Introduction - view section
About us - view section
Your privacy rights - view section
What kinds of personal information we use - view section
How we gather your personal information - view section
How we use your personal information - view section
Automated decision making - view section
Our legal basis for using your personal information - view section
Sharing your personal information with or getting your personal information from others - view section
Transfers outside the UK - view section
How long we keep your personal information for - view section
Keeping you up to date - view section
Your online activities - view section
Privacy Notice 1st May 2018
Our Privacy Notice describes the categories of personal data we process and for what purposes. We are committed to collecting and using such data fairly and in accordance with the requirements of the General Data Protection Regulations (GDPR).
1.1 We take your privacy seriously and you can find out more here about your privacy rights and how we gather, use and share your personal information – that includes the personal information we already hold about you now and the further personal information we might collect about you, either from you or from a third party.
1.2 Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information. Our DPO can be reached by post at Merchants Warehouse, Castle Street, Castlefield, Manchester, M3 4LZ or by email on DPO@well.co.uk if you have any questions about how we use your personal information.
See section 3 Your privacy rights for more information about your rights and how our DPO can help you.
1.3 This Privacy Notice provides up to date information about how we use your personal information and will update any previous information we have given you about using your personal information (also referred to as personal data). If we make any changes affecting how we use your personal information, we will update this web page with an updated date displayed at the top of this page, so please check back regularly for updates. Our website will always show our most up to date version of our Privacy Notice.
We are what is known as the ‘controller’ of personal information we gather and use. When we say ‘we’ or ‘us’ in this Privacy Notice, we mean the company Bestway National Chemists Ltd trading under the brand names ‘Well’, ‘Well Pharmacy’ and ‘Eddie’. This company is registered with the data protection supervisory authority, the Information Commissioner’s Office (ICO), as a data controller.
When we say ‘Group’ in this Privacy Notice, we mean other members of our group of companies, including trading and subsidiary companies.
3.1 You have the right to object to how we use your personal information. You also have the right to see what personal information we hold about you, to ask us to correct any inaccuracies and to ask for some of your personal information to be provided to someone else. In addition, when permitted by law, you can ask us to delete or restrict personal information we hold about you.
To exercise your right to access your personal information please contact our Data Subject Access Request Team at ‘DSAR Team, Merchants Warehouse, Castle Street, Castlefield, Manchester, M3 4LZ’. To exercise any of your other rights in this Privacy Notice please contact our DPO by post at Merchants Warehouse, Castle Street, Castlefield, Merchants, M3 4LZ or by email on DPO@well.co.uk.
Read more about your Privacy Rights
You can contact our DSAR Team to access your personal information or our DPO to exercise any of your other privacy rights as follows:
3.2 Right to object:
You can object to our processing of your personal information by providing details of your objection to us.
3.3 Access to your personal information
You can request access to a copy of your personal information that we hold, along with information on what personal information we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making. You can make a request for access free of charge by contacting our Data Subject Access Request team at ‘DSAR Team, Merchants Warehouse, Castle Street, Castlefield, Manchester, M3 4LZ’. Please make all requests for access in writing, and provide us with evidence of your identity. See Proof of identity checklist - GOV.UK for information on the documents you’ll need to provide.
3.4 Right to withdraw consent
If you have given us your consent to use personal information, you can withdraw your consent at any time.
You can ask us to change or complete any inaccurate or incomplete personal information held about you.
You can ask us to delete your personal information where it is no longer necessary for us to use it, you have withdrawn consent, or where we have no lawful basis for keeping it.
We have the right to refuse to comply with a request for erasure where the personal data is processed for one of the following reasons:
we need to use the information to perform a task carried out in the public interest, to provide healthcare or treatment or it is necessary for the reasons of public health in the public health arena;
we need to use the information to comply with our legal obligations;
archiving purposes in the public interest, scientific research, historical research or statistical purposes; or
the exercise or defence of legal claims.
You can ask us to provide you or a third party with some of the personal information that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred.
