Maxwellia privacy policy

We respect your privacy and are committed to protecting your personal data. In this privacy policy, we explain how we collect and use your personal information when you visit our website or buy or use medicines, products or services via the website.

“We” are Maxwellia Limited with company number 08573637 whose registered office is at 30s1a-D Alderley Park, Alderley Edge, East Cheshire SK10 4TG. We operate the website at www.lovima.com (the “Site”), and we are the data controller for the purposes of the Data Protection Act 2018, the EU General Data Protection Regulation (“GDPR”) and any other data protection legislation applicable in the UK from time to time.

If you have any questions about your privacy on the Site, or our use of your personal data, please contact us.

Please note that links from the Site may take you to external websites which are not covered by this privacy policy. We recommend that you check the privacy policies on those websites before submitting any personal information to such websites. We will not be responsible for the content, function or information collection policies of such external websites.

What information do we collect about you and how do we collect it?

You are not required (by law or by any contract you enter into via the Site) to provide personal information to us when you visit the Site. We will only require you to provide personal information to us where it is necessary for us to provide you with access to a service at your request, such as when you contact us, register a patient account on the Site or purchase medicines or testing kits via the Site.

Information you provide to us

  • We may collect personal information about you whenever you access the Site, such as by doing the following:
  • Enquiring about medicines, products or services that are made available via the Site
  • Submitting personal or health information as part of a Consultation (being either: (i) an online consultation; or (ii) a suitability check in respect of the potential supply of a medicine, which will result in either the supply of the medicine or appropriate onward signposting)
  • Purchasing medicines, products or services
  • Supplying us with your medicines, products or services
  • Using and browsing the Site
  • Telephoning, texting, writing by post or emailing us
  • Enquiring about, or applying for, job vacancies

 

This information may include the following:

  • Normal identification information, such as your full name and title, date of birth, age, gender and marital status
  • Contact information, such as your postal address, email address and telephone number
  • Information about your health, including your current health and wellbeing status, your medical history and records, and details of any medicines or treatment that you are receiving
  • Correspondence or information provided by you in your patient account (such as chat messages or other messages that you send to the pharmacy or our customer care team)
  • Information about your medicines purchase (including your purchase history)
  • Payment information (this is securely collected and processed by our payment service provider)
  • Additional information relevant to your use of the Site and you accessing the medicines, products or services, such as your marketing preferences, survey responses and feedback
  • We understand that any information concerning your health is particularly sensitive (known as “special categories” of personal data). We take extra precautions to ensure that any special category personal data is kept secure and confidential and we will only retain this data for as long as necessary for the purposes for which we collect it.

 

Information we collect about you on the Site

We collect information using cookies and other similar technologies to help distinguish you from other users of the Site. This can streamline your online experience by saving you from re-inputting some information and allows us to make improvements to the Site and to analyse user statistics. 

When you visit the Site, we may collect the following information:

  • Which pages you view and which links you follow
  • Your IP address and general location
  • Details of the hardware and software that you use to access the Site
  • Any passwords that you use on the Site
  • A device identifier (cookie or IP address) for fraud prevention
  • Details of your visits to the Site and the resources that you access, including, but not limited to, traffic data, location data, web logs and other communication data
  • You must be at least 18 years old to use the Site and to access the services. We do not knowingly collect any personal data relating to children.

 

Cookies

What is a cookie?

A cookie is a small text file that is sent by a website server to your browser and stored on your computer. Cookies allow website operators to accumulate useful information, such as whether the computer (or its user) has visited the website before. Cookies are needed for a number of functions, which make websites work, or work more efficiently, and they can provide information to website owners about how you use their website. Cookies can also be used to show you adverts that are relevant to you, based on your browsing habits and to personalise your user experience.

How do we use cookies?

We use cookies to monitor how people use the Site, including estimating audience size and patterns of use, to help us provide you with a better service. Cookies also make it easier for you to use the Site on future visits and allow us to personalise the content of the Site to you by recording information about your preferences.

