Privacy
Privacy policy
Last updated: 5 October 2026.
This policy applies to the Pharmacies NC website, web application and iPhone, iPad and Android applications. It explains which personal data is processed, why it is processed and how to exercise your rights.
1. Who is responsible for the processing?
KaoriDEV operates the Pharmacies NC platform and is responsible for public contact requests, platform accounts, technical operation and security. Each participating pharmacy remains responsible for the employee, patient, vaccination, payroll and business data it records and processes through its professional workspace. You may contact the relevant pharmacy or Pharmacies NC at contact@pharmacies-nc.nc.
2. Data processed
- Public contact: name, email address, request category, subject and message.
- Vaccination appointments: identity, date of birth, phone number, email address, postal address, pharmacy, time slot, consent and appointment status.
- Professional accounts: identity, login email, pharmacy, role, permissions and security information.
- Employment and business management: employee record, contracts, schedules, leave, payroll information, salary advances, documents, suppliers and invoices, depending on the user's permissions.
- Vaccination records: identity and health information, eligibility and consent information, vaccine, batch, injection and authorised professional.
- Notifications and security: device notification token, app version, device name supplied to identify a session, login history and limited technical logs.
3. Location
Location is requested only after an explicit action by the user. It is processed on the device to display coordinates or prepare a share or map link. Pharmacies NC does not store it or transmit it to its servers. Opening an external map service is subject to that service's own privacy policy.
4. Purposes and legal bases
Data is used to provide the requested public or professional services, manage accounts and access rights, organise appointments and vaccinations, manage the employment relationship and pharmacy operations, send operational notifications, answer support requests, secure the platform and comply with applicable obligations. Depending on the processing, the legal basis is the performance of a contract or requested service, the pharmacy's or platform operator's legitimate interest, compliance with a legal obligation, or the user's explicit consent, notably for health data.
5. Recipients and service providers
Access is limited to authorised pharmacy staff according to their permissions and, when strictly necessary, to authorised KaoriDEV personnel for support, maintenance and security. Technical providers may process only the data needed to provide hosting, email delivery and push notifications. Firebase Cloud Messaging and Apple Push Notification service are used for optional system notifications. Pharmacies NC does not sell personal data and does not use it for advertising tracking.
6. International processing
Some technical providers may process data outside New Caledonia or the European Economic Area. In such cases, appropriate contractual and security safeguards required by applicable law are used.
7. Retention
Data is retained only for the period needed for the purpose for which it was collected and for applicable legal, accounting, employment and healthcare obligations. Account and notification tokens are deleted or disabled when no longer required. Contact requests and technical security logs are retained for a limited period proportionate to support and security needs. Pharmacies determine the legally required retention period for their employee, payroll and vaccination records.
8. Security
Pharmacies NC uses encrypted HTTPS connections, authenticated sessions, role-based permissions, secure token storage and access logging. No system can guarantee absolute security; suspected incidents should be reported promptly to the support address below.
9. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent where processing is based on consent. Contact the pharmacy concerned or use the contact form. You may also lodge a complaint with the CNIL or the competent supervisory authority.
10. Minors
When information concerns a minor, it must be provided by the minor's legal representative or under their responsibility. The application is not designed for children to create an independent professional account.
11. Contact and updates
For any privacy question, write to contact@pharmacies-nc.nc. This policy may be updated to reflect changes to the service, providers or legal requirements. The date above identifies the current version.