• Your shopping cart is empty!

Privacy Policy

Kelston Pharmacy Ltd

Last Updated: 16/02/2026

Kelston Pharmacy Ltd (“Kelston Pharmacy”, “we”, “our”, or “us”) is committed to protecting your privacy and ensuring that your personal data is handled in accordance with the Data Protection Act, 2019 of Kenya and applicable guidelines under the Pharmacy and Poisons Act (Cap 244).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website, mobile platforms, and pharmacy services.

1. Legal Framework

This Privacy Policy is governed by:

  • The Kenya Data Protection Act, 2019

  • The Pharmacy and Poisons Act (Cap 244)

  • Applicable regulations and guidance from the Pharmacy and Poisons Board (PPB)

  • Other relevant Kenyan laws relating to healthcare confidentiality

We process personal data lawfully, fairly, transparently, and for legitimate purposes.

2. Information We Collect

We may collect the following categories of information:

(a) Personal Identification Information

  • Full name

  • National ID/Passport number (where required)

  • Phone number

  • Email address

  • Delivery address

(b) Health and Prescription Information

  • Prescription details

  • Medical history relevant to dispensed medication

  • Doctor’s details

  • Medication records

(c) Transaction Information

  • Order history

  • Payment confirmations

  • Delivery details

(d) Technical Information

  • IP address

  • Browser type

  • Device information

  • Cookies and analytics data

3. Lawful Basis for Processing

We process your personal data based on:

  • Your consent

  • Performance of a contract (e.g., fulfilling orders)

  • Compliance with legal obligations (e.g., pharmacy record-keeping requirements)

  • Protection of your vital interests (health and safety)

  • Legitimate business interests, where not overridden by your rights

Health data is treated as sensitive personal data under the Data Protection Act and handled with enhanced safeguards.

4. How We Use Your Information

We use your personal data to:

  • Process and dispense prescriptions

  • Verify prescriptions in compliance with PPB regulations

  • Deliver medications countrywide

  • Provide pharmaceutical consultation and advice

  • Maintain legally required pharmacy records

  • Improve our website and services

  • Communicate order updates and service information

  • Comply with regulatory and statutory obligations

We do not sell your personal data to third parties.

5. Confidentiality of Medical Information

As a licensed pharmacy:

  • All patient and prescription data is handled confidentially.

  • Access to medical information is restricted to authorized healthcare personnel.

  • We maintain proper dispensing and prescription records as required under Kenyan law.

  • Staff are trained on patient confidentiality obligations.

6. Data Sharing and Disclosure

We may share your information only where necessary with:

  • Licensed medical practitioners (for prescription verification)

  • Regulatory authorities (including PPB) when legally required

  • Payment processors

  • Delivery service providers (limited to necessary delivery details)

  • IT service providers under strict confidentiality agreements

We will not disclose your health information without lawful justification.

7. Data Retention

We retain personal and prescription records:

  • For the period required under the Pharmacy and Poisons Act

  • As required by tax and financial regulations

  • For as long as necessary to fulfill the purpose for which it was collected

After the retention period, data is securely deleted or anonymized.

8. Data Security Measures

Kelston Pharmacy Ltd implements appropriate technical and organizational measures, including:

  • Secure servers and encrypted communication (SSL)

  • Restricted staff access to patient data

  • Password-protected systems

  • Regular system monitoring

  • Secure storage of physical prescription records

Despite our efforts, no system is completely secure; however, we strive to protect your data using industry best practices.

9. Your Rights Under the Data Protection Act, 2019

You have the right to:

  • Be informed about how your data is used

  • Access your personal data

  • Request correction of inaccurate information

  • Request deletion of data (subject to legal retention requirements)

  • Object to processing in certain circumstances

  • Withdraw consent where processing is based on consent

  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

Requests can be submitted using the contact details below.

10. Cookies and Website Tracking

Our website may use cookies to:

  • Improve website performance

  • Analyze user behavior

  • Enhance user experience

You may disable cookies in your browser settings, although some features may not function properly.

11. Cross-Border Data Transfers

Where data is transferred outside Kenya (e.g., cloud hosting providers), we ensure:

  • Adequate safeguards are in place

  • Contracts include data protection clauses

  • Compliance with the Data Protection Act requirements on international transfers

12. Children’s Privacy

Our services are not intended for persons under 18 years without parental or guardian supervision. We do not knowingly collect data from minors without lawful justification.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes become effective immediately upon posting on our website.

We encourage you to review this policy periodically.

14. Contact Us

For questions, complaints, or data access requests:

Kelston Pharmacy Ltd
📧 info@kelstonpharmacy.com
📧 customercare@kelstonpharmacy.com

You may also lodge a complaint with:

Office of the Data Protection Commissioner (ODPC) – Kenya