Privacy Policy

1. Introduction

Pharmacy Express 247, operated by Pill Solutions Limited, is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website or use our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you consent to the data practices described in this policy. Please read this policy carefully and contact us if you have any questions.

2. Information We Collect

We may collect the following types of personal information:

• Identity Data: Name, title, date of birth, and gender.
• Contact Data: Email address, phone number, billing and delivery addresses.
• Account Data: Username, password, and account preferences.
• Transaction Data: Order history, payment details, and purchase information.
• Technical Data: IP address, browser type, device information, and browsing behaviour.
• Usage Data: Information about how you use our website and interact with our content.

We do not collect sensitive personal data (e.g., health information, genetic data) except where explicitly provided by you and necessary for regulatory compliance (e.g., verification of research status).

3. How We Use Your Data

We use your personal information for the following purposes:

• To process and fulfill your orders, including payment processing and delivery.
• To manage your account and provide customer support.
• To communicate with you about orders, updates, and promotional offers (with your consent).
• To improve our website, products, and services through analytics and research.
• To comply with legal and regulatory obligations, including record-keeping requirements.
• To prevent fraud, unauthorized transactions, and other illegal activities.

We will only use your data for the purposes for which we collected it, unless we reasonably believe we need to use it for another compatible purpose.

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases for processing your personal data:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you (e.g., processing orders and payments).
• Legal Compliance: Processing is necessary for compliance with legal and regulatory obligations (e.g., record-keeping, tax compliance).
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., improving our services, preventing fraud), provided such interests are not overridden by your rights.
• Consent: For marketing communications, you have given explicit consent, which you may withdraw at any time.

We will always balance our interests with your rights and freedoms and ensure your privacy is protected.

5. Data Sharing & Third Parties

We may share your personal information with the following third parties, strictly for the purposes outlined in this policy:

• Payment Processors: To securely process payments (we do not store your full card details).
• Couriers & Shipping Partners: To deliver your orders (name, address, contact information).
• IT & Hosting Providers: To maintain and secure our website and data storage.
• Analytics Providers: To analyse website usage and improve our services (e.g., Google Analytics).
• Regulatory Authorities: As required by law or in response to legal requests.

We require all third parties to respect the security of your data and to treat it in accordance with the law. We do not sell or rent your personal data to any third parties for marketing purposes.

6. Data Security

We take data security seriously and have implemented appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

• Encryption: Our website uses 256-bit SSL encryption for all data transmission.
• Access Controls: Access to personal data is restricted to authorized personnel only.
• Secure Storage: Data is stored on secure servers with firewalls and intrusion detection systems.
• PCI Compliance: Payment processing is handled by PCI-DSS Level 1 compliant providers.
• Regular Audits: We conduct regular security assessments and vulnerability testing.

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will respond promptly to any data breach in accordance with legal requirements.

7. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (“right to be forgotten”).
• Right to Restrict Processing: Limit how we use your data in certain circumstances.
• Right to Data Portability: Request a transfer of your data to another service provider.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time.

To exercise any of these rights, please contact us using the details in Section 10. We will respond to your request within 30 days as required by law. There is no charge for exercising your rights, although we may charge a reasonable fee for excessive or repetitive requests.

8. Cookies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content. Cookies are small text files stored on your device that help us remember your preferences and understand how you interact with our site.

We use the following types of cookies:

• Essential Cookies: Necessary for website functionality (e.g., shopping cart, checkout).
• Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics).
• Preference Cookies: Remember your settings and preferences.
• Marketing Cookies: Used to deliver relevant advertisements (with your consent).

You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website. We use a cookie consent banner to obtain your explicit consent for non-essential cookies.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including to satisfy legal, accounting, or reporting requirements. The retention period varies depending on the type of data and its purpose.

• Order Data: Retained for 7 years to comply with tax and accounting regulations.
• Account Data: Retained until you close your account or request deletion.
• Marketing Data: Retained until you withdraw consent or unsubscribe.
• Usage Data: Retained for up to 2 years for analytics purposes.

After the retention period expires, we will securely delete or anonymize your data. If you wish to have your data deleted earlier, please contact us.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: