Privacy Policy

1. Information We Collect

We may collect and process the following types of personal information:

1.1 Personal Identification Information

• Name and contact details (address, phone number, email)
• Date of birth
• Identification number (where legally required)

1.2 Health Information

• Prescription details
• Medical history relevant to pharmaceutical care
• Allergy information
• Health monitoring results (blood pressure, glucose levels)

1.3 Transaction Information

• Purchase history
• Payment information (processed securely, not stored)
• Insurance details

---

2. How We Use Your Information

We use your personal information for the following purposes:

---

3. Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Contractual Necessity: Processing prescriptions and providing services you've requested
• Legal Obligation: Compliance with pharmaceutical and healthcare regulations
• Legitimate Interests: Improving our services and managing our business operations
• Consent: When we send marketing communications (you can withdraw consent at any time)
• Vital Interests: In emergency situations affecting your health and safety

---

4. Data Sharing and Disclosure

We respect the confidentiality of your information. We may share your data only in the following circumstances:

4.1 Healthcare Professionals

We may share information with your doctors, specialists, or other healthcare providers when necessary for your care and with your consent or as required by law.

4.2 Regulatory Authorities

We may disclose information to the Malta Medicines Authority or other regulatory bodies as required by law.

4.3 Service Providers

We may use trusted third-party service providers (e.g., IT services, delivery services) who process data on our behalf under strict confidentiality agreements.

4.4 Legal Requirements

We may disclose information when required by law, court order, or to protect vital interests.

We do not sell or rent your personal information to third parties.

---

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Secure storage systems with access controls
• Encrypted transmission of sensitive data
• Regular security assessments and updates
• Staff training on data protection and confidentiality
• Physical security measures at our premises

---

6. Data Retention

We retain your personal information only for as long as necessary:

• Prescription Records: Retained for the period required by Maltese pharmaceutical regulations (typically 5 years)
• Health Records: Maintained for the duration of our professional relationship and as required by law
• Business Records: Kept in accordance with accounting and tax regulations

After the retention period, we securely dispose of or anonymize your data.

---

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

To exercise any of these rights, please contact us using the details in Section 10 below. We will respond to your request within one month.

---

8. Cookies and Website Data

Our website may use cookies and similar technologies to enhance your browsing experience. We use:

• Essential Cookies: Necessary for website functionality
• Analytics Cookies: To understand how visitors use our site (anonymized)

You can control cookie preferences through your browser settings.

---

9. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children without parental consent. If you believe we have inadvertently collected such information, please contact us immediately.

---

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

---

11. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with:

---

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website with a new "Last Updated" date.

We encourage you to review this policy periodically to stay informed about how we protect your information.

---