Privacy Policy

1. Introduction

Molemo @7 Pharmacy ("we", "us", or "our") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Protection of Personal Information Act (POPIA) of South Africa.

2. Responsible Party

The responsible party for the processing of your personal information is:

• Business Name: Molemo @7 Pharmacy
• Responsible Pharmacist: Nhlayisi Nkuna
• Physical Address: 1219 Mokale Dr (Near Star Shop), Unit 7, Mmabatho, 2735
• Telephone: +27 18 492 0862
• WhatsApp: +27 76 203 0615
• Email: info@molemopharmacy.co.za

3. Information We Collect

We may collect the following types of personal information:

3.1 Personal Identification Information

• Full name and surname
• Identity number or passport number
• Contact details (phone number, email address)
• Physical and postal address
• Date of birth

3.2 Special Personal Information (Health Data)

As a pharmacy, we collect special personal information relating to your health, including:

• Medical history and health conditions
• Prescription information
• Allergies and medication sensitivities
• Current medications
• Medical aid information

This information is classified as "special personal information" under POPIA and is subject to additional protection measures.

3.3 Technical Information

• IP address and browser type
• Device information
• Cookies and usage data (see our Cookie Policy)

3.4 Prescription Image Data

We store prescription images uploaded through our website in secure, private cloud storage for the purpose of dispensing medication. Prescription images are never publicly accessible. Images are retained for 5 years in accordance with South African Pharmacy Council (SAPC) prescription record requirements, after which they are permanently deleted.

3.5 Medical Aid and Health Data

We collect medical aid details — including scheme name, plan, membership number, and dependant code — as well as South African ID numbers, for the purpose of processing medical aid claims through our dispensing system. This information is classified as special personal information under POPIA and is subject to the additional protections described in section 3.2 above.

3.6 E-Commerce Data

When you place orders through our online store, we collect delivery addresses, order history, and payment information. Payments are processed securely through Paystack — we never store your card details on our systems. Order data is retained for 5 years for regulatory compliance purposes.

4. Purpose of Processing

We process your personal information for the following purposes:

• Dispensing medicines and providing pharmaceutical services
• Processing and delivering prescriptions
• Providing health advice and consultations
• Managing repeat prescriptions
• Communicating with you about your orders and health
• Processing payments
• Complying with legal and regulatory requirements
• Improving our services and customer experience
• Processing and fulfilling online store orders
• Processing medical aid claims through our dispensing system

5. Legal Basis for Processing

We process your personal information based on:

• Consent: Where you have given explicit consent. Patients provide explicit consent at the point of prescription upload for the storage and processing of their prescription images and associated medical information.
• Contract: To fulfil our obligations in providing pharmacy services
• Legal Obligation: Compliance with the Pharmacy Act 53 of 1974, Medicines and Related Substances Act 101 of 1965, and Good Pharmacy Practice (GPP) requirements
• Legitimate Interest: For improving our services and communicating with you

6. Data Storage and Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure storage systems for physical records
• Encrypted digital storage
• Access controls limiting who can view your information
• Staff training on data protection
• Regular security assessments

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including:

• Prescription records: Minimum 5 years as required by the Pharmacy Act and GPP
• Prescription images: 5 years per SAPC prescription record requirements, then permanently deleted
• Order and e-commerce data: 5 years for regulatory compliance
• Financial records: 5 years for tax purposes
• General customer information: As long as you remain an active customer, plus 3 years

8. Sharing of Information

We may share your personal information with:

• Healthcare Providers: Doctors and other healthcare professionals involved in your care
• Medical Aid Schemes: For claims processing
• Regulatory Bodies: South African Pharmacy Council (SAPC), Department of Health
• Service Providers: Delivery partners, payment processors (who are bound by confidentiality agreements)
• Dispensing System (EasyRx): Patient data is processed through our dispensing system for the purpose of dispensing medication and submitting medical aid claims. Patient data is only shared with medical aid schemes for the purpose of claim processing.
• Payment Processor (Paystack): Payment information is processed securely through Paystack. We never store your card details — these are handled entirely by Paystack in compliance with PCI-DSS standards.

We do not sell your personal information to third parties for marketing purposes.

9. Cookies

Our website uses cookies to improve your browsing experience and analyse website traffic. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Your Rights Under POPIA

You have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your information (subject to legal retention requirements)
• Right to Object: Object to the processing of your information for direct marketing
• Right to Withdraw Consent: Withdraw your consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us using the details provided above.

11. Complaints

If you believe that your personal information has been processed in violation of POPIA, you have the right to lodge a complaint with:

• Our pharmacy using the contact details above
• The Information Regulator (South Africa)
  JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
  Email: enquiries@inforegulator.org.za
  Website: www.justice.gov.za/inforeg

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

• Phone: +27 18 492 0862
• WhatsApp: +27 76 203 0615
• Email: info@molemopharmacy.co.za
• In Person: 1219 Mokale Dr (Near Star Shop), Unit 7, Mmabatho