Privacy Policy

Taffs Pharmacy is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website or services.

We are committed to safeguarding the privacy of our website visitors and service users. This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data.

We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our website and services, we will ask you to consent to our use of cookies when you first visit our website. Our cookie policy is available here.

We collect personal data in the following ways:

• When you register with us or fill in forms on our website
• When you contact us in person, by phone, email, or otherwise
• When you use our services, including prescription and non-prescription services
• From your use of our website, including through cookies
• From third parties who are permitted to share your information with us, such as other healthcare providers

We may collect the following types of personal data:

• Identity Data: including first name, last name, username or similar identifier, date of birth, and gender
• Contact Data: including billing address, delivery address, email address, and telephone numbers
• Health Data: including medical history, current medications, allergies, and other health-related information necessary for providing our pharmacy services
• Financial Data: including bank account and payment card details
• Transaction Data: including details about payments to and from you and other details of products and services you have purchased from us
• Technical Data: including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website
• Profile Data: including your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses
• Usage Data: including information about how you use our website, products, and services
• Marketing and Communications Data: including your preferences in receiving marketing from us and our third parties and your communication preferences

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To provide pharmacy services to you, including dispensing prescriptions and offering healthcare advice
• To manage our relationship with you, including notifying you about changes to our terms or privacy policy
• To administer and protect our business and this website
• To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you
• To use data analytics to improve our website, products and services, marketing, customer relationships, and experiences
• To make suggestions and recommendations to you about goods or services that may be of interest to you
• We may use your personal information to contact you about our own and third-parties' goods and services that may be of interest to you.

We will only process your personal data where we have a legal basis to do so. The legal bases we rely on include:

• Consent: where you have given us clear consent to process your personal data for a specific purpose
• Contract: where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal obligation: where processing is necessary for compliance with a legal obligation that we are subject to
• Vital interests: where processing is necessary to protect someone's life
• Public task: where processing is necessary for the performance of a task carried out in the public interest
• Legitimate interests: where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

• Request access to your personal data (commonly known as a "data subject access request")
• Request correction of your personal data
• Request erasure of your personal data
• Object to processing of your personal data
• Request restriction of processing your personal data
• Request transfer of your personal data
• Right to withdraw consent

If you wish to exercise any of the rights set out above, please contact us.

We may update this privacy policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are happy with any changes to this policy.

To contact us about our privacy policy or to exercise any of your rights, please use the following details: