plan, amount and Paystack reference codes returned to us.

Technical data: IP address, browser type, device information and access logs generated automatically when you use the Service, used for security, abuse prevention and diagnostics.

To provide the Service — authenticate you, scope your data to your pharmacy, enforce roles and permissions, generate reports and receipts, and deliver the features you subscribe to.

To operate billing — pass amount and reference to Paystack, receive webhooks confirming payment status, and gate access accordingly.

To communicate with you — transactional email (confirm signup, password reset, staff invites, subscription notices) and, where you have opted in, product updates.

To keep the Service safe and reliable — detect fraud and abuse, investigate incidents, and meet our legal obligations.

We process personal data on one or more of the following lawful bases under the NDPA: performance of a contract with you; compliance with a legal obligation; our legitimate interests in operating and securing the Service; and, where required, your consent (which you may withdraw at any time).

We share information only with processors who help us deliver the Service: our cloud hosting and database provider (Supabase), our email delivery provider (Resend), and our payment processor (Paystack). Each is bound by their own security and data-protection commitments.

We do not sell personal data. We do not share pharmacy operational data with third parties for advertising or profiling.

We may disclose information where required by law, court order, or a valid request from a competent regulator (including the Nigeria Data Protection Commission, the Pharmacists Council of Nigeria, or NAFDAC where relevant).

We retain your pharmacy data for as long as your account is active. If you cancel, we retain records for a reasonable period to allow reactivation and to meet tax, audit and regulatory obligations, after which the data is deleted or irreversibly anonymised.

You can export your operational data at any time from the Reports module.

Data is transmitted over TLS and stored in access-controlled databases with row-level security scoped to your pharmacy. Access to production infrastructure is restricted, logged and reviewed. No system is perfectly secure — we ask that you protect your own credentials, use a strong password, and revoke sessions on any device you no longer control.

Under the NDPA you have the right to access, correct, update, or request deletion of your personal data, to object to certain processing, and to lodge a complaint with the Nigeria Data Protection Commission. To exercise these rights, email us at hello@rxshelf.ng and we will respond within a reasonable time.

Our infrastructure is hosted in secure data centres which may be located outside Nigeria. Where personal data is transferred internationally, we rely on the safeguards our processors put in place and on the applicable NDPA transfer conditions.

We may update this policy from time to time. Material changes will be announced in-app or by email. The "Last updated" date at the top reflects the most recent change.

Questions about this policy or your data can be sent to hello@rxshelf.ng, addressed to Failatech Limited.