You can ask us to restrict the personal information we use about you where you have asked for it to be erased or where you have objected to our use of it.
3.9 Make a complaint
You can make a complaint to us about how we have used your personal information, by contacting our DPO by post at Merchants Warehouse, Castle Street, Castlefield, Merchants, M3 4LZ or by email on DPO@well.co.uk. You can also make a complaint to the data protection supervisory authority, the ICO, at ico.org.uk.
We will not make any charge for responding to any request from you to exercise your privacy rights, and we will respond to your requests in accordance with our obligations under data protection law.
4.1 To enable you to register or open an account with us and to enable us to process your order we will ask you to provide the following personal information:
your name, address, date of birth, contact details (phone and email address) and your gender;
information about your health and medication history;
4.2 Please note that we require certain types of personal information so that we can fulfill a contract to supply products and services to you or to meet a legal obligation. If you do not provide us with that personal information, or if you ask us to delete your personal information or account, we will no longer be able to provide our products and services to you.
4.3 No credit/debit card payment details are stored by us. For any repeat orders of products or services made by you via our website or if you opt in to have your details stored for future payments, our third party Payment Processing Agency securely holds your credit/debit card details and provides us with a unique token that represents that particular card; this token is only valid for payment to us.
We obtain personal information:
directly from you when you register or open an account with us, sign in, purchase products or services from us, contact us by post, phone or online using our chat service for support or give us feedback. You give us health and medication related information online when you register or sign up to use our service;
automatically when you access our website. We collect certain usage information when you utilize our website such as Internet Protocol (“IP”) addresses, log files, unique device identifiers, pages viewed, browser type, any links you click on to leave or interact with our website and the products and services we offer, and other usage information collected from cookies and other tracking technologies. For example, we collect IP addresses to track and aggregate non-personal information, such as using IP addresses to monitor the regions from which users navigate our website. We may also collect IP addresses from users when they log into our website as part of our log-in and security features. We may also, when you enable location based-services, collect Global Positioning System (GPS) location data and/or motion data.
We also may obtain some personal information from monitoring or recording calls. We may record or monitor phone calls with you for regulatory purposes, for training and to ensure and improve quality of service delivery, to ensure safety of our staff and customers, and to resolve queries or issues.
We use your personal information:
account registration and assessment of your suitability to utilize our products and services. We may use your personal information to register your account if you elect to have an account with us and to assess your health and medication history to assess whether our products and services are suitable for your use.
to provide our products and services and to operate our business. We may use your personal information to operate our business, including providing you with the products and services you have requested, providing you with support related to our products and services and to help us protect our business, including to combat fraud and to protect your information.
customer service and technical support. We may use your personal information and information about your computer configuration to resolve questions you may have about our products and services and to follow up with you about your experience. We also offer an internet chat service. Whilst this service is encrypted you should not supply more personal information than is required to address your specific issue. A transcript is retained to resolve questions or issues related to our products and services.
communicate with you and tell you about other products and services. We may use your information to communicate with you about our website and our products and services and to contact you about appropriate other products and services which we offer. If you provide your consent to do so, we may communicate with you to send you offers for third party products and services what we think may be of use to you. Please see section 12, Keeping you up to date, clause 12.2 to manage your consent to receiving marketing information from us.
to improve our products and services and our website. We will utilize your information to personalize or customize your experience and our website and to develop new features or services on our website and to improve the range, variety and quality of the products and services we offer.
feedback. We may use any information you volunteer by any means, including in surveys you answer for us and combine them with answers from other customers in order to better understand how our website is used and the products and services we offer and how we may improve them. Answering any survey and giving feedback is optional.
We utilize an automated online health and medication questionnaire when you sign up to use our website for the first time to assess whether you are suitable to utilize our products and services. This automated process will determine from the answers you give to the questions whether you can or cannot proceed to use our website. If there is any ambiguity with the answers you provide we will contact you using the contact details you have provided to us to provide you with support.
