De-Pee

Effective Date: August 12, 2026 | Last Updated: August 12, 2026

At DePee Medicals (a enterprise subsidiary of De-Pee Ventures), we prioritize the confidentiality and protection of personal data provided by our customers, partners, healthcare practitioners, and platform users. This Privacy Policy outlines our data processing practices in full alignment with the Nigeria Data Protection Act (NDPA) 2023 and international data privacy regulations.

1. Legal Basis & Principles of Processing

We process personal data lawfully, fairly, and transparently. Processing is conducted on the following legal bases:

Contractual Obligation: Processing necessary for account creation, quote generation, procurement, order fulfillment, and delivery of medical equipment/consumables.
Consent: Explicit approval provided for newsletters, direct marketing, or optional functional cookies.
Legal Compliance: Fulfilling tax, regulatory, healthcare product compliance, and reporting mandates.
Legitimate Interest: Fraud prevention, system security, and customer support optimizations.

2. Information We Collect

We collect personal and corporate information through direct interactions and automated system logs:

Account & Contact Information: Full name, professional title, facility/organization name, work email address, phone number, and physical/delivery addresses.
Transaction & Quotation Data: Order histories, itemized procurement quotes, billing details, payment status receipts, and communication preferences.
Technical & System Identifiers: IP addresses, browser types, device information, authentication tokens, and session identifiers managed via secure authentication mechanisms.

3. How We Use Your Data

Your data is strictly utilized for core operational and business purposes, including:

Processing quotes, processing purchase orders, and delivering medical equipment and supplies.
Verifying healthcare facility credentials or buyer identities where regulation requires.
Managing account sessions, resetting credentials, and facilitating secure site access.
Transmitting transactional notifications, email invoices, and customer service updates.

4. Data Sharing and Third-Party Service Providers

DePee Medicals does not rent or sell your personal data. We share necessary data strictly under confidential agreements with vetted infrastructure partners:

Cloud Infrastructure & Database Hosts: Serverless host infrastructure (Vercel) and database management engines (Neon DB).
Communication Gateway Services: Email dispatch services (Resend) for transactional alerts and order notifications.
Logistics Partners: Certified couriers and freight carriers responsible for physical shipment delivery.

5. Data Retention & Security Measures

We employ robust administrative, technical, and physical safeguards—including encrypted transport protocols (HTTPS/TLS) and restricted database access control—to secure personal data against unauthorized access, destruction, or disclosure. Personal data is retained only for as long as necessary to service your account, maintain accounting/tax compliance, or settle legal disputes.

6. Your Rights Under the NDPA 2023

As a data subject, you hold statutory rights regarding your personal information:

Right to Access: Request copies of the personal data held by us.
Right to Rectification: Correct inaccurate or incomplete account information.
Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data where retention is no longer legally mandated.
Right to Object/Restrict: Restrict or object to direct marketing communications and processing actions.
Right to Regulatory Recourse: File a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been infringed.

7. Contact & Data Protection Officer

To exercise any of your rights or raise questions regarding our privacy practices, contact our Data Protection Officer:

DePee Medicals (De-Pee Ventures)
Attn: Data Protection Officer
Email: privacy@depeeventures.com
Support Direct: support@depeeventures.com