Privacy policy

Paul's Pharmacy Privacy Policy

Last Updated November 21, 2023

1. Introduction

We value your privacy and are committed to protecting your personal data. This policy explains the collection, use, disclosure, and protection of information when you visit or make purchases on our Shopify store.

2. Contact Information

Controller: Paul’s Pharmacy
Email: [Insert Customer Support Email]
Address: [Insert Business Address eg. Evansville, IN]
If you have concerns about how your data is handled, feel free to contact us.

3. Personal Data We Collect

a. Information You Provide
- Name, email address, shipping & billing address, phone number
- Payment details (merchant processors handle sensitive data)
- Account credentials, medication history, medical discipline, clinic name & license number
- Communications with support or during account registration

b. Automatically Collected Information
- IP address, device/browser details, purchase history, site interactions
- Cookies and tracking technologies for store functionality and analytics

c. Third‑Party Information
We may receive updates like address corrections or credit history for fraud prevention purposes.

4. How We Use Your Data

- To process orders, manage account, fulfill prescriptions
- Provide customer support, manage subscriptions or medication sync
- Enhance security and detect fraud
- Personalize your site experience and communicate promotions (with consent)

5. Data Sharing and Disclosure

We may share data with:
- Service providers (payment processors, delivery partners, analytics tools)
- Affiliates and subsidiaries, as needed for service delivery
- Legal authorities when required by law

6. Cookies & Tracking Technologies

Our store uses cookies and similar tools for site functionality, analytics, and marketing. These are necessary to optimize your shopping experience.

7. Data Retention

We retain personal data only as long as needed for operational, legal, or compliance purposes. When data is no longer required, it's securely deleted or anonymized.

8. Your Rights

Depending on your location, you may have rights to:
- Access, correct, update, or delete personal information
- Object to or restrict processing
- Withdraw consent (where processing is based on consent)
- Lodge a complaint with your local data protection authority
To exercise any rights, contact us using the details above.

9. Cross‑Border Data Transfers

If your data is transferred outside your jurisdiction, rest assured we implement safeguards such as standard contractual clauses or other mechanisms for safe transfers.

10. Changes to This Policy

We may update this policy to reflect changes in legal requirements or business practices. We encourage you to review it periodically—notice of significant updates will be provided directly.

11. Additional Legal Notices

- If applicable, we comply with HIPAA for any protected health information, COPPA if children are involved, GLBA, and state-specific rules such as CCPA/CPRA for California residents.
- This policy supports transparency, trust, and compliance with Shopify legal expectations.