Privacy Policy

How Dawa handles your personal and health data · last updated August 2026

Dawa (operated by Vutia Enterprises) lets you order medicine over WhatsApp. To do that we handle personal data — and, because it can include prescriptions and the medicines you buy, sensitive health data. Kenya's Data Protection Act, 2019 treats health data as a special category, and we handle it accordingly. This notice explains what we collect, why, and your rights.

What we collect

• Your WhatsApp number and name, and the messages you send us to place and manage an order.
• Medicine lists, prescription photos, and voice notes you send.
• Your delivery destination and, for delivery, how to reach you.
• Payment confirmation from M-Pesa (an M-Pesa receipt number and amount). We do not see or store your M-Pesa PIN or bank details.

Why we use it

• To price your order, have a licensed pharmacist review it, take payment, and deliver it.
• To verify prescriptions and dispense prescription-only medicines lawfully.
• To send order updates and — only if you haven't opted out — refill reminders. Reply STOP at any time to stop promotional messages.

Who we share it with

Only as needed to fulfil your order: the licensed partner pharmacy that dispenses your medicine, and the rider or parcel service that delivers it. Prescription images and order details are sent to our AI providers strictly to read/transcribe what you sent (never to advertise to you or to third parties). We never sell your data. We may disclose data where the law or the Pharmacy and Poisons Board requires it.

How we protect and keep it

Prescription images are stored privately and are accessible only to authorised pharmacy staff — never publicly. We keep records only as long as needed for the service and to meet pharmacy and tax record-keeping obligations, then delete or anonymise them.

Your rights

You may ask to access, correct, or delete your data, or object to a use of it, subject to legal record-keeping. To exercise a right or raise a concern, contact us on WhatsApp at +254143002002. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), odpc.go.ke.

← Back to Dawa