Privacy
Policy.

Who this notice covers

Healthlink Pharmacy is responsible for the personal data covered by this notice. For privacy questions or requests, email orders@healthlinkpharma.com.

This notice covers the public website and enquiries sent to the pharmacy. Account access, prescription uploads, payments and other patient-portal functions are handled separately. Read the privacy information presented in the portal before using those functions.

Information you provide

The contact form asks for your name, email address, subject and message. An order reference is optional. An email may also contain the information and attachments you choose to send. We need a contact address and enough information to respond; otherwise we may not be able to deal with your request.

Do not send prescriptions, full medical records, identity documents or payment details through the public form. Use the portal for detailed medical information. An enquiry about a side effect or complaint may itself include health information, even without an attachment.

Why information is used

General enquiry details are used to read and answer your message. The usual legal basis is our legitimate interest in responding to requests and administering the service. Where an enquiry is needed to arrange or perform a service you request, the relevant basis may instead be the agreement or steps requested before it.

Records needed for pharmacy duties, safety reporting or other legal requirements are handled on the applicable legal basis. Health information also requires a specific legal condition, such as healthcare provision under professional confidentiality or medicine-safety obligations under the relevant law. The checkbox below the form acknowledges this notice; it is not a request for marketing consent or blanket consent to medical-data processing.

Website and message handling

The form sends the message to the pharmacy’s email inbox. It does not create a patient account or save the message in a website database. Copies may remain in the mailbox, its backups and any necessary pharmacy or complaint records.

The website server receives technical information needed to serve the page, including a network address and request details. Hosting logs may contain these details. The form also uses temporary, keyed identifiers derived from network addresses to limit repeated submissions. Those counters contain submission times, not message text.

This public website does not set analytics or advertising cookies, use marketing pixels or load external fonts. It does not use browser storage for form drafts. The separate portal may use essential account and security technologies as described in its own notice.

Access and sharing

Messages are handled by staff who need them to answer the enquiry or carry out the related pharmacy task. Hosting, email and other service providers may process information as part of operating those systems.

Where necessary for the issue raised, relevant information may be shared with the prescriber, the service through which the order was placed, a delivery provider, the company responsible for a medicine or a competent authority. The information shared should be limited to what is needed for that task and supported by the applicable legal basis.

The public form does not itself send data to an advertising platform. Any provider processing or access outside the European Economic Area must have a lawful transfer arrangement. Contact the pharmacy for information about the providers and safeguards relevant to your enquiry.

How long records are kept

Enquiry records are retained while the issue is being handled and for a proportionate period needed for follow-up, complaint handling or the establishment or defence of a legal claim. A message that becomes part of a pharmacy, safety or other legally required record follows the retention rules for that record rather than the routine-enquiry period.

The form’s rate-limit history uses a one-hour look-back period. Expired counter files are periodically removed. Mailboxes, backups and hosting logs have separate retention arrangements; contact the pharmacy about the criteria applying to your information.

Your privacy rights

Depending on the circumstances, you can request access, correction, deletion, restriction or transfer of your personal data and object to processing based on legitimate interests. These rights have legal limits, including where records must be kept. Where consent is the legal basis, you may withdraw it for future processing.

Send requests to orders@healthlinkpharma.com. We may ask for proportionate information to verify your identity. A response is normally due within one month; if an extension is permitted and needed, we will explain it within that month.

You can complain to a data-protection authority, including the authority in the country where you live, work or believe an infringement occurred. This does not prevent you from contacting us first.

Changes and further information

The revision date appears at the top of this page. The notice should be read again when the website or the way you use the service changes.

For general information about data-protection rights, see the European Data Protection Board’s guidance.