Zippy MediCare (“we”, “us” or “our”) is a wholesale pharmacy located in Ghana. This Privacy Policy explains how we collect, use,

disclose and protect your personal information in accordance with the Ghana Data Protection Act and—where applicable—

the European Union’s General Data Protection Regulation (GDPR).

1. Information We Collect

We collect information necessary to operate our business, provide services, and comply with legal and regulatory requirements.

This includes:

• Personal identification: name, company, job title, postal address, email, phone.
• Business credentials: pharmacy licenses, tax/VAT or registration documents.
• Transactional data: invoices, order history, payment confirmations.
• Technical data: IP address, device and browser details, cookies and analytics.

2. How We Use Your Information

We use personal information for purposes including but not limited to:

• Processing and fulfilling wholesale orders and deliveries.
• Complying with regulatory and professional obligations (e.g., Pharmacy Council, FDA Ghana).
• Billing, accounting and fraud prevention.
• Customer support and communications about your account, orders and recalls where necessary.
• Improving our products, website and services through analytics.

3. Legal Basis for Processing (GDPR)

If you are located in the EEA, we rely on one or more of the following lawful bases to process your personal data:

• Contractual necessity: to perform our contract with you or take steps at your request prior to entering into a contract.
• Legal obligation: to comply with laws and regulations.
• Consent: where you have given clear consent for a specific purpose (you may withdraw consent at any time).
• Legitimate interests: where processing is necessary for our legitimate business interests and does not unduly affect your rights.

4. Data Sharing & Disclosure

We may share personal information with:

• Regulatory and licensing authorities in Ghana (e.g., Pharmacy Council, Food and Drugs Authority).
• Logistics & delivery partners to complete shipments.
• Payment processors and banks to process transactions.
• Professional advisors (auditors, lawyers) and IT service providers.

We do not sell or rent your personal data to third parties for marketing purposes.

5. Data Retention

We retain personal data only as long as necessary to fulfil the purposes described, to meet our legal obligations, resolve disputes,

and enforce our agreements. When data is no longer required it will be securely deleted or anonymized.

6. Your Rights (GDPR)

If you are in the EEA, you have the following rights in relation to your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete personal data.
• Erasure — request deletion of your personal data (subject to legal obligations).
• Restriction of processing — limit how we use your data.
• Data portability — receive your data in a structured, commonly used format.
• Object — object to direct marketing or processing based on legitimate interests.

To exercise any right, please contact our Data Protection Officer using the contact details below. We will respond in accordance

with applicable law.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorized access, loss,

or disclosure — including access controls, encryption where appropriate, and staff training.

8. International Data Transfers

Because we operate from Ghana, your data may be processed outside the EEA. Where required by law, we will put in place

appropriate safeguards (e.g., standard contractual clauses) to ensure an adequate level of protection.

9. Cookies & Tracking

Our website uses cookies and similar technologies to operate the site, secure accounts, and analyze usage. You can manage

cookie preferences using the cookie banner or through your browser settings. Blocking cookies may affect site functionality.

10. Children’s Privacy

Our services are intended for licensed businesses and professionals. We do not knowingly collect personal data from children under 18.

11. Changes to this Policy

We may update this Privacy Policy from time to time. When changes are made we will update the Last Updated date and publish the

revised policy on this page.

12. Contact Us

If you have questions or wish to exercise your rights, contact: