Privacy Notice

How City Care Pharmacy, using the OtumHealth platform, handles your personal and health information. This notice is provided for transparency under the Nigeria Data Protection Act (NDPA) 2023 / NDPR.

Template notice. This is a starting template. Have it reviewed by a qualified data-protection/legal adviser and registered with the NDPC before publishing to patients.

1. Who we are

City Care Pharmacy is the data controller for your records. The OtumHealth software (by OpticSat — Optic Satellite Communication Ltd.) is the platform we use to process them.

2. What we collect

Your name, contact details, date of birth and gender; your allergies, vitals, diagnoses, prescriptions, dispensing history, lab results, immunizations, appointments and referrals — the information needed to care for you and to dispense medicines safely.

3. Why we use it (lawful basis)

To provide clinical and pharmacy care to you, keep accurate medical and dispensing records, meet regulatory obligations (e.g. NAFDAC controlled-drug records), and — only if you consent — to send you SMS reminders. Health data is processed on the basis of your consent and for the provision of healthcare.

4. Who can see it

Only authorised staff, limited by their role. Your record is shared across our branches so any branch you visit can care for you. We do not sell your data. We do not share it with third parties except where required by law or to a facility we refer you to.

5. Your rights

Access a copy of your data, and receive it in a portable format.
Correct information that is wrong.
Withdraw consent (including for SMS) at any time.
Ask us to delete data where we are not required to keep it.
Your private patient-portal link is read-only, expires, and can be revoked on request.

6. How long we keep it

We keep medical records for the period required by Nigerian healthcare and pharmacy regulations, after which they are securely deleted or anonymised.

7. How we protect it

Access is role-based and logged; data is transmitted over encrypted connections (HTTPS) and protected by technical and organisational security measures. If a data breach occurs that risks your rights, we will notify the NDPC and, where required, you.

8. Contact

To exercise any right or ask a question, contact City Care Pharmacy at your branch. [Insert Data Protection contact / email / phone.]