PRIVACY POLICY

Century Healthcare Limited

Website: https://centuryhealthcareltd.com
Effective Date: 20 July 2024
Last Updated: 14 October 2026

1. Introduction

Welcome to Century Healthcare Limited.

At Century Healthcare Limited, we respect your privacy and are committed to protecting the personal information you share with us when visiting our website, purchasing our products, or communicating with our team.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information in accordance with applicable Nigerian data protection laws, including the Nigeria Data Protection Act (NDPA) 2023.

By using our website, you acknowledge this Privacy Policy. Where consent is required by law, we will request it separately.

2. Information We Collect

We may collect the following categories of personal information:

Personal Identification Information

• Full name

• Email address

• Telephone number

• Billing and delivery addresses

Order and Transaction Information

• Products purchased

• Order details and purchase history

• Payment status and transaction references

• Shipping and delivery information

Technical Information

• IP address

• Browser type and device information

• Website usage and navigation data

• Cookies and similar technologies

Customer Communication Information

• Messages submitted through contact forms

• Customer enquiries and feedback

• Product-related support requests

We collect only information that is reasonably necessary for legitimate business purposes.

3. How We Use Your Information

Century Healthcare Limited may use your personal information to:

1. Process and fulfil product orders.

2. Confirm payments and manage transactions.

3. Arrange shipping and product delivery.

4. Respond to customer enquiries and support requests.

5. Send order confirmations and important service notifications.

6. Improve website functionality and customer experience.

7. Detect fraudulent transactions and protect website security.

8. Comply with applicable legal and regulatory requirements.

9. Send promotional communications where permitted by law.

We do not use your personal information for purposes incompatible with those described in this policy without an appropriate lawful basis.

4. Legal Basis for Processing Personal Information

We process personal information where permitted under applicable data protection laws.

Depending on the circumstances, our lawful basis may include:

• Contractual necessity: To process purchases, payments, and deliveries.

• Legal obligations: To comply with applicable tax, accounting, and regulatory requirements.

• Legitimate interests: To maintain website security, prevent fraud, and improve our services, where those interests are not overridden by your rights.

• Consent: Where required for marketing communications, non-essential cookies, or other specific processing activities.

You may withdraw consent at any time where consent is the lawful basis for processing.

5. Payment Processing and Security

Our website uses WooCommerce to manage online purchases and may use third-party payment providers, including Flutterwave, to process customer payments.

When you make a payment, relevant transaction information may be transmitted securely to the payment provider.

Century Healthcare Limited does not intentionally store complete payment card numbers or card security codes on its website.

Payment providers process information in accordance with their own privacy policies and applicable security requirements.

Customers are encouraged to review the privacy policies of the payment providers they use.

6. Cookies and Website Tracking

Our website may use cookies and similar technologies to:

• Maintain shopping cart functionality.

• Remember customer preferences.

• Support secure checkout sessions.

• Monitor website performance.

• Understand website traffic and usage.

• Support advertising and marketing activities, where enabled.

Some cookies are necessary for the website to function correctly. Non-essential cookies will be used subject to applicable consent requirements.

You can manage cookies through your browser settings and any cookie preference controls provided on our website.

7. Sharing Your Personal Information

We may share necessary personal information with trusted service providers, including:

• Payment processing companies.

• Delivery and logistics partners.

• Website hosting and technical support providers.

• E-commerce and order management service providers.

• Professional advisers and regulatory authorities where legally required.

We require service providers handling personal information on our behalf to apply appropriate data protection safeguards.

We do not sell customers’ personal information to third parties.

8. Data Storage and Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including:

• Processing and delivering orders.

• Maintaining appropriate financial records.

• Resolving disputes.

• Meeting applicable legal obligations.

• Preventing fraud and misuse of our services.

When personal information is no longer required, we will take appropriate steps to securely delete or anonymise it, subject to legal retention requirements.

9. How We Protect Your Information

Century Healthcare Limited is committed to implementing reasonable technical and organisational safeguards to protect personal information.

These may include:

• Secure HTTPS website connections.

• Restricted access to administrative accounts.

• Appropriate password and authentication controls.

• Secure payment processing integrations.

• Software maintenance and security updates.

• Access controls for customer and transaction records.

Although we take reasonable precautions, no internet-based system can guarantee absolute security.

10. Your Data Protection Rights

Subject to applicable Nigerian data protection laws, you may have the right to:

• Request access to personal information we hold about you.

• Request correction of inaccurate or incomplete information.

• Request deletion of your personal information where legally applicable.

• Withdraw consent to certain processing activities.

• Object to certain uses of your personal information.

• Request restriction of processing in applicable circumstances.

• Request data portability where applicable.

• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise your rights, please contact us using the details provided below.

We may request reasonable information to verify your identity before processing a request.

11. International Data Transfers

Some of our website hosting, payment processing, analytics, or technology service providers may operate outside Nigeria.

Where personal information is transferred internationally, we will take appropriate steps to ensure such transfers comply with applicable data protection requirements, including the use of recognised legal safeguards where necessary.

12. Third-Party Websites

Our website may contain links to third-party websites, payment platforms,