Privacy Policy | PharmShop

This Privacy Policy explains how we collect, use, store, and share your personal data when you use this website and purchase our products. We apply data minimization and security-by-design principles.

1. Controller and contact

PharmShop is the data controller for processing activities described in this policy. You can contact us at support@artemisrx.co.uk.

2. What data we collect

Account data: email address, password (hashed), locale.
Order data: items purchased, amounts, delivery address, recipient name.
Support data: messages you send to us, chat transcripts.
Technical data: IP address, device/browser info, and logs for security.
Cookies: essential cookies; analytics only with your consent.

3. Purposes and legal bases

To provide the Service and fulfill orders (contract).
To process payments and prevent fraud (contract, legitimate interests).
To communicate about orders and support (contract, legitimate interests).
To comply with legal obligations (e.g., tax and accounting).
To improve the Service via optional analytics (consent).

4. Sharing and recipients

We do not sell your data. We share only what is necessary with: shipping carriers, payment processors, hosting and infrastructure providers, and customer support tools. These providers act as processors under appropriate agreements.

5. International transfers

Where data is transferred outside the EU/EEA, we use appropriate safeguards such as Standard Contractual Clauses. Copies of relevant safeguards can be requested.

6. Retention

Order and invoice records: up to 10 years (legal obligation).
Account data: for the life of the account; deleted within 30 days after closure.
Support communications: up to 24 months unless needed longer for disputes.
Analytics data (if consented): per vendor defaults, typically 14-26 months.

7. Security

We implement technical and organizational measures including encryption at rest and in transit, access controls, least-privilege, and regular backups. No method is 100% secure, but we work to protect your data.

8. Your rights

Access, rectification, erasure, and restriction.
Portability and objection (including to profiling for direct marketing).
Withdraw consent at any time for processing based on consent.
Lodge a complaint with your supervisory authority.

To exercise your rights, contact support@artemisrx.co.uk. We may need to verify your identity before responding.

9. Cookies

See our Cookie Policy for details about the types of cookies we use and how to manage your preferences.

10. Children

The Service is not intended for individuals under 18. We do not knowingly collect data from children. If you believe a minor has provided data, contact us to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page with the effective date. Material changes will be highlighted.