Your privacy matters to us.

This Privacy Policy explains how AccessMeds collects, uses, stores, shares, protects, and retains personal, business, operational, and platform data when you create an account, use our website, place orders, manage inventory, make payments, request support, participate in a project, or otherwise interact with AccessMeds.

AccessMeds is a healthcare supply and business operations platform for pharmacies, PPMVs, clinics, hospitals, distributors, suppliers, project vendors, and other approved users. Because the platform supports regulated healthcare supply operations, we may collect both personal information and business information needed to verify users, manage transactions, support projects, and maintain platform security.

By creating an account, submitting information, or using AccessMeds, you acknowledge that you have read this Privacy Policy and understand how your information may be processed.

This policy applies to information processed through:

• The AccessMeds website and web application
• Vendor, supplier, driver, and administrator dashboards
• Registration, onboarding, verification, and project enrolment
• Catalogue, ordering, inventory, POS, finance, and wallet tools
• Support forms, emails, calls, and service communications
• Reports, analytics, notifications, and operational workflows

This policy does not replace any additional written agreement, project-specific data notice, grant or donor requirement, supplier agreement, or service contract that may apply to a specific programme or transaction.

We collect information directly from you, from your organization, from platform activity, from project administrators where applicable, and from service providers needed to operate the platform.

Account and identity information

• Name, email address, phone number, and login credentials
• Role, account type, user permissions, and account status
• Facility or business name and business type
• Contact person details and organization contact details

Business and verification information

• Business registration number, tax ID, license details, and permits
• Uploaded compliance, onboarding, or verification documents
• Bank account details, settlement details, and payment references
• Business address, city, state, postal code, and operating location

Operational and transaction data

• Orders, carts, invoices, receipts, payments, refunds, and credits
• Catalogue activity, product requests, pricing, and stock movements
• Inventory levels, adjustments, expiry alerts, and POS sales data
• Delivery addresses, delivery status, assigned drivers, and proof of delivery
• Customer records entered by vendors for business operations

Project and programme information

• Project codes used during registration or onboarding
• Project participation status, eligibility, and assigned project group
• Project-related orders, inventory, deliveries, reports, and performance data
• Compliance checks, activity history, and project support records

Technical and usage information

• IP address, browser type, device type, operating system, and session data
• Pages visited, buttons clicked, features used, and error logs
• Approximate location derived from device, network, or supplied address data
• Cookies, local storage identifiers, and similar platform technologies

Support and communications

• Messages submitted through support or contact forms
• Email, phone, or chat correspondence with our support team
• Feedback, complaints, dispute records, and resolution notes

If a vendor registers with a project code, is added to a project, or participates in a project supported through AccessMeds, certain project-related data may be accessible to authorized project administrators, project owners, programme managers, sponsors, donors, implementation partners, or other approved project stakeholders.

Project access is limited to inventory data and inventory-related activity that is relevant to the project. This may include:

• Product names, product categories, pack sizes, SKUs, and item identifiers
• Opening stock, current stock, closing stock, and available quantity
• Stock received, stock issued, stock adjusted, and stock counted
• Low-stock, out-of-stock, overstock, expiry, and reorder indicators
• Project-related inventory summaries needed for stock visibility and planning

Project stakeholders may use this information to manage programme implementation, monitor stock availability, verify eligibility, support inventory planning, resolve inventory-related issues, meet reporting obligations, and improve healthcare supply outcomes.

Project access does not, by itself, include payment records, credit records, subsidy records, reimbursement records, customer records, non-inventory business records, or private account credentials.

Project stakeholders are expected to access only information relevant to their role and project purpose. AccessMeds may restrict, audit, or revoke project access where needed to protect users, comply with agreements, or maintain platform security.

We use information to operate, secure, improve, and support AccessMeds.

• Create, verify, administer, and secure user accounts
• Validate business identity, eligibility, project codes, and onboarding status
• Process orders, payments, credit requests, invoices, and deliveries
• Manage catalogues, inventory, POS activity, reports, and operational dashboards
• Provide customer support, respond to complaints, and resolve disputes
• Send service notifications, security alerts, policy updates, and operational messages
• Detect fraud, misuse, unauthorized access, payment issues, or policy violations
• Generate analytics, reports, and insights for platform and project performance
• Comply with legal, regulatory, tax, accounting, audit, and contractual obligations

We do not sell your personal information.

