Privacy Policy

Qwiva Technologies Ltd ("Qwiva", "we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our pharmacy management platform and related services (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

We collect information you provide directly to us, information we collect automatically, and information from third-party sources.

Information you provide:

• Account registration details: name, email address, phone number, business name, and pharmacy licence number.
• Billing information: payment card details processed securely through our payment partners.
• Business data you input into the platform: inventory records, customer profiles, prescription records, sales transactions, and staff information.
• Communications: messages you send to our support team.

Information collected automatically:

• Log data: IP address, browser type, pages visited, time spent, and referring URL.
• Device information: hardware model, operating system, and browser version.
• Usage data: features used, actions taken, and session duration.
• Cookies and similar tracking technologies (see our Cookie Policy for details).

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process transactions and send related information, including purchase confirmations and invoices.
• Send administrative messages, updates, and security alerts.
• Respond to comments and questions and provide customer support.
• Analyse usage trends to understand how users interact with the platform and to develop new features.
• Detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.
• Comply with legal obligations under Nigerian law and applicable regulations, including NAFDAC requirements.

We will not sell, rent, or share your personal data with third parties for their own marketing purposes without your explicit consent.

We may share your information in the following circumstances:

• Service providers: We share data with trusted third-party vendors who perform services on our behalf, such as cloud hosting (AWS), payment processing, and email delivery. These providers are contractually bound to keep your data confidential.
• Business transfers: If Qwiva is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Safety: We may disclose information to protect the rights, property, or safety of Qwiva, our users, or the public.

Your data is stored on secure servers hosted within certified data centres. We implement industry-standard technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction.

These measures include:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
• Role-based access controls limiting who can view your data.
• Regular security audits and penetration testing.
• Multi-factor authentication for all internal systems.

We retain your personal data for as long as your account is active or as needed to provide you services. If you close your account, we will delete or anonymise your data within 90 days, unless we are required to retain it longer by law.

As a user of our Service, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to certain types of processing, including direct marketing.

To exercise any of these rights, please contact us at privacy@qwiva.io. We will respond within 30 days.

We use cookies and similar tracking technologies to enhance your experience. For full details on the types of cookies we use and how to manage them, please see our Cookie Policy.

The Service is not directed to persons under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or our data practices, please contact us: