Privacy Policy

We collect information that you provide directly to us, including: Personal Information: • Name and contact details (email address, phone number) • Business information (pharmacy name, address, registration numbers) • Payment information (processed securely through our payment providers) • Communication preferences Automatically Collected Information: • Basic request and security data processed by our hosting provider • Your optional analytics preference stored in your browser • Page-use analytics from Ahrefs Web Analytics only after you accept optional analytics We do not currently load Google Analytics, Meta Pixel or Cloudflare Web Analytics on this site.

We use the information we collect to: • Provide, maintain, and improve our services • Process transactions and send related information • Send promotional communications (with your consent) • Respond to your comments, questions, and requests • Monitor and analyse trends, usage, and activities • Detect, investigate, and prevent fraudulent transactions • Personalise and improve your experience • Comply with legal obligations Legal Basis for Processing (UK GDPR): • Contract performance: To provide our services to you • Legitimate interests: To improve our services and communicate with you • Consent: For marketing communications and cookies • Legal obligation: To comply with applicable laws

We do not sell your personal information. We may share your information with: Service Providers: • Vercel (website hosting and request processing) • Upstash (enquiry storage when configured) • Resend (enquiry notifications and confirmations) • Ahrefs Web Analytics (optional usage analytics after consent) Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities. Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. With Your Consent: We may share your information for any other purpose with your explicit consent.

We implement appropriate technical and organisational measures to protect your personal data: Technical Measures: • SSL/TLS encryption for data in transit • Encrypted storage for sensitive data • Regular security assessments and updates • Secure access controls and authentication Organisational Measures: • Staff training on data protection • Access limited to authorised personnel only • Data protection impact assessments • Regular review of security policies While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to implementing best practices.

Under the UK General Data Protection Regulation, you have the following rights: Right of Access: You can request a copy of your personal data we hold. Right to Rectification: You can request correction of inaccurate or incomplete data. Right to Erasure: You can request deletion of your personal data in certain circumstances. Right to Restrict Processing: You can request limitation of processing in certain circumstances. Right to Data Portability: You can request transfer of your data to another service provider. Right to Object: You can object to processing based on legitimate interests or for direct marketing. Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time. To exercise any of these rights, please contact us at mohammed@pharmacywebsite.co