Privacy Policy
Last Updated: January 2024
1. Introduction
PharmaCare Online ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. This policy complies with UK GDPR and Data Protection Act 2018.
2. Information We Collect
Personal Information:
- Name, email address, phone number
- Delivery address and billing information
- Order history and preferences
- Payment information (processed securely)
Health Information:
- Prescription details
- Medical consultation information
- Medication orders and usage patterns
Technical Information:
- IP address, browser type, and device information
- Cookies and usage data
- Pages visited and time spent on site
3. How We Use Your Information
We use your information to:
- Process and fulfill your orders
- Communicate with you about your orders and our services
- Verify prescriptions with healthcare providers
- Comply with legal and regulatory requirements
- Improve our website and services
- Send you marketing communications (with your consent)
- Detect and prevent fraud
4. Legal Basis for Processing
We process your personal data based on:
- Contract: To fulfill our obligations under our contract with you
- Legal Obligation: To comply with pharmaceutical regulations
- Legitimate Interest: To improve our services and prevent fraud
- Consent: For marketing communications and non-essential cookies
5. Information Sharing and Disclosure
We may share your information with:
- Licensed Pharmacies: To dispense your medications
- Healthcare Providers: To verify prescriptions when necessary
- Payment Processors: To process transactions securely
- Delivery Services: To ship your orders
- Regulatory Authorities: When required by law
- Service Providers: Who assist in operating our business
We never sell your personal information to third parties.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including: encryption, secure servers, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Medical records are retained in accordance with UK pharmaceutical regulations.
8. Your Rights Under GDPR
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data (subject to legal requirements)
- Restriction: Limit how we use your data
- Portability: Receive your data in a structured format
- Object: Object to processing based on legitimate interests
- Withdraw Consent: At any time, for processing based on consent
To exercise these rights, contact us at privacy@pharmacare.co.uk
9. Cookies
We use cookies and similar tracking technologies to enhance your experience on our website. You can control cookies through your browser settings. Essential cookies are necessary for the website to function; non-essential cookies require your consent.
10. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
11. International Transfers
Your data is primarily stored and processed in the UK. If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place as required by data protection law.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights:
Data Protection Officer
Email: privacy@pharmacare.co.uk
Phone: +44 (0) XXX XXX XXXX
Address: PharmaCare Online, United Kingdom
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.
