Privacy Policy

Key Points

Introduction

We are committed to protecting and preserving the privacy of our visitors at Deejay Chemists. These ‘key points’ summarise some of our privacy policy’s most essential aspects. We also suggest that you read the entire privacy statement.

Information we collect

We automatically gather and retain your IP address when you visit our website.
We will store your name, delivery address, email address, date of birth, telephone number, Doctor address, patient notes, consultation notes, payment records, and details of the medicines you have ordered if you give this information (i.e. by filling out an online form to use our services).

Use of your information

We make the following use of your information:
  • To offer you with our services (medical consultations for prescription drugs) and to meet regulatory requirements.
  • To send you information about our products and services, as well as those of other companies in our group, but only if you give us your consent.
We share your information in the following ways:
  • Where it is necessary to deliver the services, with other third parties.
  • With the Deejay Chemist’s other corporate organisations.
  • We may share your information with other third parties in order to send you information about their products and services, but only if you give us permission.

Patient confidentiality

Some of the data we collect is medical information. This information is kept private at all times. We will never release medical information unless it is required or permitted by law. Unless you give us your express permission, we will not use it for marketing reasons.

Privacy Policy - The Details

Introduction

DAVSTEL LIMITED (registered number 12960259), whose registered office is at Flat 7 Dekker House, Elmington Estate, London, England, SE5 7QR (“Deejay Chemist”, we” “us” or “our”) knows that you care how information about you (“Your Data”) is used and shared and we appreciate your trust in us to do that carefully and sensibly. We respect your privacy and are committed to protecting Your Data.

We are committed to protecting and preserving the privacy of our customers and website visitors at Deejay Chemist.

This Privacy Policy (“Policy”) is incorporated into our website terms and conditions (“Website Terms”), which are available here. This Policy describes what happens to any personal information you provide us or that we collect while you’re on our website.

This Policy is updated on a regular basis, so please review it frequently.

Important information about who we are

Deejay Chemist is the controller of all personal data it receives and maintains. We have selected a data protection leader (“DPL”) who is in charge of overseeing any questions about this Policy. Please contact the DPL using the information below if you have any queries regarding this Policy, including any requests to exercise your legal rights.

Full name of legal entity:

DAVSTEL LIMITED

Name or title of DPL:

Stella Frederick-Ogwuazor

Email address:

customer@deejaychemist.com

Postal address:

154 Norwood Rd, Norwood, London SE27 9AZ

Telephone number:

020 8674 2455

Please contact the DPL if you have any questions, concerns, or complaints concerning our use of Your Data. If this does not fix the matter to your satisfaction, or if you prefer to speak with someone else about it, please contact Stella Frederick-Ogwuazor, who will handle your complaint.

You have the right to file a complaint with the Information Commissioner’s Office (“ICO“), the UK’s data protection supervisory authority, at any time. We would, however, like the opportunity to address your issues before approaching the ICO, so please contact us first.

Changes to the Policy and your duty to inform us of the changes

The last time this version was updated was in April 2022.

It’s critical that the personal information we have on you is correct and up to date. If Your Data changes throughout your partnership with us, please let us know.

Information We Collect

We will collect personal data or information from you if you register with us. Personal data or personal information refers to any information about a person that can be used to identify that person. It excludes information from which a person’s identify has been deleted (anonymous data).

We may collect, use, store, and transfer many types of data about you, which we have divided into the following categories:

  • Identity Data includes first name, last name, date of birth and gender.
  • Contact Data includes delivery address email address and telephone numbers.
  • Financial Data includes bank account, payment records and payment card details.
  • Medical Data includes your patient medical records, Doctor details, patient notes, consultation notes and details of medicines you have ordered and order history. This category of data constitutes sensitive personal data for the purposes of data protection legislation. This will only be collected where you have expressly provided your consent to provide us with this data through any online forms and medical questionnaires you complete and send to us, telephone conversations and secure messaging with us, as well as through photo assessments.
  • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

We also collect and use Aggregated Statistics for internal purposes, such as statistical or demographic data. Aggregated Data may be derived from Your Data, but it is not personal information because it does not identify your identity directly or indirectly. We may, for example, aggregate information about how you use our website and services to determine the percentage of users that utilise a certain website feature, but this information is anonymized. However, if we combine or connect Aggregated Data with Your Data in such a way that the combined data can be used to directly or indirectly identify you, we recognise the combined data as personal data and use it in line with this Policy.

How is Your Data collected?

Automated technologies or interactions We may automatically gather data about your equipment, browsing actions, and trends if you interact with our website. When you visit our website, we automatically collect information about your visit, such as the pages you view and the resources you access. Aggregated Data, traffic data, location data, and other communication data are examples of this type of data. Please visit our Cookie Policy for more information on the cookies we use.

Direct interactions You may give us your Identity, Contact, Medical and Financial Data by filling in forms, or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

  • make an online enquiry;
  • completing forms and medical questionnaires on our website. This includes information provided at the time of registering to use our site, subscribing to our service, consultations for treatments, posting material or requesting further services;
  • make an online payment;
  • subscribe to our services or publications;
  • request marketing material to be sent to you;
  • provide us with feedback.

