Privacy Policy

Preamble and Commitment to Data Protection

This Privacy Policy (the “Policy”) describes how SY & TEES Pharmaceuticals ("the Company," "We," "Us," or "Our") collects, uses, processes, and shares the personal and business data of our Users ("You" or "Your") in connection with your access to and use of our B2B e-commerce platform and related services, including the Credit Facility.

We are committed to protecting your privacy and handling your data in a transparent manner, in strict compliance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable data protection laws. By accessing or using our Services, you acknowledge that you have read, understood, and consented to the collection and processing of your data as described in this Policy.


1. Applicable Data Protection Law: The NDPA 2023

As a company operating in Nigeria, we are primarily governed by the Nigeria Data Protection Act (NDPA) 2023. We adhere to the core principles of the Act, which mandate Lawfulness, Fairness, Transparency, Purpose Limitation, Data Minimisation, Accuracy, Storage Limitation, and Integrity and Confidentiality in all our data processing activities.


2. Data Collected and Purpose of Processing

We collect various categories of personal and business data, which are essential for fulfilling our contractual obligations, meeting regulatory requirements, and managing the Credit Facility. The data collected is processed for specified, legitimate, and lawful purposes only:

2.1 Identity and Professional Data

  • Data Elements: Name, job title, contact details (email, phone number, physical address) and business name..

  • Purpose: To register and manage your B2B account, establish communication, and verify business legitimacy (Contractual Necessity).

2.2 Regulatory and KYC Data (Know-Your-Customer)

  • Data Elements: Corporate Affairs Commission (CAC) Certificates, Professional Licenses (PCN, MDCN, etc.), and National Identity Number (NIN) of directors/shareholders.

  • Purpose: To comply with mandatory KYC and anti-money laundering (AML) laws, confirm professional eligibility, and prevent fraud (Legal Obligation & Consent).

2.3 Financial and Transaction Data

  • Data Elements: Virtual Wallet records, purchase history, order details, outstanding debt (principal), and repayment performance.

  • Purpose: To process orders, manage the Credit Facility, assess creditworthiness, and enforce recovery rights upon default (Legitimate Interest & Contractual Necessity).

2.4 Technical and Usage Data

  • Data Elements: IP address, browser type, operating system, pages viewed, time spent on the Platform, and cookie data.

  • Purpose: To ensure Platform security, analyse service usage, troubleshoot technical issues, and improve user experience (Legitimate Interest).


3. Disclosure and Sharing of Your Data

We will only disclose your data to third parties under the strict conditions required for service delivery or legal compliance.

3.1 Necessary Third-Party Sharing

We share your data with partners essential to our operations:

  • Payment & IT Service Providers: To manage Virtual Wallet transactions, data storage, hosting, and Platform maintenance.

  • Logistics Providers: To facilitate the efficient delivery and shipment of your orders.

  • No Sale of Data: We will never sell your personal data to any third party.

3.2 Legal and Recovery Sharing

You expressly consent and acknowledge that we may share your data, including your identity, financial, and KYC data, with:

  • Debt Collection Agencies: To assist in the recovery of the Outstanding Balance in the event of Default on the Credit Facility.

  • Legal/Regulatory Authorities: When legally compelled to do so by a court order, regulatory body (NDPA, NAFDAC), or government authority.


4. Your Data Protection Rights (NDPA)

Under the Nigeria Data Protection Act, you possess the following rights concerning your Personal Data:

  • Right to Be Informed: The right to be clearly informed about the data we collect (fulfilled by this Policy).

  • Right of Access: The right to request and receive a copy of your Personal Data held by the Company.

  • Right to Rectification: The right to request the correction of inaccurate or incomplete data.

  • Right to Erasure (Right to be Forgotten): The right to request the deletion of your data, subject to our overriding legal and regulatory obligations.

  • Right to Object: The right to object to the processing of your data, particularly for direct marketing purposes.

  • Right to Withdraw Consent: The right to withdraw your consent at any time, where processing is based on consent.


5. Data Security and Retention

5.1 Security Measures

We implement industry-standard technical and organizational security measures (including encryption, access controls, and firewall protection) to safeguard your data against unauthorized access, disclosure, alteration, or destruction.

5.2 Data Retention

We retain your data only for as long as necessary to fulfill the purposes for which it was collected and to meet all legal, accounting, or reporting requirements. Core business and financial records are generally retained for a minimum of six (6) years following the termination of your account or the final settlement of the Credit Facility.


6. Changes to This Policy and Contact Information

6.1 Changes to This Policy

We reserve the right to update or change this Privacy Policy at any time. We will notify you of any material changes by posting the new Policy on this page or by sending an email notification prior to the change becoming effective. Your continued use of the Platform signifies your acceptance of the updated terms.

6.2 Contact Information for Privacy Concerns

For any questions, requests, or concerns regarding this Privacy Policy or the handling of your data, please reach out to our team via info@syandteespharmaceuticals.com.


Last Updated: October 2025