This Privacy Policy explains how we collect, use, share, and protect personal information. It also outlines your rights and choices regarding your data, following UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We may provide additional privacy details when collecting certain types of information. This ensures transparency and helps you understand how your data is handled.
Personal Information We Collect
Who We Collect Personal Information From
We collect personal information from individuals who interact with Pharmacy Mall and the services we provide. This includes customers who place orders or seek advice, patients using our services, and pharmacists or healthcare professionals we collaborate with. We may also collect information from contractors, consultants, and job applicants as part of our business operations.
Additionally, we gather data from individuals who visit our website, contact us for inquiries or support, or engage with us through any of our services. This helps us provide a better experience, improve our offerings, and ensure compliance with UK data protection laws.
How We Collect Personal Information
We collect personal information in different ways to provide our services and improve your experience. This includes:
- Directly from you – When you place an order, create an account, contact us for support, or sign up for updates.
- Through our website – When you browse, make purchases, or use interactive features.
- From healthcare professionals – If they provide prescription details or treatment information needed to process orders.
- From third-party service providers – Such as payment processors, delivery partners, or other companies that help us fulfil orders and services.
- From government agencies or public records – If needed for legal or regulatory purposes.
- From social media or public forums – If you interact with us online, leave reviews, or report product concerns.
- From recruiters – If you apply for a job or inquire about career opportunities with us.
We only collect the information necessary to operate efficiently, comply with regulations, and offer a better service to our customers.
Types of Personal Information We Collect
The personal information we collect depends on how you interact with our pharmacy and the services we provide. This may include:
- Health and medical information – Such as prescription details, medications you take (including dosage and frequency), and any relevant health conditions necessary for dispensing medicines or offering pharmacy services.
- Personal and contact details – Including your name, address, phone number, email, and emergency contact information.
- Biographical and demographic details – Such as date of birth, age, and gender, when required for regulatory or identification purposes.
- Professional information – If you are a pharmacist or healthcare professional, we may collect details about your credentials, workplace, and any necessary licensing information.
- Payment details – Such as billing and transaction information for purchases made through our pharmacy.
- Account information – Including usernames and passwords if you create an account on our website.
- Social media and public information – If you interact with us online, provide feedback, or share experiences related to our services.
- Other information you provide – Such as details shared through customer service inquiries, emails, phone calls, or surveys.
We collect only the necessary information to provide services, ensure compliance with regulations, and improve customer experience.
How We Use Personal Information
We use personal information to provide and improve our services. This includes:
- Communicating with you – Responding to inquiries, processing orders, and providing updates on products and services.
- Enhancing our services – Improving our website, customer experience, and overall business operations.
- Personalising content – Tailoring offers, emails, and recommendations based on your preferences.
- Managing customer relationships – Handling orders, marketing activities, and customer support.
- Ensuring safety and compliance – Tracking product quality, responding to safety concerns, and meeting legal reporting obligations.
- Preventing fraud and security risks – Identifying and responding to illegal activity or misuse of our services.
- Processing payments and contracts – Managing transactions with healthcare professionals and other service providers.
- Recruitment and hiring – Processing job applications and managing employment-related activities.
We may also anonymise or aggregate data for analysis and business planning, ensuring that no individual can be identified. If specific programs or offers involve different privacy terms, we will provide separate notices detailing how your information will be used.
Who We Share Personal Information With
We only share personal information when necessary to provide our services, comply with legal requirements, or improve our operations. This includes:
- Service providers – Companies that help with payment processing, order fulfilment, data storage, customer support, and website management.
- Healthcare professionals – When required for prescription processing or regulatory compliance.
- Regulatory authorities – If legally required, such as for product safety monitoring or reporting adverse reactions.
- Technology partners – Providers of website hosting, email services, and security measures.
- Shipping and logistics providers – To ensure timely delivery of medicines and other products.
If our business undergoes a merger, acquisition, or restructuring, personal information may be transferred as part of that process. We may also share data to prevent fraud, investigate security risks, or comply with legal obligations.
We do not sell personal information and take steps to ensure that any third party we work with follows strict data protection standards.
Cookies and Automated Data Collection
We, along with our service providers and business partners, use cookies and other tracking technologies to collect information about how you interact with our website. These tools help us improve functionality, analyse site traffic, and deliver relevant content.
The types of data collected automatically may include:
- Device details – Such as IP address, browser type, and operating system.
- Website usage – Pages visited, navigation patterns, and time spent on our site.
- Visit timestamps – Dates and times of access.
- Referral sources – How you arrived at our website (e.g., search engines or links).
- Search terms – Keywords used to find our site.
- Email interactions – Whether you open our emails or click on links.
You can manage or disable cookies through your browser settings. However, some website features may not function properly if cookies are turned off. For guidance on managing cookies, refer to your browser’s help menu or visit www.aboutcookies.org.
