Privacy Policy

How we collect, use, and protect your personal information

1. Introduction

HealtheX Africa Limited ("HealthX", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you access or use our HealthX Dawa E-Pharmacy platform, including through our website at dawa.healthxafrica.com and mobile applications.

This Policy applies to all users who browse, register, place orders, upload prescriptions, purchase medication, or interact with our online pharmacy services.

2. Legal Basis for Processing Personal Data

HealtheX Africa Limited is a Data Controller under the Kenya Data Protection Act, 2019. We process your personal data on the following legal bases:

  • To perform a contract with you (e.g., processing medication orders and deliveries)
  • With your consent (e.g., prescription uploads, marketing communications)
  • To comply with legal and regulatory obligations
  • For our legitimate business interests, provided these do not override your rights and freedoms

3. Why We Collect Your Data

We collect and process your personal data in order to:

  • Register and manage your online pharmacy account
  • Process medication orders, prescriptions, and payments
  • Verify prescriptions and ensure safe dispensing of medicines
  • Arrange delivery or collection of orders
  • Communicate with you regarding orders, queries, or support requests
  • Comply with pharmacy, medical, and regulatory obligations under Kenyan law
  • Improve our platform, services, and user experience
  • Prevent fraud, misuse, or unauthorized access

4. What Data We Collect

a) Personal Data: Full name, date of birth, gender, phone number, email address, delivery address, identification details (where legally required), account credentials (securely stored).

b) Health and Prescription Data: Uploaded prescriptions from licensed medical practitioners, medication history related to orders placed on our platform, allergies or relevant medical notes provided voluntarily, insurance information for covered medications.

c) Account and Transaction Data: Order history, invoices, payment references, customer support communications, delivery tracking information.

d) Technical and Usage Data: IP address, browser type, device identifiers, log files, timestamps, cookies and similar tracking technologies, geolocation data (for delivery purposes).

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Enable essential website and application functionality
  • Remember your preferences and login details
  • Keep track of items in your shopping basket
  • Improve platform performance and analytics
  • Prevent fraudulent activity and improve security

You may control or disable cookies through your browser settings. Disabling cookies may affect certain features of the platform.

6. Sharing of Personal Data

We may share your personal data only where necessary, including:

  • With our licensed pharmacists and healthcare professionals for prescription validation and safe dispensing
  • With delivery partners for order fulfilment
  • With payment service providers (M-Pesa) for secure transactions
  • When required or authorized by law, regulation, or court order
  • With your explicit consent for marketing or other purposes

7. Data Storage and Security

We implement appropriate technical, administrative, and physical safeguards to protect your data, including:

  • Encryption of sensitive data in transit and at rest
  • Strict access controls and authentication measures
  • Secure servers with regular security updates
  • Regular system monitoring and security audits
  • Staff training on data protection and confidentiality

8. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

  • Access your personal data held by us
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal requirements)
  • Object to processing of your data
  • Withdraw consent at any time

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

  • Phone: 0718 714 810
  • Email: pharmacy@healthxafrica.com
  • Address: Ground Floor, Eaton Place, UN Crescent Gigiri, Nairobi, Kenya

Last Updated: December 2025