LEGAL
Privacy Policy
1. Who we are
ScriptWise operates the central prescription-fill registry for the Cayman Islands. This policy explains what personal data the Registry holds, why, and the rights of the people it describes — patients whose prescriptions are recorded, and the pharmacy professionals who use the system.
2. What we collect
For patients: identifying details needed to match records across pharmacies, the medications dispensed, dates and quantities, remaining repeats, and the dispensing pharmacy. For pharmacy users: name, work email, professional registration details, dispensing location, and a complete log of every lookup and dispense performed under their account.
3. Why we hold it
The Registry exists so a script filled at one pharmacy is visible at every other participating pharmacy, preventing duplicate fills and supporting safe dispensing. Access logs exist to hold every record access accountable. Billing records support subscriber invoicing and contain no patient data.
4. How it is protected
Patient-identifying fields are encrypted at rest with AES-GCM authenticated encryption; searchable fields use keyed blind indexes so records can be matched without storing them in the clear. The registry databases sit behind internal-only APIs that are never exposed to the public internet, and every access is attributed to a named professional and retained for audit.
5. Who can see it
Patient records are visible only to authorised pharmacy professionals making a dispensing decision, and to Registry administrators where strictly necessary to operate the service. We do not sell personal data, and we do not disclose it to third parties except where required by Cayman Islands law.
6. Your rights
Under the Data Protection Act you may request access to the personal data the Registry holds about you, ask for inaccurate records to be corrected, and request erasure. A "Remove My Data" request deletes a patient's records across every registry store; billing records are retained as they contain no patient data. Requests can be made through the contact page and are answered within 30 days.
7. Retention
Dispensing records are retained for as long as required for pharmacy record-keeping under Cayman Islands law, then deleted. Access logs are retained for audit purposes. Erasure requests override standard retention except where a legal obligation requires otherwise.
8. Complaints
If you believe your data has been mishandled, contact us first via the contact page. You may also complain to the Office of the Ombudsman of the Cayman Islands, the supervisory authority for data protection.