Privacy Policy

Effective Date: [25 September 2025]
Last Updated: [25 September 2025]

Carexpress Pharmacy is committed to safeguarding your privacy and complying with the Data Protection Act [Chapter 11:12] of Zimbabwe (2021). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, purchase products, or interact with our services.

By using our services, you consent to the collection and processing of your personal information in line with this Privacy Policy.

  1. Information We Collect

We may collect and process the following categories of information:

a. Personal Information

  • Full name
  • National ID or passport number (where legally required)
  • Date of birth
  • Contact details (email address, phone number, delivery address)
  • Medical and prescription details (where applicable)
  • Payment information (securely handled via trusted third-party processors)

b. Technical & Usage Information

  • IP address, browser type, and device details
  • Website usage statistics (cookies, browsing behaviour, analytics)
  1. Purpose of Collection

We process your personal data only for lawful and specific purposes, including to:

  • Fulfil and deliver orders placed on our platform
  • Verify prescriptions and comply with medical regulations
  • Communicate with you regarding orders, promotions, and customer service
  • Improve our services, website functionality, and user experience
  • Prevent fraud, unauthorized transactions, or misuse of our platform
  • Comply with Zimbabwean laws and healthcare regulations
  1. Lawful Basis for Processing

We process your personal information under the following lawful bases as set out in the Data Protection Act of Zimbabwe:

  • Consent – where you provide us with clear permission (e.g., marketing emails)
  • Legal Obligation – where processing is required by law or regulation
  • Contractual Necessity – to provide services you request (e.g., processing an order)
  • Legitimate Interest – to improve our services and protect against fraud
  1. Data Sharing & Disclosure

We respect your confidentiality and do not sell or rent your information. We may share your information only with:

  • Delivery partners to ensure your order reaches you
  • Payment processors to handle secure transactions
  • Healthcare professionals for prescription verification (where required)
  • Regulatory authorities or law enforcement when required by Zimbabwean law
  1. Data Storage & Security

We implement appropriate technical and organisational measures to protect your data from unauthorized access, disclosure, alteration, or loss. All sensitive medical and payment data is encrypted and stored securely in compliance with Zimbabwe’s Data Protection Act.

  1. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by Zimbabwean law. Prescription and medical records may be retained for regulatory compliance.

  1. Your Rights Under Zimbabwe Law

As a data subject under the Data Protection Act of 2021, you have the right to:

  • Access your personal information held by us
  • Request correction or updating of inaccurate data
  • Request deletion of your personal data (where legally possible)
  • Withdraw consent for processing (where consent is the legal basis)
  • Object to the processing of your data under certain conditions
  • Lodge a complaint with the Data Protection Authority of Zimbabwe if you believe your rights are being violated

To exercise these rights, please contact us at the details provided below.

  1. Cookies & Tracking Technologies

We use cookies to improve your online shopping experience. You may adjust your browser settings to refuse cookies, but some features of our website may not function properly as a result.

  1. Children’s Privacy

Our services are intended for persons 18 years and above. We do not knowingly collect personal information from minors. If such data is collected unintentionally, we will delete it immediately.

  1. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our services. Updated versions will be posted on our website with a new effective date.

This draft is fully aligned with the Zimbabwe Data Protection Act Chapter 11:12. If Carexpress Pharmacy also plans to serve international customers, you may need to include GDPR/CCPA alignment too.