Privacy Policy

This Privacy Policy constitutes a legally binding agreement between Luna Drugs Limited (“the Company,” “we,” “us,” or “our”) and the user (“the User,” “you,” or “your”). It governs how we collect, use, store, share, and protect your personal and health-related data when you visit or make purchases on the Luna Drugs Limited website (the “Platform”).

Last Updated: June 22, 2026

1. Introduction and Consent

Luna Drugs Limited values your privacy. We understand that medical and pharmaceutical data is highly sensitive. By creating an account, uploading a prescription, making a purchase, or interacting with our Platform, you explicitly consent to the collection, processing, storage, and sharing of your personal data and sensitive personal data (health information) in accordance with this Privacy Policy.

If you do not agree with these practices, please do not use the Platform or provide us with your information.

2. Categories of Data We Collect

To provide safe, regulated pharmaceutical services, we collect several types of information:

Identity and Contact Data: Full name, billing address, delivery address, email address, and phone number.
Sensitive Personal Data (Health Information): Medical prescriptions, health conditions discussed during consultations, medication history, and any clinical notes required to safely dispense pharmaceuticals.
Transaction and Financial Data: Details about payments made on our Platform, order history, and partial payment details (all raw payment processing is securely handled by our licensed Nigerian payment gateway partners).
Technical and Usage Data: IP address, browser type, device type, operating system, and how you interact with our website via cookies and analytical tools.

3. Legal Bases for Processing Data

Under the Nigeria Data Protection Act (NDPA), we process your data based on the following legal grounds:

Performance of a Contract: To process your orders, arrange delivery, and manage your user account.
Legal and Regulatory Obligation: To verify prescriptions as required by the Pharmacy Council of Nigeria (PCN) and track controlled medications according to NAFDAC mandates.
Explicit Consent: When you voluntarily upload a clinical prescription or provide health indicators for specialized medication matching.
Vital Interests: In rare emergencies where sharing your health data is crucial to protecting your life or physical safety.

4. How We Use Your Information

We use your data for strictly defined operational and healthcare purposes:

To fulfill, verify, dispense, and deliver your pharmaceutical and over-the-counter orders.
To verify the authenticity of prescriptions with your issuing doctor or clinic.
To maintain proper regulatory registries and logs required by Nigerian health inspectors.
To optimize cold-chain logistics for temperature-sensitive medications (e.g., calling ahead to ensure someone is available to receive insulin).
To send critical health alerts, order confirmations, or notifications regarding product recalls.

5. Data Sharing and Third-Party Disclosures

We never sell or lease your medical or personal data to third-party marketers. We only share your data with verified entities under strict confidentiality agreements:

Licensed Delivery Partners: Sharing your name, phone number, and physical location strictly for order fulfillment.
Medical Professionals and Regulatory Bodies: Disclosing prescription details to the issuing physician for verification, or to NAFDAC/PCN if legally ordered during regulatory audits.
Payment Processors: Sending transactional details to secure, Central Bank of Nigeria (CBN)-licensed payment gateways.
Legal Compliance: When required by law enforcement, a court of competent jurisdiction, or under the Cybercrimes Act.

6. Data Retention and Storage

Retention Period: In accordance with standard medical record-keeping practices and Nigerian financial laws, your prescription history and transactional records will be stored securely for a minimum of seven (7) years, or as long as required to fulfill our legal and regulatory obligations.
Storage Location: Your data is stored on secure servers utilizing industry-standard encryption protocols. We take institutional measures to protect against unauthorized access, accidental loss, or data breaches.

7. Data Security Measures

We implement rigorous technical safeguards including Secure Socket Layer (SSL) encryption for data in transit, firewall barriers, and role-based access control. Only authorized pharmacists and fulfillment staff who are bound by professional confidentiality oaths are granted access to your clinical or prescription records.

While we employ enterprise-grade security, no digital system is completely infallible. In the highly unlikely event of a data breach, we will notify the Nigeria Data Protection Commission (NDPC) and affected users within the legally mandated timeframe prescribed by the NDPA.

8. Your Privacy Rights Under the NDPA

As a data subject in Nigeria, you possess the following legally enforceable rights:

Right to Access: You can request confirmation of whether we hold your personal data and obtain a copy of it.
Right to Rectification: You can request that we immediately correct inaccurate or incomplete personal information.
Right to Erasure (“Right to be Forgotten”): You can request the deletion of your account data, provided that keeping it is no longer required for legal compliance, public health tracking, or regulatory record-keeping.
Right to Object or Restrict Processing: You may object to or restrict how we process certain aspects of your data.
Right to Data Portability: You can request a digital transfer of your personal data to another platform in a structured, machine-readable format.

To exercise any of these rights, please contact our Data Protection Officer using the details provided below.

9. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience, remember your login state, and understand traffic patterns. You can choose to disable cookies through your personal browser settings; however, doing so may restrict certain functionalities of our checkout and prescription upload systems.

10. Third-Party Links

Our Platform may contain links to external health blogs, medical portals, or partner websites. Luna Drugs Limited does not control, and is not responsible for, the privacy architectures or contents of those external third-party sites. We advise you to read the privacy policies of any third-party platform you visit.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect shifting regulatory frameworks, new technologies, or changes in healthcare compliance models. When changes are made, we will update the “Last Updated” date at the top of this document. Your continued use of the platform after updates are made constitutes an acceptance of the updated terms.

12. Contact Information and Grievance Redress

If you have questions about this policy, wish to exercise your data rights, or want to lodge a privacy complaint, please contact our Data Protection Team:

Email: privacy@lunadrugs.com
Address: 40 Nile Street Maitama 900217 Abuja
Attention: Data Protection Officer (DPO)

If you believe your privacy concerns have not been adequately handled by us, you have the right under the NDPA to lodge a formal complaint with the Nigeria Data Protection Commission (NDPC) (https://ndpc.gov.ng).