Privacy Policy

1. Introduction

Welcome to the Pharmacy Association Client Portal ("App", "Website", or "Service"), operated by the All Island Private Pharmacy Owner Association ("we", "us", or "our"). We respect your privacy and are committed to protecting the personal and professional data of our registered pharmacy owners and members.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our mobile application or web portal.

2. Information We Collect

When you register, log in, or use our mobile WebView app or portal, we may collect the following types of information:

• Pharmacy & Business Information: Business Name, Business Registration Number, Pharmacy Address, District, and Business Classification (Wholesale/Retail).
• Drug License Records: Drug License Number, License Issue Date, and License Validity Period (From/To dates).
• Contact & Personal Information: Owner Full Name, Owner Contact Number, Email Address, Contact Person Name, and Phone Number.
• Authentication & Security Data: Passwords (encrypted), Phone Numbers used for SMS OTP verification, and OTP verification logs.
• Payment Records & Receipt Uploads: Payment transaction records, membership fee statuses, and images of uploaded payment receipts (bank transfer/deposit slips).
• Technical & Device Data: IP addresses, browser/WebView user agent strings, login timestamp logs, and app session identifiers.

3. How We Use Your Information

We use the collected information strictly for official association operations, including:

• Verifying and managing official membership records of pharmacy owners.
• Processing annual membership payment status and verifying uploaded payment receipts.
• Sending critical account authentication OTPs via SMS (Send.lk integration).
• Enabling District Treasurers and System Administrators to review and approve membership renewals.
• Maintaining security, preventing fraudulent registrations, and ensuring system auditability.

4. App Permissions Required

Our mobile WebView application requests access to specific device capabilities solely to fulfill functional features:

• Camera / Storage / Photos Permission: Required when you choose to take a photo of a payment deposit slip or select a receipt image from your gallery for membership fee submission.
• Internet Access: Required to establish a secure connection with our backend servers.

We do NOT access your contacts, location, microphone, or background storage without your explicit consent.

5. Information Sharing and Disclosure

We do NOT sell, rent, or trade your personal or business information to third parties or marketing advertisers. Your information is shared strictly under the following limited circumstances:

• Authorized Association Officials: Designated District Treasurers and System Administrators for member verification and payment reconciliation.
• SMS Gateway Providers: Third-party SMS provider (Send.lk API) strictly to deliver one-time OTP verification codes to your phone.
• Legal & Regulatory Authorities: When required by Sri Lankan law, judicial processes, or regulatory directives.

6. Data Security and Storage

We implement robust technical and organizational security measures to safeguard your personal data:

• All sensitive communication occurs over HTTPS / SSL encryption.
• Passwords and OTPs are stored securely using strong cryptographic hashes.
• Receipt uploads are validated and stored in secure server storage with restricted access.
• Protection against brute-force login attempts through rate-limiting and automated lockout mechanisms.

7. Your Rights & Choices

As a registered member, you have the following rights regarding your data:

• Access & View Profile: You can view your pharmacy and license information at any time via your portal profile.
• Correction: You can request updates to inaccurate pharmacy records through your district treasurer or admin.
• Password Security: You can change your password anytime via the security settings.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: