← Back

Privacy Policy

Last updated: June 2026

This Privacy Policy explains how TMR COMPUTING LTD (“White Rabbit”, “we”, “us”) collects, uses, shares and protects your personal information when you use the White Rabbit e-Pharma website and mobile apps (the “Platform”). It should be read together with our Terms & Conditions. We handle personal data in line with Rwanda’s Law N°058/2021 of 13 October 2021 relating to the protection of personal data and privacy, and other applicable laws.

1. Who is responsible for your data

TMR COMPUTING LTD is responsible for the personal data processed through the Platform. Where a Partner pharmacy, laboratory, healthcare professional or insurer processes your data to fulfil your order or provide a service, they are responsible for their own handling of that data under their own policies.

2. Information we collect

Account & contact: name, phone number, email, password, delivery address, city.
Health information: prescriptions you upload, medicines you order, prescription numbers, notes to the pharmacist, consultations and lab tests you book, and related health details you choose to share.
Insurance information: insurer, membership/ID details and card images you provide to verify cover and submit claims.
Order & payment: order history, preferred branch, amounts, payment method and status. Card and mobile-money details are handled by our payment providers; we do not store full card numbers.
Technical & usage: device and app information, IP address, log data, and how you use the Platform.
Communications: messages, reviews, and support requests you send us.

Some of this information — particularly health, prescription and insurance data — is sensitive. We only collect it to provide the services you request and we protect it with additional care.

3. How we use your information

To create and manage your account and verify your identity;
To process prescriptions, orders, consultations, lab bookings and deliveries, and to enable pharmacists and Partners to fulfil them;
To verify insurance eligibility and submit claims on your behalf;
To take payment and manage your wallet, refunds and loyalty benefits;
To provide customer support and send service messages such as order and delivery updates;
To keep the Platform secure, prevent fraud and misuse, and meet legal obligations;
To improve our products and services using aggregated or de-identified data;
To send you promotional messages where you have agreed — you can opt out at any time.

4. Legal basis for processing

We process your data where it is necessary to perform our contract with you, where you have given consent (for example to process health data or send marketing), where we have a legitimate interest such as securing the Platform, and where processing is required to comply with the law.

5. When we share your information

We do not sell your personal data. We share it only as needed to run the Platform and deliver the services you request, including with: Partner pharmacies (to review prescriptions and prepare orders); laboratories and healthcare professionals (to fulfil bookings and consultations); insurers (to verify cover and process claims); delivery providers (to deliver your order); payment providers (to process payments); service providers acting on our instructions (hosting, communications, analytics); and authorities where required by law or valid legal process.

6. Cookies

Our website uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used so we can improve it. You can accept or decline non-essential cookies; some features may not work fully if you decline them.

7. How we protect your data

We use technical and organisational measures to protect your information, including encryption in transit, access controls, and secure storage of prescription and insurance images. No system is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond appropriately to any incident.

8. How long we keep your data

We keep personal data for as long as needed to provide the services, maintain your account, and meet legal, accounting, tax and regulatory requirements (for example records relating to the supply of medicines). When data is no longer needed, we delete it or de-identify it.

9. Your rights

Subject to the law, you may access the personal data we hold about you, ask us to correct inaccurate data, ask us to delete data where there is no lawful reason to keep it, object to or restrict certain processing, withdraw consent, and opt out of marketing. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with the competent supervisory authority in Rwanda.

10. Children

The Platform is intended for users aged 18 and over. We do not knowingly collect data from children without the consent of a parent or legal guardian.

11. International transfers

Where we use service providers located outside Rwanda (for example cloud hosting), we take steps to ensure your data receives an appropriate level of protection consistent with applicable law.

12. Changes & contact

We may update this Privacy Policy from time to time and will publish the updated version on the Platform. For any privacy question or request, contact TMR COMPUTING LTD: email Info@tmrcomputing.com, phone +250 728 930 029, website www.tmrcomputing.com.