8.1 We only use your personal information where that is permitted by the laws that protect your privacy rights. We only use personal information where:
we have your consent (if consent is needed);
we need to use the information to comply with our legal obligations;
we need to use the information to perform a contract with you; or
it is fair to use the personal information either in our interests or someone else’s interests, where there is no disadvantage to you – this can include where it is in our interests to contact you about appropriate products or services or collaborate with others to improve our products and services.
Where we have your consent, you have the right to withdraw it. We will let you know how to do that at the time we gather your consent. See section 12 Keeping you up to date, clause 12.2 for details about how to withdraw your consent to marketing.
8.2 Special protection is given to certain kinds of personal information that is particularly sensitive. This is information about your health status and your medication history. We will only use this kind of personal information where:
required to deliver our products and services to you;
we have a legal obligation to do so (for example to protect vulnerable people); or
you have specifically given us explicit consent to use the information.
From time to time, we may need to share your personal information with others:
third party service providers who perform various functions to enable us to provide our website and our products and services, such as IT suppliers, couriers, mailing house and suppliers. Our contracts with these third parties require them to maintain the confidentiality and security of the information we provide to them, only act on our behalf and under our instructions and to not use personal information for purposes other than the product or service they are providing to us or on our behalf;
response to legal requests may involve us sharing your information with courts, law enforcement agencies or other government bodies when we have a good faith belief we are required or permitted to do so by law;
protection of our business and others may involve us sharing your personal information and usage data when we believe it is appropriate to enforce our Terms and Conditions and other agreements, for example with organizations for fraud protection and credit risk reduction, or to protect the rights, property or safety of our business, our users and others;
sharing information within our Group for everyday business purposes such as to process your transactions, maintain your accounts, operate our business etc
sale of our business if we sell, merge or transfer any part of our business, we may be required to share your information.
10.1 We may need to transfer your information outside the UK to service providers, agents and subcontractors in countries where data protection laws may not provide the same level of protection as those in the European Economic Area, such as the USA.
Find out more about how we transfer your data outside of the UK
We may need to transfer your personal information to territories that are outside the EEA. We will only transfer your personal information outside the EEA where either the transfer is to a country which the EU Commission has decided ensures an adequate level of protection for your personal information, or we have put in place our own measures to ensure adequate security as required by data protection law. These measures include ensuring that your personal information is kept safe by carrying out strict security checks on our overseas partners and suppliers, backed by strong contractual undertakings approved by the relevant regulators such as the EU style model clauses. We also use the EU Commission approved EU-US Privacy Shield when personal information is transferred to the US.
You can find out more information about standard contractual clauses as detailed by the ICO. Visit their website at ico.org.uk and search for ‘International transfers’.
Details of any third party data processor we use can be obtained by contacting our DPO by post at Merchants Warehouse, Castle Street, Castlefield, Manchester, M3 4LZ or by email on DPO@well.co.uk.
We need your personal information for as long as we have a legal or business reason to do so, which generally means as long as you remain a customer of Eddie or as requested to meet our legal obligations, resolve disputes or enforce our agreements. When you cease to be a customer, we may continue to communicate with you about our products and services, give you important business updates that may affect you, and let you know about products and services that may interest you, unless you have withdrawn or opted out of receiving marketing communications.
12.1 We will communicate with you about products and services we are delivering using any contact preferences you have given to us - for example by post, email, text message, social media, and notifications on our website.
12.2 Where you have given us consent to receive marketing, you can withdraw consent by contacting our DPO by post at Merchants Warehouse, Castle Street, Castlefield, Manchester, M3 4LZ or by email on DPO@well.co.uk.
You can also update your contact preferences by contacting our DPO by post at Merchants Warehouse, Castle Street, Castlefield, Manchester, M3 4LZ or by email on DPO@well.co.uk.
fulfill your requests for products and services and to improve our website;
remind us of who you are on return visits in order to deliver to you a better and more personalized service;
estimate our audience size and measure traffic patterns regarding usage of our website; and
customize the advertising and content you see.
13.2 Find out more about cookies and other tracking technologies