Data Privacy Policy — STRAW Program App

Effective for users of the STRAW Program web application ("OrchidAutomation Tool"). This Privacy Policy explains how Orchid Pharma Limited ("we," "our," or "us") collects, uses, and protects the personal information of users ("User" or "you"). By using the OrchidAutomation Tool you agree to the practices described below.

What this Privacy Policy Covers

This Policy covers our treatment of personally identifiable information and related data that we collect when patients or attendants use the OrchidAutomation Tool to enroll in the STRAW Program. It also covers how we handle information shared with our internal teams (HSE/KAM, RM, Sales Coordinators) for program execution.

Information We Collect

Patient / Attendant Information

When a patient or attendant uses the OrchidAutomation Tool, we collect:

• City (from a predefined list of supported locations)
• Hospital name
• Prescribing doctor’s name
• Patient’s age and gender
• Patient’s or attendant’s phone number
• A scanned or uploaded prescription image (with an option to mask the patient’s name)

Collected only with consent, required to process STRAW Program enrollment.

Technical Information

We may also collect:

• Device type, browser, and operating system
• IP address and general geolocation
• Date, time, and status of submissions
• Interaction logs (form completion, upload attempts, error states)

Any personal data in non-digital form will be converted to digital for secure processing, storage, and management.

How We Use Information

• Facilitate STRAW Program enrollment
• Send WhatsApp confirmation to patients or attendants
• Send WhatsApp alerts with details to internal teams
• Allow teams to follow up with patients using phone numbers
• Maintain secure internal program records
• Monitor system performance and improve experience

We do not sell, rent, or share patient-identifiable info for marketing.

Data Sharing and Disclosure

• With trusted service providers under confidentiality agreements
• As required by law or public authority requests
• To protect rights, property, or safety
• For minors, processed only with parent/guardian consent

Prescription images are stored encrypted (restricted access) and masked (for staff use). Only authorized personnel can access originals.

User Rights

Users may request corrections or deletion of their data by contacting Orchid Pharma Ltd. Deletion may limit STRAW Program services.

Security

• Encryption of data in transit and at rest
• Role-based staff access control
• Secure prescription storage

We use strong protections but no method is 100% secure; transmissions are at user risk.

Third-Party Links

The OrchidAutomation Tool may contain links to third-party services (e.g. WhatsApp). We are not responsible for their privacy practices.

Changes to this Privacy Policy

We may update this Policy. Significant changes will be communicated via the Tool or other reasonable means. Continued use means acceptance.

Contact Information