Privacy policy
Who processes the data
The data controller is [TO FILL IN: legal name of the seller], [TO FILL IN: tax number], [TO FILL IN: registration number], address: [TO FILL IN: registered address]. Questions about data processing: [TO FILL IN: contact email]. This policy describes what the shop collects about a visitor, why, and what the visitor can do about it.
What we collect
At registration: first name, last name, email address and a password. The password is stored as an irreversible hash, never in plain text, and cannot be recovered — only replaced. When a request is placed: first and last name, phone number, preferred contact channel (Telegram, phone or WhatsApp), a Telegram handle if that channel is chosen, a comment, and the contents and total of the request itself. In the partner programme: the participant referral code, who invited whom, and the bonus ledger. We do not collect health data, do not ask for it, and do not link purchases to diagnoses. Nothing is paid on the site, so card and account details are neither collected nor stored.
Why
To accept and confirm a request, to reach the customer through the chosen channel, and to agree the contents, price and delivery. To keep the account and show the history of requests. To award and account for bonuses in the partner programme. To meet legal obligations — for example, keeping records of settlements for the required period.
On what grounds
The consent given at registration and when a request is submitted, and the performance of the contract concluded through that request. Consent may be withdrawn at any time by writing to the contact address. Withdrawal stops the processing, except for records the law requires to be kept.
Who else sees it
We do not sell personal data and do not pass it to third parties for their own purposes. Data may be passed to a delivery service, limited to what is needed to hand over the parcel ([TO FILL IN: list the delivery services, if any are used]), and to state authorities where the law requires it. The site carries no third-party analytics or advertising trackers.
Where and how long
Data is stored on servers located in [TO FILL IN: country where the servers are hosted]. Account data is kept while the account exists. Requests and settlement records are kept for the period the law requires. After that they are deleted or anonymised.
Cookies
The site uses two cookies, both required to work rather than to watch. "pharma_session" holds the session: without it the cart and sign-in do not work. "pharma_ref" appears only when a visitor arrives through a partner link and holds the referral code so the invitation can be credited. No advertising or analytics cookies are set.
Your rights
You may ask what data we hold about you, require it to be corrected, blocked or deleted, and withdraw your consent. First name, last name and email can be changed in the account yourself. For anything else, write to the contact address; we answer within the period the law sets.
Changes to this policy
This version is dated [TO FILL IN: version date]. A new version is published on this page and takes effect when published. Material changes are marked by the version date.