Home/Privacy Policy
Privacy Policy
Last updated: 26/07/2026
On this page
1. Who we are
Online Meds UK and Europe, trading as OnlineMed Europe, registered in UK and Europe is the data controller for the personal information described in this policy.
2. Information we collect
| Category | Examples |
|---|---|
| Identity & contact | Name, date of birth, email, phone, delivery and billing address |
| Order & payment | Items ordered, order history, payment card details (processed by our payment provider, not stored by us in full) |
| Health information | Prescriptions, consultation answers, medical history relevant to a purchase, communications with our pharmacists |
| Technical | IP address, browser type, device information, pages visited |
| Marketing preferences | Whether you’ve opted in to receive emails, and what you’ve clicked on |
3. Health information specifically
When you buy a prescription medicine or complete a health questionnaire, we collect health information necessary for a pharmacist to assess whether the product is suitable for you. Access to this information is restricted to [our pharmacists and the specific support staff who need it to process your order]. We don’t use health information for marketing, and we don’t sell it.
4. Why we process it, and our legal basis
- To fulfil your order — necessary for performance of a contract with you.
- To assess clinical suitability — necessary for the provision of health care by a health professional, under UK GDPR Article 9(2)(h) / equivalent EU provisions, subject to professional confidentiality duties.
- To meet legal and regulatory obligations — such as pharmacy record-keeping requirements under [applicable pharmacy regulation].
- To send marketing — only where you’ve given consent, and never using health data. You can withdraw consent at any time.
- To improve our website — based on our legitimate interest in understanding how the site is used, balanced against your privacy.
5. Who we share it with
- Delivery couriers — name, address, and contact details needed to deliver your order.
- Payment processors — [name of provider], to process your payment securely.
- IT and hosting providers — [names], who store data on our behalf under a data processing agreement.
- Regulators and authorities — where we’re legally required to, such as reporting adverse drug reactions or responding to a regulator’s request.
We don’t sell personal information, and we don’t share health information with advertisers.
6. International transfers
If any of our service providers are located outside the UK/EEA, we rely on [UK International Data Transfer Agreement / EU Standard Contractual Clauses / adequacy decision — specify which] to ensure your data is protected to an equivalent standard.
7. How long we keep it
We keep order and prescription records for [10 years], in line with pharmacy record-keeping requirements under [applicable regulation]. Marketing preferences are kept until you unsubscribe. Account data is kept while your account is active, plus [10 years] after closure for legal and accounting purposes.
8. Your rights
Under UK/EU GDPR, you have the right to: access the data we hold about you; ask us to correct it; ask us to delete it (subject to our legal obligation to retain pharmacy records); restrict or object to certain processing; and receive your data in a portable format. To exercise any of these, contact us using the details in section 13.
9. Cookies
We use essential cookies to run the checkout and keep your basket working, and — with your consent, via the cookie banner — analytics and marketing cookies.
10. Security
We use encryption in transit (HTTPS/TLS) and at rest for sensitive fields, restrict access to health data on a need-to-know basis, and require staff handling it to complete data protection training. No system is completely secure, but we review these measures regularly.
11. Children
Our service is intended for adults. We don’t knowingly collect personal information from children without appropriate parental or guardian involvement, in line with applicable age-of-consent rules for online services in your country.
12. Changes to this policy
We’ll update this page when our practices change and update the date at the top. For material changes affecting how we use health information, we’ll take reasonable steps to notify you directly.
13. Contact us / complaints
Data protection queries: sales@onlinemedeurope.co.uk. If you’re unhappy with how we’ve handled your data, you have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or your local EU data protection authority.