Privacy Policy

1. About This Policy

This Privacy Policy explains how [Company Legal Name] (“Novaddi,” “we,” “our”) collects, uses, shares, and protects personal information when you use our websites, apps, and Services in Ghana, including prescription fulfillment, wellness packs, Enterprise UriScan screening, and medical supplies.

2. Scope & Roles

  1. Novaddi is the data controller for information we collect through our Services in Ghana.
  2. For features provided via the Knoxxi Health app (e.g., MediVault medication reminders), Knoxxi Health is the controller of data collected within its app. Novaddi may act as an independent controller or processor for limited data shared to fulfill orders or provide integrated services, according to your consent and our agreements.

3. Information We Collect

  1. Identification & Contact: name, date of birth, phone, email, address (Ghanaian and, where applicable, international).
  2. Account & Usage: login data, preferences, device/browser details, IP address, cookies, analytics.
  3. Health & Order Data: prescriptions, medication history (as provided to Novaddi), allergies, order history, fulfillment details, screening results (e.g., UriScan), notes you provide.
  4. Payment & Transaction: masked payment tokens, billing details (handled by PCI-compliant processors).
  5. Customer Support: communications, recordings (where lawful), feedback.
  6. Partner/Enterprise Data: organization name, role, program participation data (anonymized or aggregated where applicable).
  7. From Third Parties: clinicians, pharmacies, labs, payers (as permitted by Ghanaian law and your consent).

4. How We Use Information

  1. Provide Services: process orders, verify prescriptions, deliver goods/services, manage subscriptions, provide results and guidance.
  2. Safety & Compliance: clinical checks, fraud prevention, recalls, adverse event reporting, and other obligations under Ghanaian law.
  3. Improve & Personalize: quality assurance, analytics, product improvement, usability, troubleshooting.
  4. Communications: service messages (order status, delivery), important notices, support.
  5. Research & Insights: de-identified or aggregated insights for public health, product improvement, and enterprise programs.
  6. Legal Bases (examples): Contract: to fulfill your orders and provide Services.
    Consent: for certain health data processing, marketing, and data sharing with partners. oLegitimate Interests: to secure our Services, prevent fraud, and improve user experience. oLegal Obligation: for regulatory reporting and compliance under Ghanaian law.

5. Sharing & Disclosure

We may share personal information with:

  1. Pharmacies & Clinicians (to verify and dispense prescriptions).
  2. Diagnostics & Lab Partners (for testing and screening services).
  3. Logistics & Delivery Partners (to deliver goods within Ghana and, where applicable, cross-border).
  4. Payment Processors (to process transactions).
  5. Technology Providers (hosting, analytics, customer support tools) under Data Processing Agreements.
  6. Enterprise/Program Partners (only anonymized or aggregated insights, unless otherwise consented).
  7. Regulators & Authorities in Ghana (where legally required).
  8. Corporate Transactions (e.g., merger/acquisition) subject to safeguards.

We do not sell personal information. Targeted advertising is not used for health results or sensitive data.

6. International Transfers

If data is transferred outside Ghana (e.g., to cloud providers), we implement safeguards such as Standard Contractual Clauses, data minimization, encryption, and access controls.

7. Retention

We keep personal information only as long as necessary for the purposes described, to comply with Ghanaian law, or to resolve disputes. Retention periods vary by record type (e.g., prescriptions, invoices, clinical notes) and legal requirements.

8. Your Rights

Depending on your jurisdiction, you may have rights to:

  1. Access a copy of your data;
  2. Correct or update inaccurate information;
  3. Delete or restrict processing;
  4. Object to certain processing;
  5. Port data to another provider;
  6. Withdraw consent at any time (processing before withdrawal remains lawful).

To exercise rights, contact privacy@novaddi.com. We may need to verify your identity.

9. Children’s Privacy

Our Services are not directed to children under 18 without parental/guardian involvement. If we learn we have collected data from a child without proper authorization, we will delete it.

10. Security

We use administrative, technical, and physical safeguards, including encryption in transit and at rest, access controls, audit logs, and staff training. No system is 100% secure; please protect your account credentials.

11. Cookies & Similar Technologies

We use cookies and similar technologies for essential functionality, analytics, and remembering preferences. For details and controls, see our Cookie Policy & Preferences.

12. Third-Party Sites & Apps

Our Services may link to third-party sites or integrate with the Knoxxi Health app. Their privacy practices are governed by their own policies.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted with a new effective date

14. Contact

Privacy Office – [Company Legal Name]
Email: privacy@novaddi.com
Address: [Registered Address], Accra, Ghana