THE PRIVACY POLICY FOR DRUGSTOC EHUB LIMITED
HOW WE COLLECT YOUR PERSONAL DATA
We collect your personal data when you:- send us an email
- send us a job application
- call at our online or physical office
- respond to our social media messages, posts or attend our webinars
- require us to make payments to you whether under an employment contract, independent contract etc.
- when you volunteer your personal data to us for any specific reason(s).
OUR LAWFUL BASES FOR PROCESSING YOUR PERSONAL DATA
Processing of personal data means anything that is done with your personal data such as deletion, erasure, disclosure, profiling, download, transfer, modification, etc.- In accordance with the Nigerian data protection regulation 2019 (NDPR) we process your personal data for the following purposes:
Contractual basis
We may process your personal data in furtherance of any contract between us or between you and a third party for which you have mandated us to so process. This includes employment contracts, service level agreements, etc.
- Legal Obligation
Where we have a legal obligation to process your personal data, such as tax processing, pension remittance, etc.
- Consent
We shall process your personal data upon your consent. By accessing this website, you consent to our necessary cookies for enhanced user experience. You may opt out by clicking on the opt-out button below. Also, you hereby consent to receiving periodic adverts of our products. You may opt out by clicking “unsubscribe”.
- Performance of a task in the interest of the public.
- In accordance with the Nigerian data protection regulation 2019 (NDPR) we process your personal data for the following purposes:
HOW LONG WE KEEP YOUR DATA
Unless we explain otherwise to you, we will hold your personal information based on the following criteria:- For as long as we have reasonable business needs, such as managing our relationship with you and managing our operations;
- For as long as we provide goods and/or services to you and then for as long as someone could bring a claim against us; and/or
- Retention periods in line with legal and regulatory requirements or guidance.
YOUR DATA RIGHTS
Kindly note that you have the following rights:- Right to rectification:
You can request us to rectify your personal data in our possession such as your name, phone number, etc. However, we will require a valid means of identification to validate your identity.
Also, we will require rectification evidence. For instance, where you intend to change your name or age, we will require a change of name/age affidavit.
- Right of Access
You can request to know what information we hold on you. Such request can be made to our office. Your identity will need to be verified before access. We shall typically respond to your data subject access request (DSAR) within 30 days. However, where your DSAR is repetitive or requires us to dig into our archives, we reserve the discretion to charge a fair fee.
- Right to Portability:
You can request us to transfer your personal data to another entity/person. In response to any portability request, we will collate your personal data in a readable format and send them to you via email.
- Right to be forgotten:
You have a right to request the deletion of your personal data in our possession. However, same is subject to our retention schedule. We shall diligently honor this request, however, you also understand that your personal data may be backed up on remote servers nonetheless.
- Right to restrict processing
You may, by written notice to us, restrict our processing of your personal data. However, such restriction will not affect any processing validly done prior. Also, any obligation contingent on the processing will be discharged by the restriction.
- Right to lay a compliant before the National Information Technology Agency (NITDA).
You have a right to lay a complaint to our data protection officer or to the NITDA.
- Right to withdraw consent.
- Right to rectification:
-
WHO WE SHARE YOUR PERSONAL INFORMATION WITH
We share your personal data with our affiliates, subsidiary companies, and trusted third parties we work with to serve you better. We shall ensure the adherence to this policy and NDPR to the best of our ability.
-
QUESTIONS REGARDING THIS PRIVACY POLICY
If you have questions regarding this Privacy Policy, please contact us by sending an e-mail to [email protected] Please include “Privacy Policy” in the subject line of your inquiry.
-
MISCELLANEOUS
We shall collect and treat your personal data in line with the NDPR. By accessing this website or our eCommerce platform, you consent to the NDPR regardless of your country.
-
REVISION TO THIS PRIVACY POLICY
Drugstoc reserves the right and prerogative to change or modify this Privacy Policy at any time, with or without advance notice in order to reflect changes in the law and/or our privacy practices. Such changes will be effective immediately after posting, whether dated or not. We encourage you to check this notice whenever you visit our website - www.drugstoc.com, applications, premises. to ensure that you are happy and comfortable with any changes.
-
COMMENCEMENT
This privacy policy is effective from the 1st day of January 2021.