Privacy Policy

Last updated: January 23, 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You. This policy is designed to comply with the Nigeria Data Protection Act (NDPA) 2023 and Apple App Store Guidelines (5.1.1 - Data Collection and Storage).

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.
  • Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to GigiPod Online Services LTD LLC, the developers and providers of the Prescript mobile application (iOS and Android) and related services, in partnership with Haipa Technologies Solutions Ltd (https://www.haipatech.com).
  • Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
  • Country refers to: Nigeria
  • Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Sensitive Personal Data as defined under the Nigeria Data Protection Act (NDPA) 2023, includes health data, prescription information, and medical records.
  • Service refers to the Prescript mobile application and Website.
  • Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • Website refers to Prescript, accessible from https://prescript.ng
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City
  • Usage Data

Sensitive Personal Data (Health Data)

In accordance with the Nigeria Data Protection Act (NDPA) 2023, prescription images and related health information are classified as "Sensitive Personal Data". We handle this data with the highest level of care and security:

  • Prescription Images: When You upload a prescription image, it is encrypted using industry-standard AES-256 encryption both in transit and at rest.
  • Limited Sharing: Your prescription images are only shared with the specific pharmacy You select for fulfillment. No other party has access to Your prescription data.
  • Purpose Limitation: Your health data is used solely for the purpose of facilitating prescription fulfillment and is not used for marketing, advertising, or any other secondary purposes.
  • Consent: By uploading a prescription, You provide explicit consent for Us to process this Sensitive Personal Data for the purpose of connecting You with Your chosen pharmacy.
  • Data Minimization: We only collect health information that is strictly necessary to provide our prescription sourcing service.

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Payment Processing

We use third-party payment processors to handle all payment transactions. We do not store, process, or have access to Your complete credit card, debit card, or bank account details.

Payment Processors

Our payment processing is handled by:

  • Flutterwave: A PCI-DSS Level 1 compliant payment gateway. Your card and bank details are securely processed by Flutterwave and are not stored on Our servers.
  • Monnify: A PCI-DSS compliant payment gateway. All payment credentials are handled directly by Monnify's secure infrastructure.

Important: Neither GigiPod Online Services LTD LLC nor Haipa Technologies Solutions Ltd stores Your card numbers, CVV, PIN, or complete bank account details. All sensitive payment information is handled exclusively by our PCI-DSS compliant payment partners.

For information about how these payment processors handle Your data, please refer to their respective privacy policies:

  • Flutterwave Privacy Policy: https://flutterwave.com/ng/privacy-policy
  • Monnify Privacy Policy: https://monnify.com/privacy-policy

Analytics and Tracking

We use analytics services to understand how users interact with our Service and to improve user experience.

Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies and similar technologies to collect and analyze information about Your use of the Service. This includes:

  • Pages visited and time spent on each page
  • Device type, operating system, and browser information
  • Geographic location (country/city level)
  • Referral sources (how You found our Service)
  • User interactions and navigation patterns

Google Analytics data is used to:

  • Improve our Service and user experience
  • Understand user behavior and preferences
  • Identify and fix technical issues
  • Measure the effectiveness of our features

You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on available at: https://tools.google.com/dlpage/gaoptout

For more information on Google's privacy practices, please visit: https://policies.google.com/privacy

Data Security

The security of Your Personal Data is important to Us. We implement appropriate technical and organizational measures to protect Your data, including:

  • AES-256 encryption for sensitive data at rest
  • TLS 1.3 encryption for data in transit
  • Regular security audits and vulnerability assessments
  • Access controls and authentication mechanisms
  • Secure cloud infrastructure with industry-leading providers

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Data Retention

We retain Your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Health data and prescription images are retained for the duration required to complete Your order and for a reasonable period thereafter to handle any disputes or inquiries, after which they are securely deleted.

Your Data Protection Rights (NDPA 2023)

Under the Nigeria Data Protection Act 2023, You have the following rights:

  • Right of Access: You have the right to request copies of Your Personal Data.
  • Right to Rectification: You have the right to request correction of inaccurate Personal Data.
  • Right to Erasure: You have the right to request deletion of Your Personal Data under certain conditions.
  • Right to Restrict Processing: You have the right to request restriction of processing of Your Personal Data.
  • Right to Data Portability: You have the right to request transfer of Your data to another organization.
  • Right to Object: You have the right to object to processing of Your Personal Data.
  • Right to Withdraw Consent: You have the right to withdraw consent at any time where We relied on consent to process Your Personal Data.

Account Deletion

In accordance with App Store guidelines and the NDPA 2023, You have the right to request permanent deletion of Your account and all associated data, including prescription history. To request account deletion, please visit our Account Deletion page. Deletion requests are processed within 30 days.

Children's Privacy

Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us.

Changes to This Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise Your data protection rights, You can contact us: