Privacy Policy

1. Introduction

Welcome to ipharm. We are committed to protecting your personal information and your right to privacy. This privacy policy explains how we collect, use, and share your information when you use our online pharmacy services.

ipharm is registered with the General Pharmaceutical Council (GPhC). Our superintendent pharmacist is responsible for ensuring all pharmacy services comply with professional and legal requirements.

2. Information We Collect

Personal Information

• Name, email address, phone number
• Delivery address and billing information
• Date of birth
• Payment information (processed securely by our payment provider)

Health Information

• Medical questionnaire responses
• Prescription information
• Purchase history of medicines
• Consultation records with our pharmacists

Technical Information

• IP address and browser type
• Device information
• Cookie data (see our Cookie Policy)
• Usage data and analytics

3. How We Use Your Information

• Process and fulfill your orders
• Provide pharmaceutical care and consultations
• Verify prescriptions and ensure safe dispensing
• Communicate about your orders and account
• Send prescription reminders (with your consent)
• Improve our services and website
• Comply with legal and regulatory requirements
• Prevent fraud and ensure security

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: Processing necessary to fulfill our contract with you (e.g., dispensing medicines)
• Legal Obligation: Compliance with pharmacy regulations and laws
• Consent: Marketing communications (you can withdraw consent at any time)
• Legitimate Interests: Fraud prevention, service improvement

5. Data Sharing

We may share your information with:

• Pharmacists: To review consultations and verify prescriptions
• Wholesalers: To procure your medicines (e.g., AAH Pharmaceuticals)
• Delivery Partners: To ship your orders (Royal Mail, DPD, etc.)
• Payment Processors: To process payments securely (Stripe, Checkout.com)
• Regulators: When required by law (GPhC, MHRA)
• Law Enforcement: If legally required

We never sell your personal information to third parties.

6. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

• Prescription Records: Minimum 2 years (as required by law)
• Order History: 7 years (for accounting and tax purposes)
• Account Data: Until you request deletion (subject to legal requirements)
• Marketing Data: Until you withdraw consent

7. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw marketing consent at any time

To exercise your rights, contact us at privacy@ipharm.co.uk or use the data export feature in your account settings.

8. Security

We implement appropriate technical and organizational measures to protect your data, including encryption, secure servers, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect information from children. If you are under 16, please ask a parent or guardian to create an account on your behalf.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or by posting a notice on our website.

11. Contact Us

If you have questions about this privacy policy or how we handle your data: