1. Overview
AllCareMedicines ("we," "us," or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.allcaremedicines.com and make purchases from our online pharmacy.
By using our website, you agree to the collection and use of information in accordance with this policy. If you disagree with any terms of this Privacy Policy, please do not access the site.
2. Information We Collect
2.1 Information You Provide to Us
We collect information that you voluntarily provide when you:
- Create an account or register on our website
- Place an order or complete a purchase
- Subscribe to our newsletter or marketing communications
- Contact our customer support team
- Submit a review or complete a survey
- Participate in any promotions or competitions we offer
This information may include: full name, email address, phone number, billing and shipping addresses, date of birth (for age verification), payment information (processed and encrypted by our payment processor — we never store full card numbers), and any health-related information you voluntarily disclose to our pharmacists.
2.2 Automatically Collected Information
When you visit our website, we automatically collect certain technical information including:
- IP address and approximate geographic location
- Browser type, version, and operating system
- Referring URLs and pages visited
- Time spent on pages and click behavior
- Device identifiers and screen resolution
- Error logs and performance data
2.3 Information from Third Parties
We may receive information about you from third parties such as payment processors, fraud prevention services, and analytics providers, which we combine with information we already hold about you.
| Data Type | Purpose | Retention Period |
|---|---|---|
| Order & billing data | Order fulfillment, tax records | 7 years |
| Account credentials | Authentication | Duration of account |
| Communication history | Customer support | 3 years |
| Browsing & analytics | Site improvement | 24 months |
| Marketing preferences | Personalisation | Until unsubscribed |
3. How We Use Your Information
We use the information we collect to:
- Process and fulfill orders — including contacting you about order status, shipping, and delivery.
- Manage your account — enable login, save preferences, and provide order history.
- Customer support — respond to inquiries, resolve disputes, and troubleshoot issues.
- Fraud prevention — detect, investigate, and prevent fraudulent transactions and abuse.
- Legal compliance — comply with pharmaceutical regulations, tax obligations, and law enforcement requests.
- Marketing — send promotional emails and offers (only with your consent; you may opt out at any time).
- Analytics and improvement — understand how visitors use our site and improve our products and services.
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose.
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information with:
- Payment processors (Stripe, PayPal) — to process transactions securely. These processors have their own privacy policies.
- Shipping partners (UPS, FedEx, DHL, Royal Mail) — to deliver your orders. Only name and address are shared.
- Analytics providers (Google Analytics) — to analyze website usage. Data is anonymised where possible.
- Email service providers — to send transactional and marketing emails on our behalf.
- Legal authorities — when required by law, court order, or regulatory authority.
- Business successors — in the event of a merger, acquisition, or sale of all or part of our assets.
All third-party service providers are contractually bound to protect your data and may not use it for any other purpose.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your browsing experience. The types of cookies we use are:
- Essential cookies — necessary for the website to function. Cannot be disabled.
- Performance cookies — collect anonymous information about how visitors use our website.
- Functional cookies — remember your preferences (language, cart contents, etc.).
- Marketing cookies — used to deliver relevant advertisements. Require your consent.
You can control and manage cookies through your browser settings. Please note that removing or blocking certain cookies may affect your experience on our website. To manage your cookie preferences, click "Decline" in our cookie consent banner.
6. Data Security
We implement industry-standard security measures to protect your personal information:
- All data transmitted via our website uses 256-bit SSL/TLS encryption.
- Payment card information is tokenised and never stored on our servers — processed exclusively by PCI DSS-compliant processors.
- Our databases are protected by firewalls, access controls, and regular security audits.
- Employee access to personal data is strictly limited on a need-to-know basis.
- We conduct regular penetration testing and vulnerability assessments.
While we take every reasonable precaution, no method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting requirements. When determining retention periods, we consider:
- The amount, nature, and sensitivity of the personal data
- The potential risk of harm from unauthorised use or disclosure
- The purposes for which we process the data
- Applicable legal, regulatory, or contractual requirements
Order records are retained for seven (7) years in compliance with tax and pharmaceutical regulatory requirements. Account data is deleted within 30 days of account closure, except where retention is required by law.
8. Your Privacy Rights
Depending on your location, you may have the following rights under applicable privacy law (GDPR, CCPA, PIPEDA, etc.):
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten") — request deletion of your personal data where there is no lawful basis to continue processing it.
- Right to restrict processing — request that we limit how we use your data.
- Right to data portability — receive your data in a structured, commonly used format.
- Right to object — object to processing based on our legitimate interests or for direct marketing.
- Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
- Right to opt out of sale (California residents) — we do not sell personal information. This right is already honored.
To exercise any of these rights, contact us at privacy@allcaremedicines.com. We will respond within 30 days. We may need to verify your identity before processing your request.
9. Children's Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@allcaremedicines.com and we will delete such information promptly.
10. International Data Transfers
AllCareMedicines operates globally. Your personal data may be transferred to and processed in countries other than your country of residence, including the United States, United Kingdom, and European Union member states. These countries may have data protection laws that differ from those in your country.
Where we transfer data outside the European Economic Area (EEA), we ensure adequate protection through Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by:
- Posting the updated policy on this page with a revised effective date
- Sending an email notification to registered account holders
- Displaying a prominent notice on our website for 30 days after the update
Your continued use of our website after any changes constitutes your acceptance of the new Privacy Policy. If you do not agree to the changes, please discontinue use of the site and close your account.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:
- Email: privacy@allcaremedicines.com
- Phone: +1 (800) 555-0199 (Mon–Fri, 9 AM–6 PM EST)
- Mail: AllCareMedicines Ltd, Data Protection Office, 1234 Health Street, Suite 500, New York, NY 10001, USA
If you are located in the European Union and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.