Last Updated: 1st December 2025
FortyPharma ("we," "our," or "us") values your privacy and is committed to protecting your personal and business information. This Privacy Policy explains how we collect, process, store, and share information when you use our POS platform, mobile applications, and related services. By accessing FortyPharma, you consent to the practices described here.
Information We Collect
- Personal information: name, email, phone number, and account credentials.
- Business information: shop name, location, registration details, and business type.
- Transaction data: sales records, invoices, payment history, and customer interactions.
- Device and usage data: IP addresses, browser and operating system, app usage, and session activity for analytics and security.
- Optional data you provide voluntarily, such as feedback, support requests, or customization preferences.
Legal Basis for Processing (GDPR)
We process personal data based on one or more of the following legal grounds:
- Consent: when you agree to data collection and marketing communications.
- Contractual necessity: to provide our services, process payments, and fulfill your orders.
- Legal obligations: to comply with Kenyan or international law.
- Legitimate interests: to improve our services, prevent fraud, and maintain platform security.
How We Use Your Information
- To provide, maintain, and improve our POS services across web and mobile.
- To process payments, subscriptions, invoices, and business transactions securely.
- To communicate important updates, service changes, promotional offers, and system notifications.
- To monitor, analyze, and prevent fraudulent or unauthorized activities.
- To comply with legal obligations and protect our legal rights.
Data Sharing and International Transfers
We do not sell your personal or business information. We may share your data in the following cases:
- With trusted service providers for hosting, analytics, payment processing, and support.
- With business partners or customers, only as necessary to complete transactions or fulfill contracts.
- When required by law, governmental authorities, or to enforce legal rights.
For international data transfers, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections, to maintain data privacy.
Data Retention and Security
We retain personal and business data only as long as necessary for operational, legal, or regulatory purposes. We protect your data using encryption, access controls, regular backups, and secure servers.
Your Rights (GDPR / CCPA)
- Access and obtain a copy of your personal and business information.
- Rectify or update inaccurate or incomplete information.
- Request deletion of your data ("Right to be Forgotten").
- Withdraw consent for marketing communications at any time.
- Object to processing based on legitimate interests.
- Request portability of your data in a machine-readable format.
Cookies and Tracking
FortyPharma uses cookies, local storage, and similar tracking technologies to enhance user experience, analyze trends, and store preferences. You may disable cookies in your browser settings, but some features may be limited.
Children’s Privacy
FortyPharma services are intended for business users. Accounts for minors (under 18) should be created under parental supervision. We do not knowingly collect personal information from children without verifiable consent.
Data Breach Notification
In the unlikely event of a data breach, we will notify affected users in accordance with applicable laws, including GDPR and Kenyan data protection regulations, within the legally required timeframe.
Changes to This Policy
We may update this Privacy Policy to reflect legal, regulatory, or operational changes. All updates will be posted on this page with the revision date. Continued use of FortyPharma constitutes acceptance of the updated policy.
Contact Information
For questions, data access requests, or complaints, please contact our Data Protection Officer:
- support@fortypharma.co.ke
- +254 718 505 072
- FortyHives HQ, Riverside Drive, Nairobi, Kenya