Privacy Policy
1. Introduction
Welcome to Cheshire Online Pharmacy ("we," "us," or "our"). We prioritize your privacy and are dedicated to protecting and managing your personal data responsibly. This Privacy Policy explains who we are, how we collect, use, and share your personal data, and your rights concerning that information. It also provides guidance on how to contact us or the appropriate authorities if you have any concerns.
We comply with the General Data Protection Regulation (GDPR) (EU) 2016/679 ("the Regulation"). As the 'data controller,' Cheshire Online Pharmacy is responsible for managing the processing of your personal data.
2. Key Definitions
- We, Us, Our: Cheshire Online Pharmacy Ltd, operating as www.cheshireonlinepharmacy.co.uk
- Data Protection Officer: Joseph Burgess
- Personal Data: Information related to an identifiable individual.
- Special Category Personal Data: Sensitive data revealing characteristics like ethnicity, religious beliefs, or health information.
3. What Personal Data We Collect
We may collect the following:
- Personal identification details: Name, address, contact details
- Identity verification data: Date of birth
- Health and medical information: Health profiles, gender, genotype, and biomarker data
- Location information
- Payment details: Billing information, transaction history
- Website interaction data: Usage behaviour, preferences
- Responses from surveys, promotions, or competitions
We may also collect sensitive health-related information when you complete online questionnaires or request certain services. This data is crucial to provide you with accurate assessments, products, and services.
4. How and Why We Use Your Data
We only process personal information for legitimate purposes, including:
- Complying with legal and regulatory requirements
- Fulfilling contracts and agreements with you
- Providing medical diagnoses and healthcare
- Pursuing our or third-party legitimate interests
- Processing data with your explicit consent
A detailed table outlining the purposes of processing and their legal bases can be provided on request.
5. Promotional Communications
We may contact you with updates on our services, offers, or new product launches. You can opt out of marketing communications at any time by:
- Clicking the 'unsubscribe' link in our emails
- Replying 'STOP' to our text messages
- Updating your preferences through your account
We do not share your personal data with other organisations for marketing without your consent.
6. Data Sharing
We may share your personal data with:
- Business partners and service providers
- Third-party service providers like payment processors or delivery partners
- Law enforcement agencies for legal purposes
- Regulatory bodies when required
We ensure all third parties handle your data securely and only use it as needed to deliver services.
7. Where We Store Your Data
Your data may be stored at our offices or those of trusted partners. If transferred outside the European Economic Area (EEA), we apply appropriate safeguards to ensure data security.
8. Data Retention
We retain your data for as long as necessary to:
- Provide services
- Address any questions or complaints
- Comply with legal obligations
When no longer required, data will be securely deleted or anonymised.
9. Data Security
We have implemented strong security measures to protect your personal information from unauthorised access, misuse, or loss. However, we acknowledge that no internet-based transmission is entirely risk-free.
If you require more information on protecting your personal data online, visit www.getsafeonline.org.
10. Monitoring
We may monitor communications, including calls and emails, for quality assurance, training, fraud prevention, and compliance purposes.
11. Credit Checks
To prevent fraud or make credit-related decisions, we may consult credit reference and fraud prevention agencies and share your account details with them.
12. Providing Information About Others
If you provide details about another individual, you confirm that they have authorised you to do so, and that they understand their data may be shared and processed in accordance with this policy.
13. Transferring Data Outside the EEA
If your data is transferred outside the EEA, we implement appropriate safeguards, including standard contractual clauses, to protect your personal information and ensure its secure processing.
14. Your Rights
You have the right to:
- Access your personal data
- Request corrections or deletion
- Restrict processing or object to it
- Receive data in a portable format
To exercise your rights, contact us using the details provided below.
15. Policy Updates
This policy was last updated on 19/10/2023. We may revise it periodically, so we encourage you to review it regularly to stay informed.
16. How to Contact Us
For questions or concerns regarding your data, contact us at:
- Registered Office: Unit 86 Atlantic Business Centre, Atlantic Street, Altrincham, Cheshire, WA14 5NQ
- Email: [email protected]
- Phone: 0161 669 9077
- Data Protection Officer: Joseph Burgess
17. Complaints
If you are dissatisfied with how we handle your data, you can file a complaint with the UK's Information Commissioner's Office (ICO) via ico.org.uk/concerns or by calling 0303 123 1113.