We process information only where we have a reasonable basis to do so, depending on the context in which the information is collected and used. This may include:

• Providing services you or your organization requested
• Taking steps needed to create or manage your account
• Performing obligations under platform, supplier, project, or service agreements
• Complying with applicable law, audit, tax, accounting, or regulatory obligations
• Protecting legitimate business, security, fraud prevention, and operational interests
• Using your consent where the platform specifically asks for consent

We share information only where necessary to operate the platform, fulfil transactions, support projects, meet obligations, or protect users and the platform.

• With suppliers, vendors, warehouses, and fulfilment partners for order processing
• With delivery partners and drivers for logistics and delivery coordination
• With payment processors, banks, wallet providers, and finance partners for payments
• With project administrators and approved project stakeholders as described above
• With cloud hosting, storage, analytics, email, support, and security service providers
• With auditors, professional advisers, insurers, or compliance reviewers when required
• With regulators, courts, law enforcement, or government authorities where legally required
• With another organization as part of a merger, restructuring, financing, or transfer of service operations, subject to appropriate safeguards

Service providers and project stakeholders are expected to protect the information they access and use it only for authorized purposes.

Vendors and other users may enter customer, patient-adjacent, staff, driver, or third-party contact information into AccessMeds for invoices, POS sales, deliveries, support, or operational records.

Users are responsible for ensuring they have a valid reason to enter that information into AccessMeds, for keeping it accurate, and for using it only for lawful business purposes. AccessMeds processes this information to provide the requested platform functions and support related operations.

AccessMeds may use cookies, local storage, session storage, and similar technologies to keep users signed in, remember preferences, protect accounts, store temporary workflow data, improve performance, and understand how the platform is used.

You can control some cookie settings through your browser. Disabling certain technologies may affect login, checkout, offline features, dashboard behavior, or other platform functions.

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

• Authentication and role-based access controls
• Encrypted network communication where supported
• Secure cloud storage and controlled document access
• Access reviews, monitoring, logging, and incident response processes
• Separation of user roles

No digital platform can guarantee absolute security. Users should keep passwords confidential, use strong credentials, restrict staff access, and notify us promptly if they suspect unauthorized account activity.

We retain information for as long as reasonably necessary for the purposes described in this policy, including to provide services, maintain transaction records, support projects, comply with legal and accounting obligations, resolve disputes, enforce agreements, and protect platform integrity.

Retention periods may differ depending on the type of information, the account status, transaction history, project requirements, legal obligations, audit needs, and operational requirements. When information is no longer needed, we may delete, anonymize, archive, or restrict it according to applicable requirements and technical limits.

Depending on your location, role, relationship with AccessMeds, and applicable law, you may have the right to:

• Request access to information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion or restriction where legally available
• Object to certain processing activities
• Withdraw consent where processing is based on consent
• Request information about how your data is shared
• Manage communication preferences where optional communications are used

Some requests may be limited where information is needed for transactions, security, audits, legal obligations, project reporting, dispute resolution, or legitimate platform operations.

AccessMeds may use cloud, hosting, analytics, communication, and support providers that process or store information in Nigeria or in other countries. Where information is processed outside your country, we take steps intended to protect it according to this policy, applicable agreements, and relevant legal requirements.

AccessMeds is intended for business and operational use by authorized users. It is not directed to children, and users should not submit children's personal information unless it is strictly necessary for a lawful business, healthcare supply, delivery, support, or compliance purpose.

We may update this Privacy Policy from time to time to reflect changes in our platform, services, projects, legal obligations, or data practices. When we make material changes, we may notify users through the platform, by email, or through other appropriate channels.

Continued use of AccessMeds after an updated policy becomes effective means you acknowledge the updated policy.

If you have questions, requests, complaints, or concerns about this Privacy Policy or how AccessMeds handles information, contact us at:

Email: support@sfhaccess.com
Phone: +234 815 554 0008, +234 815 554 0007