We use both persistent cookies (which expire on a specified date) and session cookies (which expire when you close your browser).

The cookies that we use on the Site have been categorised based on definitions given in the ICC UK Cookie Guide. We use the following cookies:

  • Strictly necessary cookies - These cookies are required for the operation of the Site. Without these cookies, services you have asked for cannot be provided. 
  • Functionality cookies - These cookies are used to recognise you when you return to the Site. They enable us to personalise our content for you, greet you by name and remember your preferences (for example, your marketing preferences).
  • Analytical/performance cookies - These cookies allow us to recognise and count the Site’s visitors and to see how visitors move around the Site when they are using it. They help us to improve the way the Site works, for example, by ensuring that users can easily find what they are looking for.  We use Google Analytics as well as our own first party cookies to provide anonymous statistics on how the Site is used. Some of our performance cookies may be managed by third parties.
  • Targeting or advertising cookies - These cookies are used to help us show you adverts that are more relevant to you and your interests. We also use these cookies to cap the number of times you see an advertisement and assist us in analysing the performance of advertising campaigns. They are usually placed by advertising networks with the website operator’s permission. They remember the websites that you have visited and this information is shared with other organisations, such as advertisers. These cookies will typically be linked to certain website functionality, which is managed by the other organisation.

Please note that third parties (including, for example providers of external services like web traffic analysis services such as Google Analytics, or advertising services and vendors) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

What cookies do we use?

You can find a list of first party cookies (cookies that we place on to your device) in our privacy preference centre. You can access this by pressing ‘No, let me choose’ on the cookies banner which is displayed when you first visit the Site, and going through the different types of cookies and selecting ‘Cookie details’.

If you have already accepted these cookies on your browser and wish to access or review them retrospectively, you can either visit the Site in an ‘incognito’ or ‘private’ window to display the cookies banner again; or clear your cookies on your regular browser to reset these preferences and be able to view them again.

You decide which cookies we use

You can configure cookie settings in your web browser. You can find out more about how to do this at the following links:

●      Chrome

●      Firefox

●      Safari

●      IE and Edge

However, please bear in mind that if you do not allow us to use certain cookies, it may prevent you from accessing parts of the Site or result in a loss of functionality, which degrades your experience of the Site.

Further information about cookies

There is a lot of good information about cookies available online. For more information about cookies generally, visit allaboutcookies.org.

Get in touch

Please contact us if you have any questions about how we use cookies or about your privacy.

Information we collect about you from other sources

We may collect information about you from other sources, which may include the following:

  • Publicly available information, from sources such as (in the UK) the Electoral Roll or Companies House
  • Information you have shared publicly, including on social media (particularly in respect of job applications)
  • Information from third party databases, such as identity and credit reference agencies, which may include details about your home
  • Information from your other healthcare providers (only with your consent, or where it is necessary for us to provide you with access to a service or comply with our legal obligations)
  • This list is not exhaustive and, in specific instances, we may need to collect additional data for the purposes set out in this privacy policy.

Information we receive about you from other sources

Sometimes, you will have given your consent for other websites, services or third parties to provide information to us.

This could include information which we receive about you if you use any other website that we operate or the other service that we provide, in which case we will have informed you when we collected that data if we intend to share such data internally and combine it with data collected on the Site. We will also have told you for what purpose we will share and combine your data.

It could also include information from third parties that we work with to provide products and services, such as payment processors, delivery companies, technical support companies and advertising companies. Whenever we receive information about you from these third parties, we will let you know what information we have received and how and why we intend to use it.

How and why do we use your personal information?

We take data protection law seriously, so below we have set out exactly how and why we use your information, and what our legal basis is to be able to use your information in each way.

Patient Accounts

When you register an account on the Site as a patient, we will collect and use your personal information in order to maintain and administer your patient account. This may be necessary in order for us to perform our contractual obligations or, otherwise, we have a legitimate interest to manage our patients’ accounts to facilitate purchases and communication between us.

