Home · Legal

Privacy Notice (POPIA)

Last updated: 17 June 2026 — DRAFT, replace with attorney-reviewed copy before launch.

1. Who we are

Pharmacy Hub is the responsible party for personal information you give us through this app, as defined in the Protection of Personal Information Act, 2013 ("POPIA").

2. Information we collect

• Account: name, email, phone number, password hash.
• Delivery: street address, suburb, GPS coordinates if you allow location.
• Health: prescription images and the medicine on each order. This is special personal information under POPIA.
• Order history: items, quantities, prices, status.

3. Why we use it

To create your account, route orders to the pharmacy you choose, let the pharmacist verify and dispense your prescription, arrange delivery or collection, and contact you about your order.

4. Who we share it with

Only the pharmacy you order from sees the items, quantities and any prescription image, together with the contact and address details needed to dispense and deliver. We do not sell your data.

5. How long we keep it

Account data: while your account is active and 12 months after closure. Prescription images and dispensing records: as long as the dispensing pharmacy is legally required to keep them (typically 5 years).

6. Your POPIA rights

You may ask us to confirm what we hold, correct it, delete it, or object to processing. Email privacy@lembacare.com. You may also complain to the Information Regulator (South Africa).

7. Security

Data is stored encrypted at rest, access is controlled by row-level security in our database, and prescription images are stored in a private bucket only the owning user and the dispensing pharmacy can read.