PRIVACY POLICY

1. Introduction
1.1 ZAFASH LIMITED (Trading as Zafash Pharmacy) is a company registered in England & Wales (Reg No 1383001, VAT No 237213190) since 1978. Our trading address and registered office is 233-235 Old Brompton Road, London SW5 0EA.
1.2 This is our privacy policy, the purpose of which is to explain how we process your “Personal Data” (i.e. data regarding any identified or identifiable living person). Processing of personal data encompasses: how we collect your data, how we use it, how we protect it, when we would disclose it and finally how you can access it and if needed rectify it.
1.3 If any individual would like get in touch with us regarding our policy please refer to the “contact us” section of our website.
1.4 Your data will not be altered from its original state.

2 Details of the Personal Data we collect
2.1 Upon registration with our website and/or placing an order, certain data is collected and stored. This can include your name, address and other contact details, username and password. We do not hold any credit card detail . All payments are processed securely through our approved payment provider(PayPal) website. Additional information may be stored if you provide it or contact us.
2.2 We may use Google analytics or an equivalent method of data analysis to help understand / interpret data patterns.
2.3 The following information may be recorded/stored when you use our website: internet protocol (IP) address, Uniform Resource Locators (URL), login details (username / password), computer/connection information, shopping history, cookie number, items / services you have viewed or searched for and your contact phone number if you have called us.
2.4 We use session cookies which are small amount of data stored on your hard drive when you have used our website. This allows us to individualise your experience when you return to the website subsequently and their use is essential for the normal running of our site. The cookies allow the site to recognise you on your return and store items in your shopping basket. You may choose to change your cookie settings through your browser settings but if you disable cookies we may not be able to provide you the normal service.
2.5 We may need to get information about you from external credit reference agencies/bureau’s.

3 General Data Protection Regulation (GDPR) compliance – Personal data use
3.1 Your personal data is required to process an order
3.2 Your IP address may be used for profiling purposes
3.3 Your data can be used to help individualise your experience on our website including offering you certain promotions or goods / services, communicate with you, help streamline subsequent orders and display specific content e.g. favourites Your data can be used to improve our website and services and to help prevent fraud, abuse of the site and enable external agencies to perform technical, logistical or other functions we or they may require.
3.4 If required to do so by a competent authority, we will access, copy, preserve or delete any personal data we hold by applicable law, statutes, regulations, standards or codes of conduct to protect our rights or those of their partners / customers.

4 Data protection
4.1 We will hold your data securely and take all reasonable steps to prevent its loss, misuse, unauthorised access or disclosure, alteration or destruction.
4.2 All payments are processed through a secure online gateway and transferred data is always encrypted. No third party can have access to your data during transit.

5 GDPR compliance – Data sharing
5.1 Currently you are able to leave us a review through our website but in the future we may utilise an independent review collection service called Trustpilot. Any data transferred will be related to review collection only. No personal data is ever transferred.
5.2 For deliveries to you, your name and address and possibly your phone number and email address will be passed onto Royal Mail. This applies for deliveries within the UK and internationally.
5.3 Payments are accepted from customers of our website via PayPal. This is an independent company who are committed to keeping your data secure. They will collect relevant data from you during the payment process. To be sure you understand what is collected and how the data is used please visit their website and refer to their privacy policy.

6 Your rights and how to alter your data
6.1 Please use the contact details on our website to get in touch with us if you have any concerns or questions regarding your data.
6.2 There are certain aspects of your data that you can alter by logging into your account. For the data that cannot be altered, you can contact us as mentioned above.