UK GDPR Compliance
MedChem Pharmacy is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how your personal data is handled and the rights you hold under this law.
Scope and Applicability
Although MedChem Pharmacy is an informational blog with no user registration or database storage of personal information, we may collect limited personal data through automated means such as web analytics, server logs, and cookies. This data is processed in accordance with the UK GDPR, which applies to all individuals in the UK regardless of where the data controller is located.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
- Right of access – You may request confirmation of whether we process your personal data and receive a copy of that data.
- Right to rectification – You may request correction of any inaccurate or incomplete personal data.
- Right to erasure – You may request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restrict processing – You may request that we limit how we use your data under certain conditions.
- Right to data portability – You may request your data in a structured, commonly used, and machine-readable format.
- Right to object – You may object to processing based on legitimate interests, including profiling and direct marketing.
- Right to withdraw consent – Where processing is based on consent, you may withdraw it at any time.
How We Comply
As an informational website, we do not store personal data in databases or collect it through forms. We use only essential, non-intrusive cookies for analytics and site functionality. All data collected is anonymized where possible and retained only for as long as necessary. We do not sell or share personal data with third parties for commercial purposes.
Data We Process
Any personal data we process is limited to:
- IP addresses (anonymized via IP masking)
- Browser type and device information
- Pages visited and session duration (via anonymized analytics)
- Cookie identifiers (for functional purposes only)
This data is not linked to any identifiable individual and cannot be used to track you across websites.
Legal Basis for Processing
Our processing of personal data is based on legitimate interest under Article 6(1)(f) UK GDPR, specifically to ensure website functionality, improve user experience, and maintain security. We conduct regular balancing tests to ensure our interests do not override your rights and freedoms.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us via email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., IP address or date of visit if known). We will respond without undue delay.
Response Timeframes
We are required to respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of the delay and reasons.
No Discrimination Policy
We will not deny you access to our services, charge you fees, or provide a different level of service because you have exercised your rights under UK GDPR.
Updates and Changes
We may update this compliance page periodically to reflect changes in law or our practices. The most recent version will always be posted here with an updated effective date.
Contact Information
If you have questions about this compliance page or wish to exercise your rights, please contact our data protection point of contact:
Ethan Ashborne
359 Main Road, Huapai, Auckland 0810, New Zealand
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: ico.org.uk.