Legal Basis for Processing Personal Information
We process personal information based on legitimate business interests, contractual obligations, legal requirements, and, in some cases, consent. The legal grounds for processing include:
- Legitimate interests – We may process personal information to operate, improve, and secure our services, ensure customer support, enhance our website, prevent fraud, and comply with safety regulations.
- Fulfilling contracts – If you place an order or enter into an agreement with us, we need to process your information to complete transactions and provide services.
- Legal obligations – Certain data must be processed to comply with UK laws, including medicine safety regulations, adverse event reporting, and product quality monitoring.
- Protection against fraud and security risks – We may process data to detect and prevent illegal activities or misuse of our services.
- Consent – In cases where consent is required, such as for marketing communications, we will ask for it when collecting your information. You can withdraw consent at any time by adjusting your privacy preferences.
We always ensure that any data processing aligns with UK legal requirements and respects your rights.
International Data Transfers
In some cases, we may need to transfer personal information to countries outside the UK. These transfers are made to ensure we can provide our services, process orders, or comply with legal and regulatory requirements.
When transferring data internationally, we take appropriate safeguards to ensure your information remains protected. This may include:
- Transferring data only to countries deemed adequate by the UK government in terms of data protection.
- Using standard contractual clauses or other legally approved mechanisms to ensure data security when transferring to countries without adequacy decisions.
- Obtaining your consent when required or transferring data where necessary for public interest, such as medicine safety reporting.
We follow strict data protection measures to keep your information secure, regardless of where it is processed.
Marketing Emails
Where allowed by law, we may send you promotional emails about our products and services. If you no longer wish to receive these, you can unsubscribe by following the instructions in any email we send.
Even if you opt out of marketing messages, we may still send you important non-marketing emails, such as updates about safety notices, service changes, or account-related information.
Your Privacy Rights and Preferences
Depending on your location, you may have rights regarding how we process your personal information. These rights may include:
- Accessing your data – You can request a copy of the personal information we hold about you.
- Correcting your information – If any details are inaccurate or incomplete, you can ask us to update them.
- Deleting your data – In some cases, you can request that we erase your personal information, though we may be required to keep certain records for legal reasons.
- Restricting or objecting to processing – You may have the right to limit how we use your data, particularly for marketing purposes.
To exercise these rights or ask questions about your personal information, you can contact our Data Protection Officer (DPO) (see the “How to Contact Us” section). We may need to verify your identity before processing requests to ensure data security.
Please note that if you request deletion or restrict processing, we may not be able to provide certain services to you. Additionally, residents of the UK and EEA have the right to file a complaint with their national data protection authority if they believe their rights have been violated.
Data Retention
We keep your personal information only as long as necessary to fulfill the purpose for which it was collected. The retention period depends on factors such as:
- The reason we collected the data (e.g., processing orders, customer support, or legal compliance).
- The type of information and its relevance over time.
- Any legal or regulatory requirements that require us to keep records for a certain period.
Once the data is no longer needed, we will either safely delete or anonymize it in accordance with applicable laws.
How We Protect Personal Information
We take data security seriously and use a combination of administrative, technical, and physical safeguards to protect your personal information from unauthorised access, loss, misuse, or alteration. Our security measures include:
- Encryption – Sensitive information, including payment details, is encrypted during transmission and storage to prevent unauthorised access.
- Secure storage – Data is stored on protected servers with firewalls and access controls to prevent breaches.
- Access restrictions – Only authorised personnel can access personal data, and they must follow strict confidentiality policies.
- Regular monitoring – We conduct security audits, vulnerability assessments, and system updates to safeguard against cyber threats.
- Fraud prevention – We use identity verification measures and fraud detection tools to protect against misuse of data.
Despite these safeguards, no system can be 100% secure. While we do our best to protect your information, we recommend using strong passwords, avoiding sharing personal details over unsecured networks, and keeping your account information private to enhance security.
Links to Third-Party Websites
For your convenience, our website may include links to third-party websites or content that we do not own or control. These external sites have their own privacy policies, which may differ from ours. We are not responsible for how third parties handle your personal information, so we encourage you to review their privacy policies before sharing any data.
Updates to This Privacy Notice
We may update this Privacy Notice from time to time. If changes are significant, we will notify you by updating the date on this page and, where required by law, informing you through other channels, such as email. We encourage you to check this Privacy Notice regularly to stay informed about how we protect your data.
How to Contact Us
If you have any questions, comments, or concerns about this Privacy Notice or how we handle your personal information, please contact us. You can also request access, updates, or corrections to your data. When making a request or complaint, please provide relevant details, including your relationship with us and any necessary documentation.
5 Wall St, Liverpool L1 8JQ, United Kingdom
+44 151 232 3134
[email protected]
We will do our best to respond promptly and address any concerns.