You may contact us at any time to close your patient account. However, please bear in mind that we may be required to retain your personal information in order to comply with our legal obligations.

Consultations

If you wish to purchase medicines via the Site, you will be required to undergo a Consultation (as defined above). The information that you provide during a Consultation is reviewed by a registered pharmacy. If the pharmacy considers that it requires further information from you after reviewing your answers, it will ask you to provide this via email. 

The information which you provide is essential to the clinical decision-making process. The pharmacists with whom we work need to know about your current health, your medical history and any other treatment which you are receiving, so that they can make sure that the medicine is safe and suitable for you. Your current health and medical status may also determine whether or not you need to seek medical attention in person.

Supplying medicines 

It is necessary for us to use personal information about you to enter into and perform any contracts, such as when you purchase medicines or other products or services via the Site. Using your information in this context is necessary so that we can:

  • Provide you with information about medicines, products and services that we make available to you via the Site
  • Administer your order, including taking payments and arranging delivery
  • Provide you with information about your purchase and your contract 
  • Make decisions about your purchase, including about the suitability of any medicines
  • Verify your identity
  • Deal with any complaints you may have
  • Contact you about any changes that we make to the medicines, products or services that we make available to you via the Site
  • Administer the Site, including troubleshooting problems, analysing statistics, conducting research and tests and keeping the Site secure
  • Telling you about other medicines, products or services that we think may be of interest to you
  • We may use your information to identify and tell you about certain medicines, products or services that we think may be of interest to you. We will only do this where you have informed us that you would like to receive marketing communications. You may update your preferences at any time by contacting us.

We may also use your information to invite you to participate in patient feedback surveys and other market research. If we contact you about market research, you do not have to participate. If you tell us that you do not want to receive market research communications, we will respect this.

Whether you choose to receive marketing communications or market research communications is entirely up to you. You can choose to receive both, none, or just one or the other. Your choice will not affect any medicines, products or services that you have purchased via the Site, nor will it affect any medicines, products or services you buy in future.

Telling you about medicines, products or services that are similar to ones that you have already bought

If you have already bought medicines, products or services via the Site, we may contact you with information about similar medicines, products and services that are available via the Site. We have a legitimate interest to contact you for this purpose, but you may object to receiving these messages at any time.

We will only contact you by email or text message and you can choose not to receive these messages at any time. Simply follow the unsubscribe instructions in the message or contact us.

Making our business better

We always want to offer you the best user experience that we can. Sometimes, this means we may use your information to find ways that we can improve what we do, or how we do it.

We have a legitimate interest to use your information to improve our business, and we will only use your information where it is necessary so that we can:

  • Review and improve existing products and services and develop new ones
  • Review and improve the performance of our systems, processes and staff (including training) 
  • Improve the Site to ensure that content is presented in the most effective manner for you and for your computer
  • Measure and understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you

Contacting you

We want to stay in touch with you. Sometimes, we may need to use the information that we have about you in order to respond to your questions or let you know about important changes. We have a legitimate interest to keep in contact with you, as a customer, but this may also be necessary in connection with any contract that you enter into via the Site. We will only use your information in this respect where it is necessary so that we can:

  • Interact and respond to any communications you send us, including any social media posts that you tag us in
  • Contact you in connection with any orders, including where any pharmacist with whom we work requires further information from you, so that we can notify you of the status of your order, and so that we, the pharmacy or our courier partners can inform you when your order is due to arrive.
  • Let you know about any important changes to our business or policies
  • We will primarily contact you via email, SMS messaging and your patient account to update you on your order. In certain cases, where our customer service team needs to contact you regarding your order, we may contact you by telephone.
  • Verifying your identity

We may use your information where it is necessary for us to do so in order to meet our legal obligations and to detect and prevent fraud, money-laundering and other crimes.

