Privacy & Data Protection Policy
How Jumarald Pharmacy & Wellness collects, protects, uses, and encrypts your medical records, prescription uploads, and personal information.
Effective Date: January 1, 2026 · Last Updated: August 2026
1. Information We Collect
To provide safe pharmaceutical care and doorstep delivery, we collect the following categories of personal and medical data:
- Personal Identifiers: Name, phone number, email address, physical delivery address, and Ghana Digital Address.
- Health & Clinical Data: Uploaded prescription photos/PDFs, doctor notes, drug allergy history, and clinical telehealth notes.
- Transaction & Payment Data: Order history and Paystack transaction references (we do NOT store raw credit card numbers or PINs).
- AI Interaction Logs: Anonymous queries submitted to Dr. Jumarald AI for clinical quality assurance and safety auditing.
2. How We Use Your Data
Your data is processed strictly for the following purposes:
- Verifying prescriptions and dispensing genuine medicines under Superintendent Pharmacist supervision.
- Fulfilling orders and delivering cold-chain shipments to your delivery address.
- Enabling telehealth consultations with certified physicians.
- Sending SMS or WebPush order tracking updates and refill reminders.
3. Data Security & Storage Architecture
Patient data is stored in our secure, encrypted Neon PostgreSQL database with SSL/TLS transmission encryption. Passwords are salted and hashed using `bcrypt`. Prescription uploads are processed via secure memory buffers and encrypted Cloudinary CDN storage with restricted access permissions.
4. Patient Rights Under Act 843
Under the Data Protection Act 2012 (Act 843) of Ghana, you have the right to request access to your personal data, request correction of inaccurate records, or request deletion of your account and data.
To exercise your data protection rights, contact our Data Protection Officer at privacy@jumaraldpharmacy.com.