Privacy Policy

1. Who we are (Data Controller)

MOTRIZ DRUG STORE (PPB Premises Licence No. BU202600428) is the data controller responsible for your personal data. Our Superintendent Pharmacist, Christine Irungu, oversees the safe handling of health-related information.

For any privacy matter, contact our Data Protection contact at support@motrizdrugstore.co.ke or call 0721 698 371.

2. What data we collect

• Identity & contact: name, phone number, email, delivery address.
• Health data (sensitive): prescriptions you upload, medicines purchased and pharmacist notes - processed only to dispense safely and lawfully.
• Order & payment: order history and payment status (we do not store full card numbers; M-Pesa is processed by Safaricom).
• Technical: device, browser and limited cookies needed to run and secure the site.

3. Lawful basis for processing

• Contract - to process and deliver your orders.
• Consent - for marketing and for processing prescription/health data; you may withdraw consent at any time.
• Legal obligation - to meet PPB record-keeping and pharmacy law requirements.
• Legitimate interests - to secure our platform and prevent fraud.

4. How we use your data

To verify and dispense prescriptions, fulfil and deliver orders, provide customer support, meet regulatory obligations, and - only with your consent - send you offers and health information.

5. Prescription & health data

Uploaded prescriptions are encrypted in transit and at rest, accessible only to authorised pharmacists, and reviewed by a licensed pharmacist before dispensing. We retain prescription records for the period required by PPB and Kenyan pharmacy law, after which they are securely deleted.

6. Sharing your data

We share data only with: delivery partners (to deliver your order), payment providers (Safaricom M-Pesa), and regulators where legally required. We never sell your personal data.

7. Data retention

We keep personal data only as long as necessary for the purposes above or as required by law. Prescription and dispensing records are kept for the statutory retention period set by the PPB.

8. Your rights under the Data Protection Act, 2019

• To be informed of how your data is used.
• To access a copy of your data.
• To correct inaccurate data.
• To request deletion (subject to legal retention rules).
• To object to or restrict processing, and to withdraw consent.
• To lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

To exercise any right, email support@motrizdrugstore.co.ke.

9. Security

We use encryption, access controls, audit logging and the principle of least privilege to protect your data.

10. Cookies

We use essential and, with your consent, analytics cookies. See our Cookie Policy.

11. Changes

We may update this policy. The effective date above reflects the latest version.