Protecting you and others from harm

We may use your information where it is necessary to protect your interests, or the interests of others, in accordance with our legal obligations and the pursuit of legitimate interests. This may include in the event of criminality, such as identity theft, piracy or fraud.

Change of purpose

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

With whom do we share your personal information?

Sharing your information within our company 

We share the information that you provide to us with our staff so that we can make certain medicines, products and services available to you via the Site. In particular, the following persons may have access to the data that you provide to us:

  • Our pharmacy team
  • Our customer services team, which processes your order

Sharing your information with third parties

We may share your data with selected third parties. For example, we may share your information with:

  • A registered pharmacy, which is responsible for dispensing your medicine.
  • A web development company which maintains the Site. They will only access your data in the event that there is a problem with your order which needs to be resolved.
  • Our payment service provider, to process payments on our behalf. We will share your full name, address, phone number, email address and details of your order for this purpose. Our payment provider will collect and process your payment details; we will not store or have access to your full credit or debit card details.
  • A credit reference agency, for carrying out identity checks. All orders made via the Site are subject to identity checks, in order to prevent online fraud. Your full name, date of birth and home address will be shared for this purpose.
  • Third party couriers (e.g. Royal Mail, DPD or UPS) in order to arrange delivery of your order. Again, we will only share your full name, postal address and phone number or email address.
  • Clinical auditors and regulatory bodies. The registered pharmacy with which we work is regulated and inspected by the General Pharmaceutical Council (“GPhC”). During an inspection, we may be required to share information about your consultation with an approved auditor.
  • Contact management systems, to send emails, instant messages, social media messages and SMS messages.

There are certain other exceptional circumstances in which we may disclose your information to third parties. This would be where we believe that the disclosure is:

  • Required by the law, or in order to comply with judicial proceedings, court orders or legal or regulatory proceedings.
  • Necessary to protect the safety of our employees, our property or the public.
  • Necessary for the prevention or detection of crime, including exchanging information with other companies or organisations for the purposes of fraud protection and credit risk reduction.
  • Proportionate as part of a merger, business or asset sale. In the event that this happens, we will share your information with the prospective seller or buyer involved.

Creating and sharing anonymised data for research purposes

Occasionally, we may compile data sets for research purposes using anonymised (non-personal) information from our patient database. In some cases, we have a legitimate interest in sharing such research data for wider consumption. Any data that we use for such purposes will always be anonymised; a process by which certain parts of the data are removed prior to dissemination so that the relevant data subject cannot be directly or indirectly identified from such disseminated data.

How long do we keep your personal information?

We will only store your personal information for as long as we need it for the purposes for which it was collected.

Where we provide you with a service, such as where you register an account as a patient on the Site, we will retain any information you provide to us at least for as long as we continue to provide that service to you.

We retain personal data relating to patient health care in accordance with guidance issued by the UK National Health Service. On the expiry of the relevant period, we will review the information that we hold and, unless we have a legitimate reason to keep holding that information (in accordance with our legal obligations and the purposes set out in this policy), it will be securely deleted.

Generally, we may retain personal data relating to the purchase of medicines for a period of no more than 6 years.

How do we protect your personal information?

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

We try to ensure that all information you provide to us is transferred securely via the Site (always check for the padlock symbol in your browser, and “https” in the URL, to ensure that your connection is secure).

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Site; and any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

All information you provide to us is stored on secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of the Site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

What rights do you have in respect of your personal information?

If you require any further information about your rights as explained below, or if you would like to exercise any of your rights, please contact us.

You have the right to be informed

We have a legal obligation to provide you with concise, transparent, intelligible and easily accessible information about your personal information and our use of it. We have prepared this privacy policy to do just that, but please contact us if you have any questions.

You have the right to access your personal data

You have the right to ask us to confirm whether or not we hold any of your personal information. If we do, you have the right to have a copy of your information and to be informed of the following:

  • Why we have been using your information.
  • What categories of information we were using
  • Who we have shared the information with.
  • How long we envisage holding your information.

