Privacy policy

Who we are

CorrectMED makes receiving software for medicine. It helps pharmacy chains, hospital groups, distributors and manufacturers check deliveries as they arrive. In this policy, “we” and “us” mean CorrectMED.

We decide how the personal data described here is used, which makes us the data controller under the Nigeria Data Protection Act 2023 (the Act).

What this policy covers

This policy covers this website and the details you send us through the pilot request form. It does not cover the receiving data of organisations that run a pilot; that is covered by a separate agreement, described in pilot customers and receiving data below.

What the pilot form collects

When you request a pilot, we collect:

• your name, work email and role;
• your organisation, its type, the number of branches or warehouses and the city;
• anything you write in the message box;
• your agreement that we can use these details to reply, and the time you sent the request.

Please do not include patient information or other sensitive personal data in the message. We only need to know about your organisation and what it receives.

What we collect when you visit

Like any website, this one is delivered by servers that keep technical logs: your IP address, browser type, the pages requested and the time. These logs are used to deliver the site, fix problems and keep it secure.

The public pages of this site do not use advertising or analytics cookies.

Why we use it, and on what basis

The Act requires a lawful basis for each use of personal data. Ours are:

• Replying to your request and arranging a pilot. Based on your consent, given with the tick box on the form, and on steps you asked us to take before a possible agreement.
• Keeping a record of our pilot discussions. Based on our legitimate interest in running our business and remembering what we agreed with you.
• Running and securing the website. Based on our legitimate interest in keeping the site available and safe.
• Meeting legal obligations. Where a law requires us to keep or share information.

We do not add you to a mailing list or send you marketing emails unless you ask us to.

How long we keep it

• Pilot requests are kept while we discuss a pilot with you. If no pilot follows, we delete the request within 12 months of our last contact. If a pilot goes ahead, the contact details become part of the records of that pilot agreement.
• Technical logs are kept only as long as our hosting providers need them for security and troubleshooting.

Who processes it

We use service providers for cloud hosting and storage of this website and of pilot requests, and for email when we reply to you. They process the data only on our instructions, under written terms that require them to protect it.

Some providers may store or process data outside Nigeria. When that happens, we only transfer it in the ways the Act allows, with safeguards such as contractual protections.

We do not sell personal data, and we do not share it with anyone for their own marketing.

How we protect it

Data sent through this site is encrypted in transit and stored encrypted at rest. Access to pilot requests is limited to the people who handle them.

Your rights

Under the Act you can:

• ask what personal data we hold about you and get a copy of it;
• ask us to correct it, or to delete it;
• ask us to restrict how we use it, or object to a use based on our legitimate interests;
• ask for your data in a portable format;
• withdraw your consent at any time, without affecting what we did with it before;
• complain to the Nigeria Data Protection Commission.

We may ask you to confirm your identity before we act on a request, and we reply without undue delay.

Pilot customers and receiving data

When an organisation runs a pilot, the data it puts into CorrectMED (photos of packs and delivery notes, receiving records, and the accounts of the people who use it) is covered by a separate data processing agreement signed with that organisation. Under that agreement the organisation decides what is processed and how long it is kept, and we act on its instructions.

Changes to this policy

We update this page when our practices change. If a change is significant and we hold your details, we tell you by email before it applies. See also our terms of use.