Privacy Policy

Last Updated: November 4, 2024

Basotho Medical Herbs ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Information We Collect

We collect information that you provide directly to us, including:

Personal Information: Name, email address, phone number, postal address
Account Information: Username, password, preferences
Medical Information: Section 21 authorization letters, prescriptions (for medical cannabis patients only)
Transaction Information: Payment details, order history
Technical Information: IP address, browser type, device information, cookies

2. How We Use Your Information

We use the information we collect to:

Process and fulfill your orders
Manage your account and provide customer support
Verify Section 21 authorization for medical cannabis access
Send you updates about your orders and account
Improve our website and services
Comply with legal obligations
Prevent fraud and maintain security

3. Information Sharing

We may share your information with:

Service Providers: Payment processors, delivery services, healthcare verification partners
Healthcare Providers: For Section 21 verification purposes only
Legal Authorities: When required by law or to protect our rights

We do not sell your personal information to third parties.

4. Medical Information Protection

Medical information, including Section 21 authorization letters and prescriptions, is subject to additional protections:

Stored in encrypted, HIPAA-compliant systems
Accessible only to authorized medical verification staff
Retained only as long as legally required
Never shared for marketing purposes

5. Your Rights

Under South African law (POPIA), you have the right to:

Access your personal information
Correct inaccurate information
Request deletion of your information (subject to legal requirements)
Object to processing of your information
Withdraw consent at any time

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

SSL/TLS encryption for data transmission
Encrypted storage of sensitive information
Regular security audits and updates
Access controls and authentication
Staff training on data protection

7. Cookies and Tracking

We use cookies and similar technologies to:

Maintain your session and preferences
Analyze website usage and performance
Personalize your experience

You can control cookie settings through your browser preferences.

8. Age Verification

Our services are only available to individuals 18 years of age or older. We do not knowingly collect information from individuals under 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: privacy@basothomedicalherbs.ls
Phone: +27 XX XXX XXXX
Address: Basotho Medical Herbs, Maseru, Lesotho

11. Information Officer

In accordance with POPIA, our Information Officer can be contacted at:

Email: info@basothomedicalherbs.ls