Confidentiality

Your medical data is kept private, which means that unless you are a healthcare professional, none of our employees have access to it (or owe a similar duty of confidentiality). Unless we are legally obligated or permitted to do so, we will never release Medical Data without your consent.

We will not use your Medical Data to send you information about our products and services (i.e. for marketing reasons) unless you give us your express permission to do so.

Use of Cookies

You can configure your browser to refuse all or some browser cookies, as well as to receive notifications when websites set or access cookies. Please be aware that if you disable or refuse cookies, certain elements of our website may become inaccessible or stop working properly. Please visit our Cookie Policy for more information on the cookies we use.

Use of Your Information

We will only use the information that we collect from you as follows:

  • To enable us to provide our health services to you
  • To enable us to comply with regulatory requirements
  • To communicate with you in the event that there is a query or problem with your order
  • To inform you of any changes to our website, services or goods and products
  • For record keeping purposes
  • To track and analyse activity on our website

Marketing purposes

We will only contact you for marketing purposes if you have given us your express permission. We may use Your Data for one or more of the following purposes once you have granted us permission to contact you for marketing purposes:

  • To provide information to you that you request from us relating to our products or services.
  • To provide information to you relating to other products that may be of interest to you.
  • To allow selected third parties to use Your Data to enable them to provide you with information regarding unrelated goods and services, which we believe may interest you.

By emailing customer@deejaychemist.com you can change your mind and withdraw your permission for us to contact you for marketing purposes at any time. This will have no impact on your ability to use our services.

Use of your Medical Data for marketing purposes

We may use your Medical Data to offer you specialist information about our products and services if you have given us your express consent in advance (in addition to allowing us to send you more general marketing material). For example, if a customer informs us that they have asthma and requests that we send them marketing materials regarding asthma-related products and services, we may comply. This information would never be given to a third party so that they might send you information about their products and services.

By emailing customer@deejaychemist.com, you can change your mind and withdraw your permission for us to contact you for marketing purposes at any time. This will have no impact on your ability to use our services.

Change of purpose

Unless we reasonably believe that we need to use it for another reason that is compatible with the original purpose, we will only use Your Data for the purposes for which it was obtained. Please email customer@deejaychemist.com for an explanation of how the processing for the new purpose is compatible with the original purpose. We will tell you if we need to use Your Data for a non-related purpose and explain the legal basis that permits us to do so.

Please be aware that, when required or permitted by law, we may treat Your Data without your knowledge or consent, in accordance with the aforementioned principles.

Storing Your Personal Data

We have implemented sufficient security measures to protect Your Data from being lost, misused, accessed in an unauthorised manner, altered, or exposed by accident. Furthermore, we restrict access to Your Data to employees, agents, contractors, and other third parties that require it for business purposes. They will only process Your Data in accordance with our instructions and are bound by strict confidentiality obligations.

We have protocols in place to deal with any suspected personal data breach, and if we are legally required to do so, we will notify you and any applicable authority.

Please keep in mind that sending information over the internet is not completely safe, and information can be intercepted at any time. We cannot guarantee the security of any personal information that you choose to transmit us electronically, and you do so at your own risk.

Data retention

We will only keep Your Data for as long as it is required to fulfil the reasons for which it was acquired, including to comply with any legal, accounting, or reporting obligations.

We consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of Your Data, the purposes for which we process Your Data and whether we can achieve those purposes through other means, and the applicable legal requirements when determining the appropriate retention period for Your Data.

During the course of providing our services to you, we shall keep your data in order to supply you with our goods or services.

We are required by law to keep some categories of Your Data after we stop supplying you with goods or services for a set length of time. To comply with our legal duties, we must store any Medical Data, Identity Data, and Contact Data submitted to us.

Please note that if it is required, we may keep Your Data for longer than the above-mentioned periods. This, however, will be determined on a case-by-case basis. If we think that keeping Your Data for longer than the periods indicated above is required, we will notify you in writing after we have completed providing our goods and services to you and explain why.

Disclosing Your Data

As stated above, in compliance with this Policy, we may disclose Your Data to third parties in the following circumstances:

To enable us to perform our services, we may share your Identity, Contact, and Financial Data with our External Third Parties (as described below) (for example, we may provide your postal address to a courier or we may share your name, address and age with a third-party service provider in order to verify your age and identity). External Third Parties with whom we collaborate include:

NamePurpose
Stripe Inc.To process your online payment.
Feefo and TrustpilotTo assist with our review link and to send you messages, such as bills and payment alerts via email.
HotjarTo monitor and identify usability website issues.
Livechat and Facebook MessengerTo enable you to contact and be contacted by our support service via third-party live chat systems right from our website's pages. This data has been anonymized so that you cannot be identified.
Survey MonkeyFor clinical governance, we use SurveyMonkey to distribute anonymous surveys about your medical treatment. This type of service allows you to connect directly with third-party online survey platforms from our website's pages.
Email serversIf you have agreed to receive marketing material, we will send you marketing emails. Our email servers are used to transmit emails. Your order history is used to personalise your emails.
MailchimpYour email address will be added to our marketing contact list through Mailchimp if you join our mailing list or subscribe to our newsletter.
voiptech.solutionsWe keep a one-month recording of phone calls for monitoring and training purposes. This is utilised by both the patient and Deejay Chemist in the event of a disagreement, as well as to manage and regulate our employees' performance.

