Last updated: 26 October 2026
This Privacy Policy explains how MedExpress Pharmacy collects, uses, shares and protects your personal information when you use this website, contact us or buy from us. We process personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Who we are
| Responsible party | MedExpress Pharmacy |
|---|---|
| Address | 48 B Grobler St, Polokwane Central, Polokwane, 0700, Limpopo |
| Phone | 015 880 1256 |
| 071 508 0935 | |
| Email (Information Officer) | medexpresspharmacy19@gmail.com – please mark your email “Privacy request” |
2. What information we collect
- Contact and delivery details: name, phone number, email address and delivery address.
- Account details: if you create an account, your login email and password (stored in encrypted form).
- Order details: the products you order, delivery choice, payment status and order history.
- Messages: what you send us by phone, WhatsApp, email or website chat.
- Technical information: such as IP address, browser and device type and the pages you visit, collected through cookies (see section 7).
We do not ask for or store card details on this website.
3. Health information
Information about your health, including prescriptions and some of the medicines you buy, is special personal information under POPIA. We handle it with extra care:
- We use it only to supply medicines and pharmacy services to you, and to keep the records that pharmacy law requires.
- Only authorised pharmacy staff may access it.
- We do not use it for marketing, and we do not deliberately share it with advertising or analytics services.
- Please do not send prescriptions or health details through the website chat, contact form or social media. See Prescription Assistance.
4. Why we use your information
- To process, deliver and support your orders, and to receive and confirm payment.
- To check and dispense medicines and give pharmacy advice.
- To answer your questions and complaints.
- To keep the records required by law (for example pharmacy, tax and accounting records).
- To keep this website secure and working properly.
- To send you newsletters or offers, only if you have opted in. Every message has an unsubscribe option.
We process personal information where it is needed to carry out our agreement with you, to meet a legal obligation, for our legitimate interests in running the pharmacy safely, or with your consent.
5. Who we share it with
We do not sell your personal information. We share it only where needed, with:
- our website hosting provider and the WooCommerce online-shop software, including Jetpack (Automattic), which provides site security and statistics;
- our bank, to receive and match EFT payments;
- whoever delivers your order, who receives only your name, phone number and delivery address;
- Tidio, which runs the website chat;
- Klaviyo, an email-marketing service connected to our online shop;
- Google, which provides our shop email inbox (Gmail). Newsletter sign-ups made on our website are kept on our website and emailed to this inbox;
- Google and Meta (Facebook/Instagram), for website statistics and advertising measurement, only if you accept these cookies;
- WhatsApp (Meta), if you choose to contact us on WhatsApp;
- authorities or regulators where the law requires it.
Some of these providers store information outside South Africa. We only use providers that are bound by laws or agreements that protect personal information, as POPIA requires.
6. How long we keep it
We keep personal information only for as long as we need it for the purposes above, or for as long as the law requires (for example pharmacy, tax and accounting records). After that we delete or destroy it securely, or remove anything that identifies you.
7. Cookies
Our website uses cookies. Necessary cookies make the shop work (for example your cart and login). Statistics and marketing cookies are used only if you accept them in the cookie banner. You can change your choice at any time through the cookie settings or by clearing cookies in your browser.
8. How we protect it
Our website uses an encrypted (HTTPS) connection, access to customer information is limited to authorised staff, and we keep regular backups. If we believe your personal information has been accessed without authorisation, we will notify you and the Information Regulator as POPIA requires.
9. Your rights
Under POPIA you may:
- ask whether we hold personal information about you, and ask for a copy of it;
- ask us to correct or delete information that is inaccurate, out of date, incomplete or no longer needed;
- object to our use of your information on reasonable grounds, and object to direct marketing at any time;
- withdraw consent you have given;
- complain to the Information Regulator.
Some records, such as pharmacy records, must be kept for a period set by law even if you ask us to delete them. To use your rights, email medexpresspharmacy19@gmail.com (subject “Privacy request”). We may ask you to confirm your identity first.
10. Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Regulator (South Africa): inforegulator.org.za.
11. Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.