Your Data at pillpharm

A transparent look at how we handle and share your personal information.

At **pillpharm**, safeguarding your personal data is a top priority. This page explains which external services we use, why we use them, and what information might be shared to ensure smooth and secure operations. We're committed to keeping your data protected.

Last Updated: May 21, 2025

1. Stripe: Secure Payment Processing
   
   • 1.1 **Purpose:** Stripe handles your credit/debit card and Apple Pay transactions, ensuring secure and efficient payment processing for your orders.
   • 1.2 **Data Shared:** To process your payment and carry out essential fraud checks, we securely transmit your name, billing address, email, and transaction number to Stripe. We do not access or store your full card number, expiry date, or CVV; these are securely handled by Stripe. We maintain a unique token linked to your transaction for verification.
   • 1.3 **Security Measures:** Stripe is a PCI-certified service, committed to high security standards. They may transfer data outside the EU, and to do so, they rely on robust mechanisms like the EU-US and Swiss-US Privacy Shield Frameworks. More details can be found on Stripe's website.
2. PayPal: Convenient Payment Option
   
   • 2.1 **Purpose:** We offer PayPal as a payment option, allowing you to use your PayPal account for purchases.
   • 2.2 **Data Shared:** When you choose PayPal, we send them your name, delivery address, and the total amount of your order. Since you log in directly to their system for payment, we don't need to share any other sensitive payment information.
   • 2.3 **Security Measures:** PayPal is a widely used and secure payment gateway. Information may be transferred outside the EU in accordance with their privacy policy, which provides comprehensive details on their data protection practices.
3. Trustpilot & Reviews.io: Gathering Your Feedback
   
   • 3.1 **Purpose:** To gather valuable feedback on our services, we partner with Trustpilot and Reviews.io. If you opt-in, you'll receive an email invitation to review your experience with pillpharm.
   • 3.2 **Data Shared:** We only share the minimum information required for them to send you a review invitation: your name, email address, and the relevant transaction number to ensure the review is linked to a genuine purchase.
   • 3.3 **Security Measures:** Both Trustpilot and Reviews.io are committed to data privacy. Any data transfers outside the EU are done with appropriate safeguards, ensuring your information remains protected. Their respective privacy policies offer more in-depth information.
4. Google: Website Analytics and Improvement
   
   • 4.1 **Purpose:** We use Google services, primarily Google Analytics, to understand how visitors interact with our website. This helps us identify popular sections, areas for improvement, and ultimately enhance your online experience.
   • 4.2 **Data Shared:** When you visit our site, small data files called "cookies" are placed on your device. These cookies help Google gather anonymized data about your Browse behavior. This information helps us analyze website traffic and trends, but it doesn't personally identify you.
   • 4.3 **Security Measures:** Google maintains high standards for data security. While data may be transferred outside the EU, Google adheres to robust compliance frameworks to ensure data protection. You can manage and delete cookies through your browser settings.
5. Microsoft: Internal Communications and Storage
   
   • 5.1 **Purpose:** We utilize certain Microsoft services for our internal communications, including email correspondence. This ensures our team can efficiently communicate and manage your queries.
   • 5.2 **Data Shared:** If you contact us via email, or if we contact you, this information, including your name, address, email, and phone number, will be stored on Microsoft servers. The content of your email, which may include sensitive personal information, will also be stored. We adhere to a strict retention policy, ensuring emails are not kept longer than necessary.
   • 5.3 **Security Measures:** Microsoft has extensive expertise in data protection and champions privacy. They comply with recognized data transfer mechanisms, including EU Model Clauses, for any data processed outside the EU.
6. Royal Mail & Amazon Shipping: Delivering Your Order
   
   • 6.1 **Purpose:** To get your orders to your doorstep, we rely on trusted delivery partners like Royal Mail and potentially Amazon Shipping.
   • 6.2 **Data Shared:** For delivery purposes, we share your name, delivery address, and transaction number with these carriers. To enable delivery updates and tracking, we also provide your email and mobile phone number.
   • 6.3 **Security Measures:** Both Royal Mail and Amazon Shipping have robust security measures in place to protect the data they handle. Any necessary international data transfers are conducted in compliance with UK law, ensuring a protected level of information.
7. Ionis: Supporting Our Infrastructure
   
   • 7.1 **Purpose:** We may engage Ionis for specific IT infrastructure and data processing services that are crucial for the efficient operation of our website and services.
   • 7.2 **Data Shared:** The data shared with Ionis is strictly limited to what's necessary for them to perform their designated functions. This could include technical data, encrypted identifiers, or general system usage statistics, with a focus on minimizing the transfer of sensitive personal information.
   • 7.3 **Security Measures:** We ensure that our agreements with Ionis include comprehensive contractual safeguards and data processing agreements that fully comply with GDPR requirements. This guarantees your data is protected throughout any transfer and processing activities.
8. AWS (Amazon Web Services): Our Secure Data Foundation
   
   • 8.1 **Purpose:** AWS provides the secure server infrastructure where all your data is stored and processed, enabling us to deliver our services reliably and securely.
   • 8.2 **Data Stored:** AWS hosts a range of personal data essential for your account and order management, including:
     • 8.2.1 **Account details:** Your name, addresses, email, gender, date of birth, and telephone number.
     • 8.2.2 **Order information:** Order status, internal notes about your order, contents of your order, payment amounts, delivery tracking details, IP address, data from payment providers, and any information collected for order verification.
     • 8.2.3 **Communication preferences:** Your opt-in choices for different types of communications.
     • 8.2.4 **Correspondence:** Notes related to your orders, including any communication we've had with you (which may contain sensitive information).
     • 8.2.5 **Partner order details:** Similar information as above for orders facilitated through partners.
   • 8.3 **Security Measures:** Our AWS servers are equipped with industry-leading security features, including encryption of data at rest, use of a DMZ (demilitarized zone) for London-based servers, and encryption of data in transit via SSL.

For more information, please visit our FAQs or contact our Customer Support team.

Disclaimer: This page is part of our comprehensive Privacy Policy and aims to provide clear insight into our data processing activities. We continuously review and update our practices to maintain the highest standards of data protection.