Privacy Policy

1. Introduction

COC Healthcare Pharmaceutical Limited (“COC Healthcare”, “we”, “our”, or “us”) is committed to protecting the privacy, confidentiality, and security of all personal information entrusted to us.
This Privacy Policy explains how we collect, use, store, share, and safeguard personal data when you interact with our website, digital platforms, products, and pharmaceutical services.

This Policy complies with the Nigeria Data Protection Regulation (NDPR), the Nigeria Data Protection Act 2023, and applicable healthcare and pharmaceutical regulatory requirements.

2. What Information We Collect

We collect the following categories of information:

2.1 Personal Identification Data

• Full name
• Email address
• Phone number
• Contact details

2.2 Delivery & Location Information

• Delivery address
• Business address (for wholesale customers)
• Contact person details

2.3 Prescription & Healthcare Information (Sensitive Data)

Collected only when required for prescription validation or regulatory compliance:

• Prescription details
• Prescribing healthcare provider information
• Patient identifiers (where applicable)

2.4 Business Verification (KYB) Information

• Corporate documents
• Pharmacist licence details
• PCN registration information
• Business owner/representative identity documents

2.5 Payment Information

• Payment confirmation details
• Transaction reference numbers
  (Note: We do not store card details. All payments are processed securely by third‑party payment processors.)

2.6 Automatically Collected Data

• Device information
• Browser type
• IP address
• Cookies and usage analytics

3. Legal Basis for Processing

We process your data under the following lawful bases:

• Consent — when you voluntarily provide information
• Contractual necessity — to fulfil orders and deliver services
• Legal obligation — PCN, NAFDAC, tax, and regulatory compliance
• Legitimate interest — fraud prevention, service improvement, business operations

4. How We Use Your Information

Your information is used to:

• Process, fulfil, and deliver pharmaceutical orders
• Verify identity, business credentials, and regulatory eligibility
• Validate prescriptions in line with healthcare regulations
• Provide customer support and respond to enquiries
• Improve our website, services, and product offerings
• Maintain accurate business and regulatory records
• Comply with PCN, NAFDAC, NDPR, and other legal requirements

5. Information Sharing & Disclosure

We do not sell or rent your personal data.

We may share your information only with:

5.1 Service Providers

• Logistics and delivery partners
• IT and cloud service providers
• Payment processors

5.2 Healthcare Providers

• For prescription verification
• For regulatory compliance
  (Only with your consent or as required by law.)

5.3 Regulatory & Legal Authorities

• PCN
• NAFDAC
• Law enforcement
• Tax authorities
• Data protection authorities

5.4 Business Verification Partners

• KYB/KYC verification vendors

All third parties are bound by confidentiality and data‑protection obligations.

6. Data Security Measures

We implement industry‑standard technical and organizational measures, including:

• Encrypted data transmission (SSL/TLS)
• Secure servers and firewalls
• Access control and role‑based permissions
• Regular security audits
• Staff confidentiality and data‑protection training
• Secure data retention and disposal protocols

7. Data Retention

We retain personal data only for as long as necessary to:

• Fulfil the purpose for which it was collected
• Meet legal, regulatory, and tax obligations
• Maintain accurate pharmaceutical transaction records

Prescription and healthcare data are retained in accordance with PCN and healthcare retention guidelines.

8. Your Rights Under NDPR & NITDA Act

You have the right to:

• Access your personal data
• Request correction of inaccurate information
• Request deletion (where legally permissible)
• Withdraw consent at any time
• Object to processing
• Request data portability
• Opt‑out of marketing communications

To exercise these rights, contact our Data Protection Officer (DPO).

9. Cookies & Tracking Technologies

We use cookies to:

• Improve website functionality
• Analyse usage patterns
• Enhance user experience

You may disable cookies through your browser settings, though some features may not function properly.

10. Children’s Privacy

Our services are intended for adults and licensed healthcare professionals.
We do not knowingly collect data from individuals under 18 years old.

11. International Data Transfers

Where data is transferred outside Nigeria, we ensure:

• Adequate data‑protection safeguards
• Compliance with NDPR cross‑border transfer requirements

12. Changes to This Privacy Policy

We may update this Policy periodically.
The “Last Updated” date will reflect the most recent revision.

13. Contact Information

For questions, concerns, or data‑rights requests, contact:

Data Protection Officer (DPO)
COC Healthcare Pharmaceutical Limited
Plot 5, Onikoro Junction, Apapa Road, Moniya, Ibadan
Email: cochealthcare@gmail.com
Phone: +234 815 333 7489