Privacy Policy

1. Information We Collect

When you use Adderall Blog Pharmacy, we may collect the following types of personal data:

• Identity Data: Full name and gender.
• Contact Data: Email address, delivery address, billing address, and telephone number.
• Health Data: Prescription information, medical history relevant to your orders, and pharmacy consultation notes.
• Financial Data: Payment card details (processed securely via our PCI DSS-compliant payment provider — we do not store card details).
• Technical Data: IP address, browser type, device information, and cookies.
• Usage Data: Pages visited, products viewed, and interaction with our platform.

2. How We Use Your Information

We process your personal data for the following lawful purposes:

• To process and fulfil your orders, including prescription verification.
• To provide pharmacist consultations and health advice.
• To manage your account and provide customer support.
• To communicate order updates, service changes, and (with consent) marketing communications.
• To comply with legal and regulatory obligations under the GPhC and MHRA.
• To improve our website, products, and services through analytics.
• To detect and prevent fraud, misuse, or security incidents.

3. How We Share Your Information

We do not sell your personal data. We may share your information with:

• Delivery Partners: Royal Mail and other couriers, solely for the purpose of delivering your order.
• Payment Providers: Stripe, PayPal, and card processors to handle transactions securely.
• Regulatory Bodies: GPhC, MHRA, or NHS where legally required or upon lawful request.
• IT & Hosting Providers: Cloud services that support our platform operations under strict data processing agreements.
• Professional Advisers: Lawyers, auditors, and insurers where necessary for legal compliance or business operations.

4. Data Security

We take data security seriously and implement appropriate technical and organisational measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data in transit.
• Encrypted storage for sensitive data at rest.
• Role-based access controls limiting who can access personal data.
• Regular security audits and penetration testing.
• Staff training on data protection and information security.

5. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies we use include:

• Essential Cookies: Required for the website to function (e.g., shopping cart, login sessions).
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Preference Cookies: Remember your settings and preferences for a personalised experience.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the website.

6. Your Rights (UK GDPR)

Under the UK General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to legal and regulatory retention requirements.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at info@adderallblog.com. We will respond within one calendar month.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Prescription records are retained for a minimum of 2 years as required by GPhC regulations. Financial records are retained for 6 years to comply with HMRC requirements. When data is no longer needed, it is securely deleted or anonymised.

8. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.