Introduction
At IntraHub Technologies Ltd., we understand the importance of privacy and confidentiality in delivering our pharmacovigilance and regulatory affairs services. This policy applies to all data we collect from our clients, website users, and partners. We ensure that all personal information is processed lawfully, fairly, and transparently. By interacting with us, you consent to the collection and use of your information in accordance with this Privacy Policy.
We may update this policy periodically to reflect changes in legal obligations or our business operations. Any changes will be posted on our website, and where required, we will notify you directly. This policy explains how we handle your information, your rights under the NDPR, and how you can contact us regarding your data.
Information We Collect
We collect personal and non-personal information to deliver our services effectively. This data may be collected directly from you, automatically when you interact with our website, or through third parties. Information we collect includes:
- Personal Identifiable Information (PII): This includes your name, address, phone number, email, job title, and company details when you contact us or engage in our services.
- Transaction Data: Information related to payments, service requests, and billing.
- Technical Data: When you interact with our website, we automatically collect data such as your IP address, browser type, device information, and website usage patterns.
- Communication Data: Any correspondence you share with us via email, web forms, or other communication channels.
- Sensitive Data (When Applicable): Information related to pharmacovigilance processes, including adverse drug reactions (ADRs) and health-related data required to meet regulatory obligations.
How We Collect Information
We collect your personal data through various means to ensure the effective delivery of our services. These include:
- Direct Collection: Information you provide by filling out forms, subscribing to our services, participating in our training programs, or engaging with us for pharmacovigilance and regulatory affairs.
- Automated Collection: We use cookies and tracking technologies to gather data on how you interact with our website. This helps us improve user experience and ensure compliance.
- Third-Party Sources: We may receive information from regulatory bodies (such as NAFDAC), business partners, and publicly available databases.
How We Use Your Information
We use the information we collect to deliver services, maintain compliance, and improve user experiences. Specifically, your information is used to:
- Service Delivery: To provide pharmacovigilance and regulatory affairs services, including ADR reporting, regulatory compliance support, and training.
- Regulatory Compliance: To meet legal obligations under the Nigeria Data Protection Regulation (NDPR) and ensure compliance with regulatory bodies such as NAFDAC and PCN.
- Communication: To respond to inquiries, provide updates about our services, and share relevant regulatory news.
- Marketing and Promotions: With your consent, we may send you newsletters, promotions, and industry insights related to our services.
- Security and Risk Management: To protect our systems, investigate potential breaches, and ensure the confidentiality of your data.
Legal Basis for Data Processing
We process personal data under the following legal grounds outlined by the Nigeria Data Protection Regulation (NDPR):
- Consent: We rely on your explicit consent for marketing communications, cookie usage, and processing sensitive health information.
- Contractual Obligation: When you engage with our services, we process your data to fulfill contractual commitments.
- Legal Compliance: We are required to process specific data to comply with regulatory mandates and industry standards.
- Legitimate Interests: We process data to improve our services, enhance cybersecurity, and ensure client satisfaction.
Data Sharing and Third-Party Disclosure
We do not sell or rent your personal data. However, in the course of providing our services, we may share your data with:
- Regulatory Authorities: We share data with government agencies and regulatory bodies when required for legal and compliance purposes.
- Service Providers: We may engage third-party vendors to assist with technical operations, payment processing, and data management under strict confidentiality agreements.
- Legal Compliance: We may disclose information when required by law enforcement or regulatory authorities to comply with legal obligations.
Data Security Measures
We take the security of your information seriously and have implemented robust measures to protect your data from unauthorized access, misuse, or alteration. Our security framework includes:
- Encryption: We use SSL (Secure Socket Layer) technology to encrypt data transmission.
- Access Control: Only authorized personnel have access to sensitive data.
- Data Minimization: We only collect data that is necessary for business and regulatory purposes.
- Regular Audits: Periodic internal reviews ensure ongoing compliance with the NDPR.
Your Data Protection Rights
Under the Nigeria Data Protection Regulation (NDPR), you have specific rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You may correct inaccurate or incomplete data.
- Right to Erasure: You can request the deletion of your data when no longer necessary.
- Right to Restriction: You can request the limitation of data processing under certain conditions.
- Right to Object: You may object to direct marketing communications.
- Right to Data Portability: You can request the transfer of your data to another service provider.
If you wish to exercise any of these rights, please contact us via privacy@intrahubpharma.com.
Data Retention Policy
We retain your personal data only as long as necessary to fulfill service obligations and comply with legal requirements. Once the data is no longer needed, we securely delete or anonymize it. Our retention periods include:
- Service Data: Retained for the duration of our client relationship and an additional period as required by law.
- Marketing Data: Retained until you withdraw your consent.
- Regulatory Compliance: Retained for a minimum period to meet legal obligations.
International Data Transfers
Where it is necessary to transfer your personal data outside Nigeria, we ensure appropriate safeguards, such as:
- Data Processing Agreements (DPAs) with third-party providers.
- Ensuring compliance with relevant cross-border data transfer regulations.
Cookies and Tracking Technologies
We use cookies to enhance your website experience and analyze visitor patterns. You may control cookie preferences through your browser settings.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website and, where appropriate, communicated directly to you. We encourage you to periodically review this policy to stay informed about how we are protecting your information.