Last Updated: February 2026
Effective Date: February 2026
1. Introduction
Medicare Supply Chain (“MSC”, “we”, “us”, “our”) operates a digital pharmaceutical commerce platform accessible via mobile applications and web applications (the “Platform”).
We recognise the importance of protecting personal and business information entrusted to us. This Privacy Policy explains how and why we collect, use, share, store, and protect information when you use the MSC Platform, and the rights available to you.
MSC processes information in line with:
- Nigerian Data Protection Regulation (NDPR)
- Applicable pharmaceutical, commercial, and technology regulations
- Principles of lawfulness, fairness, transparency, purpose limitation, and data minimisation
By registering for or using the Platform, you acknowledge that you have read and understood this Policy.
2. Scope of Application
This Privacy Policy applies to:
- MSC websites
- MSC mobile applications
- Web-based ordering and account systems
- Customer support and verification processes
This Policy does not apply to:
- Third-party websites accessed via external links
- Services independently provided by logistics or payment partners
3. Categories of Information We Collect
3.1 Information You Provide Directly
A. Account Registration & Business Information
- Business name
- Business address and operating location
- Type of business (e.g. pharmacy, clinic pharmacy, manufacturer)
- Phone number and email address
- Name and role of authorised representative
B. Verification & Compliance Information
- Business licences or regulatory documentation
- Identity information of authorised representatives (where required)
- Verification status and audit records
This information is necessary to ensure all users on MSC are legitimate and authorised.
3.2 Transaction & Operational Information
- Product orders and quantities
- Order timestamps and reference numbers
- Delivery addresses
- Order status updates
- Invoices and transaction confirmations
- Dispute records and resolution history
3.3 Customer Support & Communication Data
- In-app messages
- Email correspondence
- Phone or WhatsApp support logs
- Follow-up notes and issue escalation records
These are retained to ensure service quality and accountability.
3.4 Device & Technical Information
Automatically collected information may include:
- IP address
- Device type, model, and operating system
- App version
- Browser type
- Error logs and crash reports
- Access timestamps
This data is used to maintain platform stability and security.
3.5 Location Information (Optional)
With your permission, MSC may collect location data to:
- Assist with delivery accuracy
- Suggest appropriate service availability
- Improve logistics coordination
Location access is optional and can be disabled without affecting core functionality.
4. How MSC Uses Information
MSC uses collected information strictly for legitimate business purposes, including:
- Account creation and management
- Verification of legitimate pharmacies and manufacturers
- Processing orders and coordinating fulfilment
- Enabling payments and invoicing
- Customer support and dispute resolution
- Fraud detection and platform security
- Regulatory compliance and audit readiness
- Platform improvement and performance optimisation
MSC does not sell personal or business data.
5. Legal Basis for Processing
MSC processes information based on:
- Contractual necessity (to provide Platform services)
- Legal obligations (licensing, compliance, audits)
- Legitimate business interests (security, operations)
- User consent (for optional features and communications)
6. Data Sharing & Third Parties
MSC may share limited information with trusted partners strictly on a need-to-know basis:
6.1 Payment Partners
- To process transactions securely.
- MSC does not store full payment credentials.
6.2 Logistics & Fulfilment Partners
- To deliver orders accurately.
- Limited to delivery-relevant information
6.3 Verification & Compliance Providers
- To validate licences and identities where required.
6.4 Technology Providers
- Cloud hosting providers
- Analytics services (aggregated and non-identifying where possible)
- Customer support tools
All partners are contractually required to protect information.
7. International Data Transfers
Where data is stored or processed outside Nigeria:
- MSC ensures reasonable safeguards
- Transfers occur only where operationally necessary
- Security and confidentiality obligations apply
8. Data Retention
MSC retains information only for as long as necessary to:
- Provide services
- Resolve disputes
- Meet regulatory requirements
- Maintain audit records
Data is securely deleted or anonymised when no longer required.
9. Your Rights
You may request:
- Access to your information
- Correction of inaccurate data
- Deletion (where legally permissible)
- Withdrawal of consent for optional processing
Requests can be made via MSC customer support .
10. Security Measures
MSC implements:
- Role-based access controls
- Encrypted connections (HTTPS)
- Monitoring for suspicious activity
- Restricted internal access
- Staff confidentiality obligations
No system is entirely risk-free, but MSC continuously improves safeguards.
11. Updates to This Policy
MSC may update this Policy to reflect product, legal, or operational changes. Material updates will be communicated through the Platform.
12. Contact
Email: hr@msc.store
