Personal Data

Privacy Policy

This Privacy Policy sets out the terms under which MediUnit collects, processes, and secures personal data in strict compliance with Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data.

Last updated: May 10, 2026

Data Minimization

Data collection is strictly limited to the information necessary for account setup, order execution, and legal compliance.

Exclusive Purpose

Processed data is exclusively utilized for commercial management, billing, and logistical tracking.

Security and CNDP

MediUnit implements technical and organizational security measures in accordance with the guidelines of the National Commission for the Control of the Protection of Personal Data (CNDP).

1. Categories of Collected Data

The personal data subject to processing includes, but is not limited to:

  • Identification data: first name, last name, company name, professional capacity.
  • Contact details: email address, telephone numbers, postal addresses for delivery and billing.
  • Transactional data: order history, invoices, transaction statements.
  • Connection data: IP addresses, session logs, mandatory technical cookies.
  • Administrative data: Common Enterprise Identifier (ICE), Tax Identifier (IF), Commercial Register (RC).

2. Purposes of Processing

  • Execution of the sales contract: management of professional accounts, processing of orders and shipments.
  • Legal obligations: issuance of invoices, bookkeeping, and commercial traceability.
  • Dispute management: processing of claims, litigation, and exercise of rights of defense.
  • System security: prevention of fraudulent access and guarantee of platform integrity.

3. Data Recipients

Within the strict limit of their respective authorizations, collected data may be communicated to the following third parties:

  • Logistics providers and carriers commissioned to execute deliveries.
  • Technical subcontractors (hosting, infrastructure) bound by strict confidentiality clauses.
  • Judicial or administrative authorities, upon legal requisition and within the framework imposed by law.
No personal data is sold or commercialized to third parties for commercial prospecting purposes.

4. Retention Period and Data Subject Rights

  • Data relating to account management is retained for the duration of the commercial relationship, plus the statutory limitation periods.
  • Accounting documents and invoices are retained for a period of ten (10) years in accordance with the provisions of the Commercial Code.
  • In accordance with Law 09-08, any data subject has the right to access, rectify, and object on legitimate grounds.
  • The exercise of these rights is carried out by written notification addressed to the legal department via the official contact details.
The exercise of the right to deletion may be limited by MediUnit's legal obligations to retain commercial and tax documents.

Data Controller

For any request to exercise your rights recognized by Law 09-08, please contact our compliance officer.

Desk email
WhatsApp