Privacy Policy

1. Who we are

Keally Technologies Limited is a company registered in Nigeria and the developer of Keally, a technology platform being built to support modern community pharmacy operations and connected customer experiences.

For privacy questions, requests or concerns, contact hello@keally.io.

2. Information collected through the website

The Keally website does not currently require an account or provide a public customer sign-up facility. Information may reach us in the following ways:

• Information you send to us: such as your name, organisation, pharmacy, contact details and the contents of an email or other enquiry.
• Basic technical and usage information: where website analytics or server logs are enabled, we may receive information such as pages viewed, approximate location, browser/device information and other technical information used to operate and improve the site.

The website may load fonts or other resources from third-party providers. Those providers may receive technical information from your browser when the resource is requested.

3. Keally platform and WhatsApp Business integration

Keally is designed to allow independent businesses, including pharmacies, to connect their business systems and communication channels to the Keally platform. One intended integration is the WhatsApp Business Platform provided by Meta.

Where a business chooses to connect its WhatsApp Business Account to Keally, Keally may process information necessary to establish, operate, secure and support that integration. Depending on the configuration and services used, this may include:

• Business account information: business name, business identifiers, WhatsApp Business Account identifiers, phone number identifiers and related account metadata.
• Messaging information: messages, message metadata, delivery/read status, timestamps and other information exchanged through the connected WhatsApp Business integration.
• Customer/contact information: names, telephone numbers and other information contained in customer communications or supplied by the connected business.
• Business messaging assets: message templates and other WhatsApp Business assets that the connected business authorises Keally to manage.
• Technical information: webhook events, API activity, access/security logs, device or browser information and diagnostic information required to operate and troubleshoot the integration.

Because Keally is intended for pharmacy operations, communications processed through the platform may, depending on what a pharmacy and its customers choose to communicate, contain personal information or health-related information. Connected businesses are responsible for ensuring that they have an appropriate legal basis, notices, permissions and safeguards for the information they ask Keally to process.

Keally does not treat WhatsApp customer information as a source of data for advertising, unrelated consumer profiling or the sale of personal information.

4. How we use information

We use information only for purposes connected with operating and supporting the website and Keally services. These purposes may include:

• providing, maintaining and securing Keally and its integrations;
• enabling connected businesses to communicate with their customers through authorised channels;
• supporting pharmacy workflows such as customer communication, follow-up, refill-related communication and service notifications where configured by the business;
• authenticating users, preventing misuse and troubleshooting technical problems;
• responding to support, business and privacy enquiries;
• improving reliability, performance and security; and
• complying with applicable law, regulatory obligations and legitimate legal requests.

We do not sell personal information. We do not use customer information obtained through a connected business's WhatsApp integration for our own unrelated advertising or marketing purposes.

5. Our role and the role of connected businesses

When a pharmacy or other business connects its WhatsApp Business Account or other business systems to Keally, that business determines why customer information is being processed and which services it asks Keally to provide. Keally generally acts as a technology service provider and, where applicable, a processor/service provider acting on that business's instructions.

The connected business remains responsible for its own customer relationships, privacy notices, lawful basis for processing, permissions, retention requirements and compliance with applicable data protection and sector-specific requirements. Keally will provide reasonable assistance where required under the applicable agreement.

Keally will not intentionally use a connected business's customer data for a purpose unrelated to providing, securing or improving the services requested by that business, except where required by law or otherwise authorised.

6. When information is shared

Information may be made available only where reasonably necessary for the purposes described in this policy, including:

• The connected business: information belonging to a business's account and customer communications is made available to that business through the services it has authorised.
• Meta and WhatsApp: when the business uses the WhatsApp Business Platform, information is transmitted to or received from Meta/WhatsApp as necessary to provide the integration. Meta's own terms and privacy documentation also apply to services it provides.
• Service providers: trusted providers that help Keally host, secure, operate, monitor or support its technology may process information under appropriate contractual and security controls.
• Legal and safety requirements: information may be disclosed where required by applicable law, court order, regulatory process, or where reasonably necessary to prevent fraud, abuse, security incidents or other unlawful activity.

We do not sell personal information or provide WhatsApp customer data to third parties for their own advertising or unrelated marketing purposes.

7. Retention and deletion

We retain information only for as long as reasonably necessary for the purpose for which it was collected, to provide the requested service, to meet contractual or legal obligations, resolve disputes, maintain security and preserve appropriate business records.

For information processed on behalf of a connected business, retention and deletion will generally follow that business's instructions and the applicable service agreement, subject to legal, security and backup requirements. When a business disconnects its account, the applicable deletion process will be followed.

8. Security

Keally takes reasonable technical and organisational measures appropriate to the nature of the information it processes to protect against unauthorised access, loss, misuse, alteration or disclosure.

No internet transmission or information system can be guaranteed to be completely secure. Users and connected businesses should use appropriate account security measures and should not send information through Keally that they are not authorised to disclose or process.

9. International processing

Keally and the technology providers it uses may process information in countries other than the country in which a connected business or customer is located. Where personal information is transferred internationally, Keally will seek to use appropriate contractual, technical and other safeguards required by applicable data protection law.

10. Privacy rights and requests

Depending on the circumstances and applicable law, individuals may have rights to request access to, correction of, deletion of or restriction of processing of their personal information, and may have other rights under applicable data protection law, including the Nigeria Data Protection Act 2023.

If your information is held by Keally on behalf of a pharmacy or other connected business, the business may be the appropriate first point of contact because it determines the purposes of the processing. Keally will assist the business with legitimate requests where required under the applicable agreement.

For requests concerning information we control directly, contact hello@keally.io. We may need to verify your identity before completing a request.

11. Children

Keally's services are intended for businesses and their authorised users. Keally does not knowingly invite children to create accounts or provide personal information directly. Where a connected pharmacy communicates with a customer who is a child, the connected business remains responsible for complying with the laws and professional requirements applicable to that communication.

12. Changes to this policy

Keally may update this policy as the website and platform develop, laws change or new services are introduced. The date at the top of this policy indicates when it was last updated. Material changes will be reflected on this page and, where appropriate, communicated to affected business customers.

13. Contact

For privacy questions, data protection requests or concerns:

Keally Technologies Limited
Nigeria
hello@keally.io

This Privacy Policy describes Keally's current intended website and platform practices. It does not replace any Data Processing Agreement, customer agreement, Meta/WhatsApp terms or other contract that may apply to a particular service.