We understand that you care how information about you is used and shared and we appreciate your trust in us to do that carefully and sensibly. This Privacy Notice describes how we collect and process your personal information through iPharm’s website, services and all applications that reference this Privacy Notice.
The website www.iPharm.co.uk is owned and operated by Sharief Healthcare Ltd, trading as ‘iPharm’. In this Privacy Notice “we", "our", "us", and "ours" is used to refer to iPharm and "you", "your", "yours" is in reference to you as the individual. We are a company registered in England and Wales (Company Number 7974901), and our address for correspondence is:
iPharm, Unit 18 Bold Industrial Park, Neills Road, Saint Helens WA9 4TU
We have appointed Damian Ryder as our Data Protection Officer who is responsible for responding to queries in relation to this privacy notice.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal information about you which we have grouped together follows:
Identity Data: Includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.
Contact Data: Includes delivery address, billing address, telephone number, and email address.
Financial Data: Includes bank account and payment card details.
Transaction Data: Includes details about payments to and from you and other details of products and services you have purchased from us.
Technical Data: Includes Internet protocol (IP) address, browser type and version, browser plug-in types and versions, operating system and platform, your login data, time zone setting and location, cookie ID’s, web log information, device identifiers and other technology on the devices you use to access this website.
Profile Data: Includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.
Usage Data: Includes information about how you use our website, products and services, your browsing activity including intended purchases and aborted baskets, completion of surveys, wish-lists, connection information and statistics on your visits to site and page views, the links you click and other actions you take on our services, within our advertising or e-mail content and participation in promotional activity. Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
If you fail to provide personal data
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
We use different methods to collect personal information from and about you including through:
Direct interactions: You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, or email. This includes personal information you provide when you:
• Apply for our products or services.
• Create an account on our website.
• Subscribe to our service or publications.
• Engage with us on social media.
• Request marketing to be sent to you.
• Enter a competition, promotion, or survey,
• Give us some feedback or make a complaint.
Automated technologies or interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal information by using cookies, server logs and other similar technologies.
We use your data in several ways in order to offer you the best experience while using our website and services, these include:
Purchase and delivery of products and services: We use your personal information to take and handle orders, deliver products and services, process payments, and communicate with you about orders, products and services, and promotional offers.
Communicate with you: We use your personal information to communicate with you in relation to our services via different channels (e.g., by phone, email, chat).
Advertising and Marketing: We use your personal information to display interest-based ads for features, products, and services that might be of interest to you.
Recommendations and personalisation: We use your personal information to recommend features, products, and services that might be of interest to you, identify your preferences, and personalise your experience with our services.
Medical information Confidentiality: Some of the information collected from you may be medical data. We use this data to fulfil the medical and health services that we offer. Your medical information is always treated confidentially, and we will never disclose your medical information with a third party unless we are legally required or permitted to do so.
Third Party Links
- When you order an NHS prescribed medication, we will use your personal data to retrieve your prescription from your GP.
- When you order an NHS prescription, we will post your prescription to NHSBSA to receive payment for the order.
- To enable us to provide our services we may share your personal data with third party companies who we rely on to deliver the specific service that we offer, for example, we may share your postal address, full name, and age with a third-party courier to enable them to deliver your parcel.
- When you have provided us with your permission to share your personal information with third parties for marketing purposes.
- Where we are legally required or permitted by law to disclose your personal information, for example with National Health Service Providers or regulatory bodies.
- To further fraud protection and reduce the risk of fraud.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
There are other reasons why your personal information may be retained for a longer period such as legal or regulatory reasons. However, if you opt in to receive marketing communications from us we will retain your personal information as long as necessary (for the purposes of direct marketing to you) unless you withdraw your consent to, or unsubscribe from marketing materials. If you would like to withdraw your consent to, or unsubscribe from, marketing communications, please contact us and we will be able to further assist you.
At the end of the data retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
Under the General Data Protection Act 2015 you have the right to your own personal data. These rights are outlined below:
- The right to access a copy of the personal information we hold about you.
- The right to correction of inaccurate personal information we hold about you.
- The right to restrict our use of your personal information.
- The right to be forgotten.
- The right of data portability.
- The right to object to our use of your personal information.
In some circumstances you will be required to provide an adequate form of identification in order to confirm your identity, this is a security measure which is in place to ensure that we do not disclose any personal information to anyone who does not have the right to receive it. We are required to act upon your data request within one month of us receiving your identification.
You will not be required to pay a fee to access your personal information or exercise any of the other rights listed below. However, we may charge a reasonable fee if your request(s) is clearly unfounded repetitive, or excessive.
If you wish to exercise any of these rights you can do so by emailing us at firstname.lastname@example.org, we ask that you label your email subject with your name and ‘data request’.