1 The agreement and the parties
These Terms govern access to Prescription.et provided by Olympus Trading PLC, at Woreda 12, House No. New, Nifas-Silk Lafto Subcity, Addis Ababa, Ethiopia, telephone +251922186666. “Institution” means a participating healthcare facility, pharmacy, laboratory or imaging centre; “authorized user” means an individual permitted to act for it within an assigned professional or administrative role. “You” means the institution or authorized user accepting these Terms, as appropriate.
An institution accepts through its authorized representative or a signed service agreement. An individual user must receive these Terms and expressly accept them before receiving access. The person accepting for an institution represents that they can bind it. Keep a copy of the accepted version. A patient does not become a party merely because a professional records the patient’s information, and these Terms do not reduce patient rights.
2 The service and its clinical boundaries
Prescription.et supports creation and retrieval of prescription records, professional and institutional account administration, and related coordination available within the institution’s approved service configuration. Where enabled, it also supports laboratory and imaging requests, appointment and request status, and storage or delivery of results or reports. A feature may be used only within its verified capability, applicable regulatory authorization and the institution’s approved procedures.
Olympus provides the platform. It does not itself diagnose, prescribe, dispense medicine, request or perform tests or scans, or interpret results or reports. Appropriately licensed doctors, laboratories and imaging centres remain responsible, within their respective professional roles, for requesting, performing, reporting and interpreting tests and scans and acting on findings. A lookup token, an Active label, a transfer request or a successful submission is not proof of a valid signature, completed dispensing, a completed test or scan, regulatory approval or delivery of a notification.
Electronic records may be relied on for dispensing only when the applicable legal and regulatory conditions are met. During Phase One described in the national guideline, a printed version of the electronically generated prescription serves as the legally recognized document for dispensing outside the originating facility. Institutions must confirm the phase and authorization applicable to their use and provide the required printed record. These Terms do not confer legal validity on a nonconforming record.
Do not use an unsupported workflow as a substitute for a required safety step. Contact the responsible clinician or pharmacist for care questions. The website and support channels are not emergency services.
3 Eligibility and account responsibilities
Institutions must hold the permissions applicable to their operations, appoint responsible personnel and verify professional credentials and current scope of practice. They must authorize access for a legitimate role, maintain accurate affiliations and notify us promptly when a user leaves, is suspended or loses relevant authorization.
Every participating healthcare facility, pharmacy, laboratory and imaging centre that processes personal or health information through Prescription.et shall execute the applicable participation or service agreement and data-processing agreement before receiving production access. Access must be assigned only to individually authorized users within the institution’s approved roles and service scope.
Each person performing a clinical or administrative action must use an individual, attributable account. Do not share credentials or allow a facility account to conceal who acted. Use required authentication, including additional verification for high-risk actions. A password-reset email or initial email verification alone does not establish ongoing professional authorization.
Keep credentials, devices and work areas secure. Sign out or secure a workstation before leaving it. Report compromise immediately. Users may act only within their verified role and institutional assignment; technical access does not expand professional authority.
4 Permitted access and prohibited conduct
Access a patient record only for a lawful care, dispensing, laboratory or imaging services, authorized support or other specifically permitted purpose, and only to the extent needed for that purpose. Verify the patient and your authority independently of the token. Administrators may access clinical information only for an authorized and recorded technical task. Access to requests, appointment details and any stored results or reports is limited to users authorized for the relevant patient, institution and task.
Do not browse records out of curiosity, impersonate another user, guess or harvest tokens, bypass permissions, falsify records or professional details, alter logs, introduce malicious software or interfere with the service. Do not expose clinical information in public links, screenshots, demonstrations, unapproved messaging tools or shared devices.
Do not use the service to promote unlawful medicine supply, divert controlled medicines, obtain improper refills, influence clinical decisions through undisclosed incentives or extract patient data for advertising, sale or unrelated or otherwise unauthorized research. Security testing requires prior written authorization and agreed limits.
5 Prescriber responsibilities
A prescriber must verify patient identity, the relevant clinical history and contact information; use the correct authorized facility; and provide complete, accurate and clinically appropriate instructions. Check medicine, strength, form, dose, route, frequency, duration, quantity, indication and refill permission as required. Review allergies, interactions, contraindications and other patient-specific risks using approved clinical resources.
Finalize or authenticate a prescription only through an approved process that preserves its integrity and links it to the responsible professional. Do not treat a generated token as a digital signature. Correct, renew or cancel an order through the authorized procedure, retaining the necessary history and communicating promptly with affected dispensers.
Controlled medicines, restricted antimicrobials and other high-risk therapies require their additional authorizations, verification, documentation and validity limits. If the service cannot enforce a mandatory control, the institution must restrict that workflow and use a lawful approved alternative. Decision-support output, where available, assists rather than replaces clinical judgment.
A requesting doctor must verify the patient and facility information, select the appropriate test or scan, state the clinical reason and relevant safety information, identify the receiving laboratory or imaging centre, and provide accurate contact and request details. The responsible doctor must review and interpret findings within their scope of practice, arrange appropriate follow-up and communicate clinically significant findings through approved care procedures. A request status or notification does not establish that a result has been reviewed.
6 Dispenser laboratory and imaging centre responsibilities
An authorized dispenser must independently verify the patient, prescriber, facility, authenticity, integrity, validity, status and remaining authorized supply of the prescription. Perform a clinical review, resolve ambiguities with the prescriber and provide appropriate counselling and labelling before supply. Do not dispense against an expired, cancelled, invalid or otherwise unsuitable order.
Record what was actually supplied, the individual dispenser, time, quantity, batch or lot, expiry, any lawful substitution and its reason and required authorization, partial supply, refill and relevant intervention. Preserve the original prescriber’s order and a traceable history of changes. Prevent duplicate or excess supply through approved checks.
Viewing a prescription does not document dispensing. A transfer request records a request, not a destination’s acceptance or a dispensing event. Maintain the required authorized records and communications, including any approved alternative records, until the verified service supports the complete workflow. An unavailable safety-critical function must not be bypassed.
Laboratories and imaging centres must verify the patient, requesting doctor, request, clinical reason and their authority and capability to perform the test or scan. They remain responsible for their acceptance decisions, preparation and safety checks, performance, quality assurance, and validation and interpretation of findings within their licensed roles. They must communicate urgent or significant findings through appropriate clinical channels.
Participating laboratories and imaging centres must maintain accurate appointment and request status. Where the system stores results or reports, they must upload only appropriately validated information, identify the responsible professional and relevant date and time, release it only to authorized recipients, and preserve a traceable history of corrections. Platform submission alone does not confirm completion, clinical accuracy or the requesting doctor’s review.
7 Retrieval tokens printing and patient access
Treat a prescription token as confidential information. Give it only to the patient, an authorized representative or a professional legitimately involved in the relevant care. A token supports retrieval but does not alone prove identity, consent or entitlement to medicine.
Verify contact information and safe communication arrangements before sending a token. If it is disclosed to the wrong person, report the incident, assess unauthorized access and arrange appropriate protection through the facility and operator. Never place tokens in public search results or ordinary support tickets.
Support the patient’s lawful access to a prescription or copy, including a printed prescription where required or requested under the applicable guideline. Check identity before release and protect printed copies. Do not equate a limited account balance or lack of a patient account with loss of the patient’s statutory rights.
8 Privacy confidentiality and lawful instructions
Our Privacy Policy explains information handling and rights. Institutions must inform patients, establish the applicable legal grounds and sensitive-data conditions, and obtain and record consent where required. Accepting these Terms does not supply patient consent to treatment, optional processing or overseas transfers.
The institution remains the steward of the clinical records it controls. Olympus Trading PLC may process those records on documented instructions for the contracted service. Neither party may reuse clinical information for its own unrelated purposes through a broad licence in these Terms.
Before clinical processing, the parties must agree a written processing schedule covering the subject and duration, purposes, information and individuals involved, lawful instructions, confidentiality, safeguards, authorized service providers, transfer restrictions, rights assistance, incident cooperation, audit assistance and return or disposal. Each party remains responsible for legal duties arising from its actual role. The signed participation or service agreement and data-processing agreement required for every participating institution under section 3 must be in place before production access is granted.
Limit uploads and disclosures to necessary information. Protect confidentiality after access ends. Patient requests and legally required disclosure must be handled through authorized channels; these Terms do not restrict a patient from contacting a regulator.
Patient and facility information, requested tests or scans, clinical reasons, requesting doctors, receiving centres, appointment and request status, any stored results or reports, and date, time and user activity logs are confidential. Olympus must protect this information with encryption in transit and at rest, role-based access controls and audit logs. Institutions must enforce individual authorization and confidentiality, and users must access only the information necessary for their assigned duties. Audit records must identify the relevant user, action, date and time. Before production access is enabled, Olympus and the institution must verify that these safeguards operate for the approved service, including stored clinical information and backups, role and institutional access boundaries, and the required audit events.
