MedOasis is committed to protecting your personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR) 2019, and guidance from the Nigeria Data Protection Commission (NDPC).
1. Data We Collect
- Identity data: name, role (buyer / pharmacy / hospital / distributor), state.
- Contact data: email address, WhatsApp number.
- Health-related data: medication requests and prescriptions you choose to submit.
- Transaction data: payment transaction records, delivery confirmations.
2. Lawful Basis
We process your data on the basis of your consent, performance of a contract, legal obligation, and legitimate interest in operating a safe medication marketplace.
3. How We Use Your Data
- To verify vendors and protect buyers from counterfeit medicine.
- To process verified payments and confirm delivery.
- To respond to regulatory enquiries from NAFDAC, PCN, or NDPC.
4. Your Rights Under NDPR
- Right to access, correct or delete your personal data.
- Right to withdraw consent at any time.
- Right to data portability and to lodge a complaint with the NDPC.
5. Data Security
We use bank-grade encryption in transit and at rest, role-based access control, and routine independent audits.
6. International Transfers
Where data is processed outside Nigeria, we ensure adequate protection in line with the NDPA cross-border transfer rules.
7. Data Protection Officer
You can reach our DPO at dpo@medoasishealth.ng.