Privacy Policy

Introduction

Ambermeds solutions ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.onlinemedshop.co.uk and use our services. Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.

Data Controller

Ambermeds Solutions Ltd, a registered company in England and Wales under company number 15257893 at Unit 9 Bell Centre, Newton Road, Crawley, England, RH10 9FZ is the data controller responsible for your personal data.

Patient Confidentiality

Medical data (including your patient records, consultation notes, and order history) may be collected via online forms, medical questionnaires, telephone conversations, secure messaging with us, and photo assessments.

Your medical data and order history are treated with strict confidentiality. Only health professionals or staff with a similar duty of confidentiality can access this information. We will never disclose your medical data without your consent unless legally required or permitted to do so.

We will not use your medical data to send you information about our products and services (i.e., for marketing purposes) unless you give us your express permission to do so.

Data Collection and Processing

We may collect and process the following types of data about you:

a) Information you provide to us you may provide us with information about yourself by completing the order form or medical consultation form on our site, or by corresponding with us via phone, email, or other means. This includes information you provide when you register to use our site. The information you provide may include: name, address, email address, phone number

b) Information we collect automatically when you visit our site, we may automatically collect certain information about you, including:

i. Technical Information

• Internet Protocol (IP) address used to connect your computer to the Internet
• Browser type and version
• Time zone setting
• Browser plug-in types and versions
• Operating system and platform

ii. Information about your visit

• Full Uniform Resource Locators (URL) clickstream to, through, and from our site (including date and time)
• Page response times
• Time zone setting
• Length of visits to certain pages
• Page interaction information (such as scrolling, clicks, and mouse-overs)
• Methods used to browse away from the page
• Any phone number used to call our customer service number

This information helps us improve our website and services, providing a better experience for you.

How we Collect your Information

We use different methods to collect information from and about you including through:

a) Direct interactions. You may give us your personal data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

• order medication on our site;
• create an account on our site;
• subscribe to our service;
• request marketing to be sent to you; or
• give us some feedback.

b) Automated technologies or interactions. As you interact with our site, we may automatically collect data about your computer equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies.

Cookies

Our site uses cookies to distinguish you from other users of our site. This helps us to provide you with a good experience when you browse our site and also allows us to improve our site. For further information about cookies visit Cookies Policy

Uses of the Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

1. To provide our services

a. Process your orders and deliver products
b. Manage your account
c. Provide customer support

2. For communication

a. Send administrative information, such as changes to our terms, conditions, and policies
b. Respond to your inquiries and requests

3. To improve our services

a. Analyze usage trends and improve our website
b. Develop new products and services

4. Legal and regulatory compliance

a. Comply with legal and regulatory obligations
b. Detect, prevent, and address fraud and security issues

In addition to the above, we use information held about you in the following ways:

a) Information you provide to us: We will use this information:

1. Assessment: To assess whether the medication ordered is suitable in light of your medical history and symptoms experienced.
2. Verification: To verify your identity against other mediums we deem relevant for our checks.
3. Database storage: To store in our customer database.
4. Notifications: To notify you about changes to our service.
5. Marketing: To provide marketing material about services or medication that may be of interest to you (you can withdraw consent to such material at any time).
6. Website presentation: To ensure that content from our site is presented in the most effective manner for you and your computer.

b) Information we collect automatically: We will use this information:

• Site administration: To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, and statistical purposes.
• Site improvement: To improve our site to ensure that content is presented in the most effective manner for you and your computer.
• Order processing: To allow you to submit orders for medication to us, when you choose to do so.
• Security: As part of our efforts to keep our site safe and secure.

By understanding how we use your data, you can be assured that we handle it with the utmost care and in compliance with legal requirements, always prioritizing your privacy and security.

Data Retention Time

We hold your personal information for as long as we have a legal or business reason to do so, which generally means as long as you remain a customer or as required to meet our legal obligations, resolve disputes or enforce our agreements. To fulfill our obligations to the General Pharmaceutical Council, the Department of Health and Social Care, and other regulatory or similar bodies, health-related personal information may need to be retained for a period of time after you cease to be a customer. We’ll always store your data securely and won’t use it for any other purpose.

Disclosure of Your Information

We may disclose your personal information to third parties under the following circumstances:

• Legal compliance: If we are required to disclose or share your personal data to comply with any legal obligation.
• Enforcement of terms: To enforce or apply our terms of use and other agreements.
• Protection of rights and safety: To protect our rights, property, safety, customers, or others. This includes exchanging information with other companies and organizations for purposes such as fraud protection, credit risk reduction, customer feedback, email communication, delivery and courier services, and website development and management.

Some of the third parties we share your information with may be located outside the European Economic Area (EEA). When we transfer your personal data outside the EEA, we ensure it receives a similar level of protection by implementing the needed safeguards. We are committed to maintaining the confidentiality and security of your personal data, regardless of where it is processed.

Your Rights

As a data subject under the General Data Protection Regulation (GDPR), you have several rights regarding your personal data, detailed below:

1. Right to access You can request access to the personal data we hold about you, commonly known as a "data subject access request" (DSAR). This allows you to receive a copy of your personal data and understand how it is being processed.

2. Right to correction You can request the correction of any incomplete or inaccurate personal data we hold about you. We will take steps to verify the accuracy of the new data you provide before updating our records.

3. Right to erasure You can request the erasure of your personal data where there is no longer a legitimate reason for us to continue processing it. You also have the right to ask for deletion in cases where you have successfully exercised your right to object to processing (see below), where your data has been processed unlawfully, or where we are required to erase your personal data to comply with local laws. Note that there may be specific legal reasons which prevent us from fulfilling your request, and we will inform you if this is the case.

4. Right to object You can object to the processing of your personal data when we rely on a legitimate interest (or those of a third party) and there is something about your particular situation that makes you want to object. This includes processing for direct marketing purposes. In some instances, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

5. Right to restriction of processing You can request the restriction of processing your personal data in the following scenarios:

• If you want us to verify the accuracy of the data.
• Where our use of the data is unlawful but you do not want it erased.
• Where you need us to hold the data even if we no longer require it, as you need it to establish, exercise, or defend legal claims.
• If you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

6. Right to data portability You can request the transfer of your personal data to you or to a third party. We will provide your data in a structured, commonly used, machine-readable format. This right applies only to automated information you initially provided consent for us to use or where we used the information to perform a contract with you.

7. Right to withdraw consent You can withdraw your consent at any time where we rely on consent to process your personal data. This will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will inform you if this is the case at the time you withdraw your consent.

Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (“ICO”), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Contact Us

If you wish to exercise any of these rights, please contact us at info@onlinemedshop.co.uk. We are committed to addressing your concerns and ensuring your data is handled in accordance with applicable laws and regulations.