9 Notifications and external services
Prescription, laboratory and imaging notifications, account email and administrative notifications use the services described in the Privacy Policy. Institutions must verify the recipient and safe contact arrangements. Patient SMS notifications must be minimal: a generic service notification and only a confidential retrieval reference when necessary for the approved workflow. They must exclude patient names, diagnoses, medicines, requested tests or scans, clinical reasons, results or reports, and unnecessary provider, date or other identity details. Do not add patient information or retrieval tokens to administrative alerts. Access to clinical details must use an approved secure channel with the required identity and authorization checks.
A successful application action does not guarantee SMS or email delivery. Delayed, blocked or misdirected notifications require follow-up through the institution’s approved process. External services must be assessed and contracted for the information they receive, including any overseas processing; their availability does not remove our responsibilities for selecting and configuring them.
10 Charges and usage credits
Patients shall not be charged any fee solely for receiving, accessing, retrieving or presenting a prescription, laboratory request, imaging request, result or report through Prescription.et. Platform charges, where applicable, shall be payable only by participating private institutions under separate written commercial agreements. No charge shall apply to a public or government facility unless separately agreed and approved in accordance with applicable law.
Any applicable institutional commercial agreement must identify the payer, service, rate, currency, taxes, payment arrangements and any credit rules. A displayed credit balance does not itself establish a price, cash value, expiry date or refund rule.
The current service uses credits for certain pharmacy lookups and records usage against the account. A transfer request may also affect the balance. Before paid use begins, the service order must explain which events consume or restore credits, how retries or failed transactions are handled, and how to dispute a charge. We must investigate reported billing errors and correct established errors. Institutional credits and lookup charges must not be passed on to patients as a fee solely for receiving, accessing, retrieving or presenting those records.
Purchased-credit expiry, refunds, renewals and any price changes must be expressly agreed and remain subject to mandatory law. We do not infer an automatic renewal or a non-refundable payment from account creation. Subscription, payment and medicine prices are separate matters unless expressly included.
A service restriction for nonpayment must follow the agreement and applicable law and be coordinated with record access and continuity of care. It must not extinguish patient rights or required clinical recordkeeping.
11 Availability maintenance and continuity of care
We are responsible for operating the contracted service with reasonable care and skill, maintaining appropriate security and integrity safeguards, addressing defects and communicating material disruptions. Any numerical availability target, support response time or recovery objective must be set out in an express service agreement.
Institutions must maintain approved continuity procedures, including lawful paper or alternative prescribing and dispensing records when needed, safe patient identification and checks against duplicate supply. After restoration, reconcile records in a controlled manner and identify entries created during downtime without losing the original evidence. Laboratory and imaging continuity procedures must also cover pending requests, appointments, completion records, urgent findings, result delivery and acknowledgement where required.
We cooperate with institutions on recovery, authorized access, incident evidence and safe reconciliation. Planned maintenance should be communicated with reasonable notice where practicable. Neither an outage nor an availability disclaimer authorizes unsafe supply or removes a party’s responsibility for its own failures.
12 Incident reporting and cooperation
Report suspected unauthorized access, misdirected tokens, prescription, laboratory or imaging request or report errors and service failures promptly through section 19 and the institution’s incident channel. Protect the patient first, retain relevant evidence and do not delete or alter logs to conceal an event. Avoid including unnecessary health information in the initial report.
We and the institution cooperate on investigation, containment, correction and legally required notices. When we act as a processor, we notify the responsible controller of a personal-data breach without undue delay. The responsible controller handles its applicable authority and individual notifications with our assistance. Additional medicine-safety and cybersecurity reporting obligations remain with the relevant responsible parties.
An institution must not wait for ordinary support or billing resolution before providing urgent clinical care or making a required regulatory report.
13 Restriction suspension and termination
We may restrict or suspend access where reasonably necessary to protect patients or information, address a material breach, respond to a legal requirement, or act under an agreed payment provision. We limit the action to what is reasonably needed, record its basis and give reasons and a chance to respond when practicable and lawful. Immediate containment may precede notice where delay would create a serious risk.
An institution may end its service under its written agreement, and an authorized user must stop using access when their authorization ends. A material breach should be given a reasonable opportunity for remedy where remedy is appropriate. Contact us to challenge an access decision or arrange an authorized handover.
Restriction or termination must be coordinated with continuing care, preservation of evidence, legally required record access and safe transition. Revoking a user’s credentials is separate from deleting clinical information.
14 Records export and the end of service
The institution must identify the custodian and required destination of its clinical records before service ends. We will cooperate in providing an authorized copy or export through a secure, agreed method, with necessary identifiers, record history and audit evidence available within the service. The method and any compatibility requirements will be agreed with the institution before handover. Clinical records include laboratory and imaging requests, appointment and request status, and results or reports where held by the system.
The parties must agree a reasonable handover timetable and any lawful institutional assistance charges in writing. Commercial disputes do not remove statutory patient rights or justify destruction of required records. Following verified handover and the applicable retention and legal-hold requirements, we return, securely delete or restrict remaining copies as the processing schedule requires, including controlled backup expiry. Any assistance charges remain subject to the patient-fee prohibition and the public-facility approval requirements in section 10.
Confidentiality, accrued payment obligations, required retention, incident cooperation and provisions needed to resolve existing claims continue to the extent their purpose requires after access ends.
15 Intellectual property and information rights
Olympus Trading PLC and its licensors retain rights in the platform software and original website materials. We grant the institution and its authorized users a limited right to use the contracted service for authorized purposes during the agreement. Do not copy or distribute protected software or materials except as permitted by law or agreement.
Nothing in these Terms transfers, assigns or requires disclosure of the Prescription.et source code, software architecture, repositories, credentials, encryption keys or other proprietary technical materials. Prescription.et is provided as a hosted service. Any source-code escrow, disclosure or transfer requires a separate written agreement expressly signed by Olympus Trading PLC.
Institutions and individuals retain their applicable rights in submitted information and clinical records. They authorize only the processing needed to deliver the lawful service, protect it and meet applicable obligations. These Terms do not transfer ownership of health information or grant a right to sell, advertise with or train general-purpose AI on identifiable patient records. Patient information, including laboratory and imaging information, must not be used for advertising, sale or unrelated research.
16 Responsibility and remedies
Doctors, dispensers, laboratories and imaging centres remain responsible for their respective clinical decisions, professional conduct, requesting, performing and interpreting tests or scans, and the accuracy of their entries and reports. Institutions are responsible for their authorizations, staff supervision and care procedures. We remain responsible for our own contractual performance, platform operations, safeguards and conduct, including failures attributable to us.
Responsibility for loss is determined by applicable law, the facts and each party’s contribution. A clinical error does not automatically excuse a contributing technical failure, and a technical failure does not automatically excuse professional misconduct. The parties must take reasonable steps to limit avoidable harm.
Nothing in these Terms excludes or restricts liability or a remedy that cannot lawfully be excluded or restricted, including mandatory patient and data-protection rights. Any separately negotiated allocation of responsibility must be lawful and cannot override those mandatory protections.
17 Changes to the service or Terms
We may update the service and these Terms to address lawful operational, safety or regulatory needs. We give reasonable advance notice of material changes where practicable, identify the effective date and obtain renewed acceptance where required. Urgent legal or security changes may require shorter notice, with an explanation when appropriate.
Material changes to clinical workflows, authentication, integrity protection or exchange must undergo the required assessment and authorization before clinical use. We will not treat a software update as inheriting an unverified certification. Changes do not retrospectively remove accrued rights or authorize a new use of personal information.
If an institution cannot accept a proposed material contractual change, it may seek an orderly exit under its agreement and section 14. Continued patient care and statutory rights must be preserved.
18 Governing law and disputes
Ethiopian law governs these Terms. The parties should first seek practical resolution through their designated contacts, but this does not prevent urgent court relief, a regulatory complaint or another mandatory remedy.
Disputes may be brought before the competent courts of Ethiopia, subject to any mandatory jurisdiction rules. These Terms do not require foreign arbitration or waiver of statutory complaint rights. Any invalid provision is limited or severed only to the extent necessary, with the remaining lawful provisions continuing.
19 Contact and formal notices
Contact Olympus Trading PLC at Woreda 12, House No. New, Nifas-Silk Lafto Subcity, Addis Ababa, Ethiopia, telephone +251922186666, or olympus.systems.et@gmail.com. Privacy questions and rights requests should be directed to olympus.systems.et@gmail.com. Use these channels to arrange secure transmission of sensitive evidence.
Formal contractual notices must be sent to the contacts and by the method specified in the institutional agreement. Each party must keep its contact details current. Routine support messages do not replace a required legal or regulatory notification.
20 Relationship with institutional agreements
A signed institutional agreement may set service scope, commercial arrangements, service levels and other agreed details. A written data-processing schedule governs documented processing instructions within applicable law. An express variation prevails over these Terms only for the matter it validly addresses and only between its parties.
No agreement may reduce mandatory patient or data-protection rights, permit unlawful processing, remove professional obligations or treat acceptance of the Privacy Policy as consent. Our published privacy notice must accurately reflect the actual processing arrangements. Changes to instructions or service providers require the assessment, notice and authorization applicable to the change.