Privacy Policy
Last Updated: January 15, 2025
256-Bit SSL
Bank-level encryption
GDPR Compliant
Full EU compliance
Never Sold
Data stays private
Your Control
Manage data anytime
Introduction & Our Commitment
At United Pharmacy Shop ("we", "us", "our"), your privacy is not just important — it's fundamental to who we are. As a licensed online pharmacy handling sensitive health information, we understand the profound trust you place in us when sharing your personal data.
This Privacy Policy explains in clear terms how we collect, use, store, protect, and share your personal information when you visit unitedpharmacyshop.com, create an account, or place an order with us.
Our Promise: We will never sell, rent, or trade your personal information to third parties. We use industry-leading 256-bit SSL encryption, are fully GDPR compliant, and give you complete control over your data.
By using our Website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please refrain from using our services.
Information We Collect
We collect only the information necessary to provide you with our services, fulfill your orders, and improve your experience. Here's exactly what we collect and why:
Identity Information
Full name, date of birth, gender (when relevant to medications)
Contact Information
Email address, phone number, delivery & billing addresses
Payment Details
Payment method used (not stored) — processed by PCI-DSS providers
Health Information
Prescription details, allergies, medical conditions (only when required)
Technical Data
IP address, browser type, device info, operating system
Usage Data
Pages visited, products viewed, time spent, click patterns
How We Collect It
- Directly from you when you register, place orders, contact us, or fill in forms
- Automatically through cookies and analytics when you browse our site
- From payment processors confirming successful transactions
How We Use Your Information
Your personal data is used strictly for legitimate purposes related to our services. We use your information to:
- Process and fulfill your orders, including payment processing, dispatch, and delivery
- Verify prescriptions and ensure safe dispensing of medications by qualified pharmacists
- Communicate with you about your orders, deliveries, and account updates
- Provide customer support and respond to your inquiries or complaints
- Send marketing communications (only with your explicit consent, and you can opt out anytime)
- Improve our services through anonymized analytics and user experience research
- Detect and prevent fraud, unauthorized access, and other harmful activities
- Comply with legal obligations, including pharmaceutical regulations and tax laws
Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, we process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill your order and deliver our services
- Consent: Where you have given explicit consent (e.g., marketing emails, cookies)
- Legal Obligation: Compliance with pharmaceutical, tax, and regulatory requirements
- Legitimate Interests: Improving our services, preventing fraud, and business analytics
- Vital Interests: Processing health data when necessary to protect your life or health
Special Category Data: Health information is considered "special category" data under GDPR. We process it only with your explicit consent or as necessary for the provision of health/pharmaceutical services.
Who We Share Your Data With
We share your personal data only when necessary and always under strict confidentiality agreements. Recipients include:
- Shipping partners (USPS, FedEx, Royal Mail, DPD, PostNL, DHL, Canada Post, Purolator) — to deliver your orders
- Payment processors — to securely handle your payments
- Cloud hosting providers — to store data securely (all GDPR-compliant)
- Regulatory authorities — when required by pharmaceutical laws or court orders
- Analytics providers (e.g., Google Analytics) — using anonymized/aggregated data only
We Never: Sell your data to marketers, share your health information with advertisers, or provide your details to any party without a lawful reason and appropriate safeguards.
How We Protect Your Data
Data security is at the heart of our operations. We employ multiple layers of protection:
- 256-bit SSL/TLS encryption on every page of our website and during data transmission
- PCI-DSS compliant payment processing — we never store your full payment details
- Encrypted databases with strict access controls and role-based permissions
- Regular security audits and vulnerability assessments
- Two-factor authentication (2FA) available for account protection
- Staff training on data protection and confidentiality standards
- Incident response plans — you will be notified within 72 hours of any data breach affecting your information
How Long We Keep Your Data
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:
- Account information: Retained while your account is active + 3 years after last activity
- Order records: Retained for 7 years (as required by tax and pharmaceutical regulations)
- Prescription records: Retained according to pharmaceutical regulations (typically 2–10 years depending on jurisdiction)
- Marketing preferences: Retained until you withdraw consent
- Website analytics: Anonymized data retained for up to 26 months
After the retention period expires, your data is securely deleted or anonymized permanently.
Your Privacy Rights
Under GDPR and other privacy laws, you have comprehensive rights over your personal data. You can exercise any of these rights at any time by contacting us:
Right to Access
Request a copy of all personal data we hold about you
Right to Rectification
Correct any inaccurate or incomplete personal information
Right to Erasure
Request deletion of your data ("right to be forgotten")
Right to Restrict
Limit how we process your data in certain circumstances
Right to Portability
Receive your data in a portable, machine-readable format
Right to Object
Object to processing based on legitimate interests or direct marketing
Withdraw Consent
Withdraw any consent you've given us at any time
Right to Complain
Lodge a complaint with a data protection authority
To exercise any of these rights, email us at privacy@unitedpharmacyshop.com. We will respond within 30 days as required by GDPR.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and deliver personalized content. Here are the types of cookies we use:
You can manage your cookie preferences at any time through our Cookie Settings banner or your browser settings. For more details, see our Cookie Policy.
International Data Transfers
As a global pharmacy operating from warehouses in the USA, UK, Europe (Netherlands), and Canada, your personal data may be transferred and processed across international borders.
When we transfer data outside your country of residence, we ensure adequate protection through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where the destination country provides equivalent data protection
- UK-US Data Bridge and equivalent frameworks for transatlantic transfers
- Encryption in transit for all international data transmissions
Children's Privacy
Our services are strictly intended for adults aged 18 years and older. We do not knowingly collect personal information from children under 18.
If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information from our systems.
Parents & Guardians: If you believe your child has provided us with personal information, please contact us immediately so we can take appropriate action.
Third-Party Websites & Links
Our Website may contain links to third-party websites, plugins, and applications. Clicking on those links may allow third parties to collect or share data about you.
We do not control these third-party websites and are not responsible for their privacy practices. When you leave our Website, we encourage you to read the privacy notice of every website you visit.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes:
- We will update the "Last Updated" date at the top of this page
- We will notify registered users via email of any material changes
- We may display a prominent notice on our Website for major updates
We encourage you to review this policy periodically to stay informed about how we protect your information.
Contact Us & Data Protection Officer
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
- Privacy Email: privacy@unitedpharmacyshop.com
- DPO Email: dpo@unitedpharmacyshop.com
- Contact Form: unitedpharmacyshop.com/contact-us
- Live Chat: Available Mon–Fri, 9am–6pm GMT
We will respond to your inquiry within 30 days as required by GDPR. For urgent matters, please indicate "URGENT — PRIVACY" in your subject line.
You Have the Right to Complain: If you believe your data protection rights have been violated, you can lodge a complaint with your local data protection authority (e.g., ICO in the UK, CNIL in France, or your country's equivalent).
Questions About Your Privacy?
Our dedicated privacy team is here to help you understand and exercise your data rights. We typically respond within 2 business days.