Who we are
Janora Pharmacy Limited(“Janora”, “we”, “us” or “our”) is the data controller for the personal information described in this policy. We are a community pharmacy registered to operate in Benin City, Edo State, Nigeria, with branches at Oluku and Ekosodin.
Our pharmacists are licensed by the Pharmacists Council of Nigeria (PCN) and we handle medicines under the regulatory framework of the National Agency for Food and Drug Administration and Control (NAFDAC).
Scope
This policy covers personal information you give us when you visit a branch, message us on WhatsApp, call our phone numbers, send us an email, fill out the contact form on this website, or otherwise interact with our services.
Information we collect
Depending on how you reach us, we may collect:
- Identity & contact data: name, phone number, email address, WhatsApp number.
- Health information: prescriptions, medication history, point-of-care test results (e.g. malaria, blood sugar, blood pressure), and notes from any consultation with our pharmacists. This is sensitive personal data under Section 30 of the Nigeria Data Protection Act, 2023 (NDPA).
- Transaction data: items purchased, amounts paid, receipt numbers, and the branch where the transaction occurred.
- Message content: photographs of prescriptions you send, questions you ask, and our replies on WhatsApp, email or our website form.
- Website data: your IP address, browser type, pages visited, referring URL and timestamps, collected automatically through your visit to janorapharmacy.com.
How we use it
We use your information to:
- dispense medicines safely and counsel you on their use;
- confirm WhatsApp orders, prepare items for pickup, and follow up where clinically appropriate;
- keep accurate dispensing and point-of-care testing records as required by Nigerian pharmacy regulations;
- process payments, issue receipts and meet our tax and accounting obligations;
- answer enquiries you send to us by email, phone, WhatsApp or the contact form;
- keep our website secure and improve how it works.
We do not sell your personal information. We do not use your health information for advertising.
Lawful basis
Under the NDPA, we rely on the following lawful bases:
- Consent — when you send us a prescription on WhatsApp, fill out our contact form, or sign up for follow-up calls.
- Performance of a contract — when you buy medicines or services from us.
- Legal obligation — to comply with PCN, NAFDAC, tax and other regulatory record-keeping requirements.
- Vital interests — to protect your health in an emergency.
- Legitimate interest — to keep our records accurate, prevent fraud, and run our business safely, where this does not override your rights.
How long we keep it
We keep dispensing and clinical records for the period required by the PCN and NAFDAC — typically a minimum of five (5) years from the date of the transaction. Financial records are kept for at least six (6) years to comply with Nigerian tax law. Routine WhatsApp enquiries and contact form messages are kept for up to two (2) years unless we need them longer for an active matter.
When the retention period expires, we securely delete or anonymise the records.
How we keep it safe
Paper prescriptions and dispensing logs are stored in locked cabinets accessible only to authorised pharmacy staff. Digital records are stored on access-controlled systems with role-based permissions and routine backups. WhatsApp messages travel over WhatsApp's end-to-end encryption.
No system is perfectly secure. If we ever experience a personal-data breach that is likely to result in risk to your rights, we will notify the Nigeria Data Protection Commission (NDPC) within 72 hours and inform affected individuals where required.
Your rights
Under the NDPA, you have the right to:
- Access a copy of the personal data we hold about you;
- Rectify information that is inaccurate or out-of-date;
- Erase your information, subject to our regulatory record-keeping duties;
- Restrict or object to certain processing;
- Withdraw consent at any time where we relied on your consent;
- Data portability where technically feasible;
- Lodge a complaint with the Nigeria Data Protection Commission.
To exercise any of these rights, contact us using the details in section 14. We will respond within 30 days, in line with the NDPA.
Children
We do not knowingly market our website to children under 13. Where a parent or guardian uses our services on behalf of a minor, we treat the minor's health information with the same standard of care described in this policy.
WhatsApp & cookies
WhatsApp is operated by Meta Platforms, Inc. and has its own privacy policy. We have no control over how WhatsApp itself processes message metadata. If this is a concern, please use phone, email or an in-person visit instead.
Our website uses only essential cookies needed to load the site and remember basic preferences. We do not run advertising trackers and do not share visitor data with third-party advertisers. If we ever add analytics, we will update this policy and request your consent first where required.
Complaints
If you believe we have mishandled your personal data, please contact us first at janorapharmacy@gmail.com. If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission via ndpc.gov.ng.
Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the latest change. Material changes will be highlighted on this page for at least 30 days.
Contact us
Questions, requests or concerns? Reach our team:
- Email: janorapharmacy@gmail.com
- Phone (Oluku): +234 703 950 1306
- Phone (Ekosodin): +234 802 493 0656
- Post: Janora Pharmacy Limited, Queens Junction, Km 10 Benin Lagos Express Road, Oluku, Benin City, Edo State, Nigeria.
See also our Terms of Service.