Privacy Policy

1. Who is responsible The Pharmacy Council of Nigeria ("the Council") is responsible for the personal data processed through this portal. Privacy enquiries can be sent through the Contact page.

2. Information collected Personal information: your name, email address, phone number, account and sign-in records. Pharmacy and business information: the Superintendent Pharmacist's registration details, premises details, company and registration documents, aggregator links and online presence you provide. Uploaded documents: the documents an application requires (regulation 4(2) and regulation 8(2)). Payment information: the fee, amount, payment reference (RRR), status and verification time. Card and bank details are entered on the payment gateway's own pages and are never seen or stored by this portal. Technical information: IP address, browser type and the time of sign-ins and security events, used to protect accounts.

3. Purpose of processing To register and license electronic pharmacies, verify pharmacists and premises, process and verify fees, schedule and record inspections, decide applications, issue, verify and renew permits, send notices you need, keep the records the Regulations require, and protect the portal against misuse.

4. Lawful basis Processing is necessary for the Council's statutory functions under the Pharmacy Council of Nigeria (Establishment) Act, 2022 and the Electronic Pharmacy Regulations, 2026, and for compliance with legal obligations. Optional messages (for example WhatsApp notices) are sent only with your consent, which you can withdraw at any time.

5. Sharing Information is shared only with Council officers who need it for their role, the payment gateway (to process your payment), email delivery providers, and authorities where the law requires it. A permit's public verification page shows only the registered name, permit number, category, validity dates and status.

6. Retention Records are kept for at least five years, as regulations 30(2) and 31(2)(d) require for electronic pharmacy records, and longer where the Council's statutory functions or the law require; then securely deleted or anonymised.

7. Security Documents are stored privately and opened only by the applicant and authorised officers. Access is role-based and logged. Passwords are stored only as secure hashes, connections are encrypted, and staff sign-in needs a code sent by email.

8. Your rights Subject to the Nigeria Data Protection Act 2023, you may ask to access your data, have it corrected, object to or restrict certain processing, and withdraw consent where processing is based on consent. Some data cannot be erased while the Council must keep it for its statutory functions. You may also complain to the Nigeria Data Protection Commission.

9. Access and correction requests Send requests through the Contact page with enough detail to identify your account. The Council may ask you to confirm your identity.

10. Data breaches If a breach affects your data, the Council will act to contain it and will notify you and the regulator where the Nigeria Data Protection Act 2023 requires.

11. Cookies See the Cookie Policy.

This policy describes how the portal handles data; it is not a statement that a full data protection compliance assessment has been completed.