In order to maintain the security of your information, we will have to verify your identity before we provide you with a copy of the information we hold. The first copy of your information that you request from us will be provided free of charge, if you require further copies, we may charge an administrative fee to cover our costs. Please contact us to request access to your data.

You have the right to correct any inaccurate or incomplete personal data

If you believe that any of the information that we hold about you is inaccurate, incomplete, or out of date, you have the right to require us to rectify that information. You can update or change your personal information in the patient area on the Site. Alternatively, please contact us so that we can correct our records.

You have the right to be forgotten

There may be times where it is no longer necessary for us to hold personal information about you. This could be if:

  • The information is no longer needed for the original purpose for which we collected it
  • You withdraw your consent for us to use the information (and we have no other legal reason to keep using it)
  • You object to us using your information and we have no overriding reason to keep using it
  • We have used your information unlawfully
  • We are subject to a legal requirement to delete your information
  • In these situations, you have the right to require us to delete your personal data (although please be aware that we may be required to retain certain information in order to comply with our legal obligations). If you believe one of these situations applies to you, please contact us.

You have the right to have your data transferred to you or a third party in a common format

Also known as data portability, you have the right to require us to transfer your personal information in a structured, commonly used and machine-readable format, either to you or to another service provider.

If you would like us to do this, please contact us. There is no charge for you exercising this right.

You have the right to object to direct marketing

You can tell us at any time that you prefer that we do not use your information for direct marketing purposes. If you would like not to receive any direct marketing from us, please contact us or use the links provided in any of our marketing communications.

You have the right to object to us using your information for our own legitimate interests

Sometimes, we use your personal information to achieve goals that will help us as well as you. This includes when we tell you about medicines, products or services that are similar to ones you have already bought via the Site; when we use your information to help us make our business better; and when we contact you to interact, communicate or to let you know about changes we are making.

We aim to always ensure that your rights and information are properly protected. If you believe that the way in which we are using your data is not justified due to its impact on you or your rights, you have the right to object. Unless we have a compelling reason to continue, we must stop using your personal data for these purposes. If you have any objections to our using your personal data for our legitimate interests, please contact us.

You have the right to withdraw your consent

In most cases, we do not require your consent to use your personal information in the ways set out in this privacy policy. However, where we do rely on your consent, you have the right to withdraw that consent at any time. You can use the “unsubscribe” links in any of the communications that we send to you, or contact us to withdraw your consent.

You have the right to restrict how we use your personal data if:

  • You have informed us that the information we hold about you is inaccurate, and we have not yet been able to verify this
  • You have objected to us using your information for our own legitimate interests and we are in the process of considering your objection
  • We have used your information in an unlawful way, but you do not want us to delete your data
  • We no longer need to use the information, but you need it for a legal claim

For example, you may wish for us to retain your contact details on our “do not contact” list to ensure that we do not send marketing emails to you in the future. If you wish to exercise this right, please contact us.

You have rights related to automated-decision making and profiling

Any automated decision-making or profiling we undertake is solely for the purpose of tailoring the information which we provide to you. We will not use automated decision-making or profiling to make any decisions which will have a legal effect upon you or otherwise significantly affect you, and you have the right not to be subject to such decisions. If you have any concerns or questions about this right, please contact us.

Changes to our Privacy Policy

Any changes which we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy.

Complaints

If you wish to make a complaint about our collection or use of your personal data, please contact us in the first instance so that we may seek to resolve your complaint.

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the statutory body which oversees data protection law in the UK. Please visit the ICO website if you wish to lodge a complaint with the ICO.

Contact Us

If you have any questions about your privacy or our use of your personal data, please get in touch using the details below:

Post: 30s1a-D Alderley Park, Alderley Edge, East Cheshire SK10 4TG

Email: [email protected]