We may share your Identity, Contact, Financial and Medical Data with your Doctor or any other third party, where you have provided your express consent for us to share Your Data with them. Please note that we will never share your Medical Data without your express consent.

We may share Marketing and Communications Data where you have provided your express consent for us to share such with third parties for marketing purposes.

We may also share Your Data:

  • In the event of a joint venture, collaboration, financing, sale, merger or reorganisation of the company. If a change happens to our business, then the new owners may use Your Data in the same way as set out in this Policy.
  • To further fraud protection and reduce the risk of fraud (for example, to comply with anti-money laundering regulations).

International transfers

In addition to the disclosures outlined above under “Disclosing Your Data,” some of our third parties are located outside of the European Union, and their processing of Your Data will result in data being transferred outside of the European Union. Whenever we send Your Data outside of the European Union, we ensure that it receives a similar level of protection by implementing at least one of the following safeguards:

  • We will only transfer Your Data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
  • Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
  • Where we use providers based in the US, we may transfer data to them if they are part of the EU-US Privacy Shield Framework which requires them to provide similar protection to personal data shared between the Europe and the US.

Please email customer@deejaychemist.com if you want further information on the specific mechanism used by us when transferring Your Data outside the European Union.

Third Party Links

On this website, we occasionally contain links to third-party websites, plug-ins, and programmes. Third parties may collect or share data about you if you click on those links or enable those connections. These third-party websites are not under our control, and we are not responsible for their privacy statements and/or policies. We advise you to read the privacy policies of any website you visit after leaving ours.

Your legal rights

In certain circumstances, you have the following rights under data protection laws in relation to Your Data. You have the right to:

Make a request for access to your data (also known as a “data subject access request”). This allows you to obtain a copy of the Your Data we hold about you and verify that we are handling it lawfully.

Request that we correct the personal information we have on you. This allows you to change any missing or erroneous information we have about you, albeit we may need to verify the veracity of the new information you submit.

Request that your data be erased. This allows you to request that we delete or remove Your Data if there is no compelling reason for us to keep it. You also have the right to request that we delete or destroy Your Data if you have successfully exercised your right to object to processing (see below), if we have processed Your Data in an unauthorised manner, or if we are forced to erase Your Data by local law. Please keep in mind that we may not always be able to comply with your request for erasure due to specific legal reasons that will be communicated to you at the time of your request, if relevant.

Object to the processing of Your Data if we are relying on a legitimate interest (or a third party’s) and there is something about your circumstances that makes you want to object to processing on this ground because you believe it violates your basic rights and freedoms. You also have the right to object if Your Data is being processed for direct marketing purposes. We may be able to show that we have compelling legal grounds to process Your Data that outweigh your rights and freedoms in specific circumstances.

Request restriction of processing of Your Data . This enables you to ask us to suspend the processing of Your Data in the following scenarios:

  • if you want us to establish the data’s accuracy;
  • where our use of Your Data is unlawful, but you do not want us to erase it;
  • where you need us to hold Your Data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
  • you have objected to our use of Your Data, but we need to verify whether we have overriding legitimate and/or legal grounds to use it.

Request that Your Data be transferred to you or a third party. We shall deliver Your Data in a structured, commonly used, machine-readable manner to you or a third party you specify. This privilege only applies to automated information that you gave us permission to use or if we utilised the information to fulfil a contract with you.

Where we rely on consent to process Your Data, you can withdraw your consent at any time. However, the lawfulness of any processing carried out before you withdraw your consent will not be affected. We may not be able to offer you with some products or services if you withdraw your consent. If this is the case, we will notify you when you withdraw your consent. Please note that in some cases, we may not be able to comply with this request because we are required by law to maintain Your Data.

If you wish to exercise any of the rights set out above, please email customer@deejaychemist.com or telephone 020 8674 2455 and ask to speak to the DPL.

Data subject access request

You will not be charged a price to view Your Information (or to exercise any of the other rights set out above). If your request is manifestly baseless, recurrent, or exorbitant, we may charge a fair fee. In certain cases, we may also refuse to comply with your request.

What we may need from you

We may need to ask you for additional information to verify your identity and establish your right to view Your Data (or to exercise any of your other rights). This is a security step to ensure that personal information is not shared with anybody who does not have permission to receive it. We may also call you to obtain further information about your request in order to expedite our answer.

Time limit to respond

Within one month, we aim to respond to all legitimate requests. If your request is exceptionally difficult or you have made many requests, it may take us longer than a month to respond. We will alert you and keep you updated in this case.

Contacting Us

Please contact us at customer@deejaychemist.com if you have any questions or concerns about this Policy.