Privacy Policy & HIPAA Notice
Template notice. A HIPAA-compliant Notice of Privacy Practices has required content and formatting — have counsel finalise it.
Information we collect
Account details, shipping and billing addresses, payment information, and — for prescription orders — protected health information (PHI) including your date of birth, allergies, medical conditions, medications, prescriber details and prescription images.
How we use it
To verify and dispense your prescriptions, to perform the drug utilisation review your pharmacist is required to carry out, to fulfil and ship orders, and to meet our legal reporting obligations (including prescription drug monitoring programmes).
Who we share it with
Your prescriber (for verification), our shipping carriers, our payment processor, and state or federal regulators where the law requires it. We do not sell your personal or health information.
How we protect it
PHI is encrypted at rest and in transit. Every access to a patient record is written to an immutable audit log recording who accessed it, when, and from where.
Your rights
You may request a copy of your records, request corrections, request an accounting of disclosures, and file a complaint with us or with the HHS Office for Civil Rights. Contact [privacy officer name] at [email] or [phone].
Cookies and website analytics
This section describes what the site actually does. Have it reviewed alongside the rest of this page before you take real orders.
We use a small number of cookies. Some are necessary for the site to work at all — they keep you signed in and remember what is in your basket. Those are set whatever you choose, because without them the site does not function.
Separately, we would like to count visits so we can see which pages are useful. We ask first, and we set nothing until you agree. If you decline, or if your browser sends a Global Privacy Control signal, no analytics cookie is set, no record of your visit is kept, and nothing is sent to Google or Microsoft.
If you accept, what we record
- A random identifier stored on your device. It is meaningless outside our own database and is not shared with anyone.
- Which pages you opened — including the pages of individual medicines. We want you to understand this plainly: if you accept, a record exists in our database showing that this browser looked at a particular medicine. It is not connected to your name, and we do not attempt to work out who you are, but it is a record of what was viewed.
- The website that referred you, and whether you were on a phone, tablet or computer.
- Your IP address with the last part removed, so it points at a network rather than at you.
What we never record
- Anything linked to your account. Visit records have no connection to your name, your orders or your prescriptions, and the database has no column that could hold one.
- Anything you type into the search box. Search terms and other query parameters are discarded before the visit is saved.
- Your account, checkout or prescription pages. Those are never recorded, whatever you have agreed to.
Who else sees it
If you accept, we use Google Analytics. Google receives the page you are on, the site that referred you, your approximate location, your device type, and an identifier for your browser. Everything described above stays in our own database on our own server; what Google receives is a deliberately reduced version of it.
Google is never told which medicine you looked at. Medicine pages are reported to Google by category only — it is told you viewed something in, say, "Weight Loss", not which product. Searches are reported without the term you typed. Your account, checkout and prescription pages are not reported to Google at all.
We have switched off Google Signals and advertising personalisation, so this information is not used to build advertising audiences. We do not run advertising pixels, and we do not sell this information.
Session recording
If you accept, we also use Microsoft Clarity. It records how pages are used — where you scroll, what you click, where you hesitate — so we can find parts of the site that are confusing or broken. Think of it as a heatmap of the page rather than a camera pointed at you: text is masked, so what is captured is the shape of the page and how it was used, not what it said or what you typed.
Clarity does not run on medicine pages at all. Unlike the analytics above, a recording carries the real page address, and we are not prepared to hand a third party the address of a page named after a specific medicine. It also never runs on your account, checkout or prescription pages. It records the public parts of the site: the home page, category listings, brands, the basket and our information pages.
If you would rather Google received nothing at all, decline below — or use your browser's Global Privacy Control setting, which we honour automatically.
How long we keep it
Our own visit records are deleted automatically after roughly 14 months. Data held by Google is kept under Google's own retention settings for our account. The record of your cookie choice is kept longer, because it is our evidence that we asked.
Changing your mind
You can withdraw at any time — it takes effect immediately and stops any further recording. You can also clear the cookies in your browser, which makes us ask again on your next visit.