Privacy policy

Introduction

Last updated: September 30, 2026

This is the Privacy Policy for Inish Pharmacy and applies to our website www.inishpharmacy.com.

At Inish Pharmacy we want to provide the best possible experience while using our website and at the same time respect your privacy and the information you share with us. The purpose of this Privacy Policy is to give you information and understanding of the information we collect, how we use that information and your rights in this regard.

In addition to this Privacy Policy, you may also be interested in reading our website Terms & Conditions.

You must be over 18 to register for an account with Inish Pharmacy, place orders with Inish Pharmacy or subscribe to our email newsletters. Inish Pharmacy do not collect information on persons under the age of 18.

1. Types of information collected

Personal Data

According to Article 4, paragraph 1 of the General Data Protection Regulation (GDPR), personal data is all information relating to an identified or identifiable natural person.

Examples are name or address, phone number, mobile number, bank details or insurance number.

A subgroup of personal data are the special categories of personal data under Article 9 of the GDPR. This includes data related to health, sex life and sexual orientation. Health-related data that can be obtained from an online pharmacy such as Inish Pharmacy also fall under the special category of personal data. This includes purchase history of non-prescription medicines.

Non-Personal Data

Non-Personal Data is information that cannot be used to identify or contact you. This is statistical and analytical data about our users' browsing actions and patterns.

2. Why we may collect the information

Why we collect Personal Data

• To provide you with goods and services you have ordered. This will involve sharing your personal data with our logistics and shipping partners.
• To contact you regarding your order
• To respond to communications
• To create and manage your customer account and Rewards Club loyalty membership, including when you check out using a Shop account
• To offer competitions
• To inform you of promotions/events etc. This may involve marketing partner clients
• To assess the safe supply of medicine
• Health data is processed by Inish Pharmacy for the purposes of ensuring the safe supply of medication
• Health data, including purchase history of non-prescription medicines and information provided in pharmacist consultation forms, is never used for marketing purposes

How We Use Health Data

We process health data, including your purchase history of non-prescription medicines and information provided in pharmacist consultation forms, only for the purpose of ensuring the safe supply of medicines. We rely on Article 9(2)(h) of the GDPR as the lawful basis for this processing (see "Patient Consultation Forms" in Section 3).

We do not use health data, including your purchase history of medicines, for marketing purposes.

Why we collect Non-Personal Data

• Gain a better understanding of our website users' site usage so that we can use this information to improve the website and provide our users with an enhanced customer experience
• Estimate audience size and usage patterns
• Store user preferences so you can customise the site
• To track return visitors

3. How we collect the information

Personal Data

Register for our Site Functionality

When you register with our website, we create an account for you and record your details in our database. Any time you make an order, we record your billing and shipping address details in our database so that you can select them quickly the next time you create an order.

We collect the following:

• Email
• First Name/Last Name
• Address Details
• Phone number
• Password details. These are encrypted and not accessible by Inish Pharmacy
• Order History Details
• Product Wish list details

Checking Out with Shop

If you choose to check out using a Shop account (including Shop Pay), Shopify will share the details held in your Shop account with us so that we can complete your order. This may include your name, email address, phone number, and billing and shipping address.

When you check out this way, an Inish Pharmacy customer account will also be created for you automatically using these details, if you do not already have one. This account will include membership of the Inish Pharmacy Rewards Club, our loyalty programme, which is operated on our behalf by LoyaltyLion (see "Loyalty Programme" below), so that you can earn and redeem rewards points on your purchases.

In connection with your account and Rewards Club membership, we process:

• Email
• First Name/Last Name
• Address Details
• Phone number
• Order History Details
• Rewards points balance, and points earned and redeemed

We process this information to provide your account and loyalty benefits to you, as part of our contract with you. Being enrolled in the Rewards Club does not mean you have agreed to receive marketing communications. We may still send you service messages about your account and Rewards Club membership, such as account confirmations, changes to your points balance, and rewards you have earned or that are due to expire. These are not marketing communications and are sent as part of providing your account to you. You will only receive marketing emails or SMS messages where you have separately consented to them, and you can unsubscribe at any time.

If you do not want an Inish Pharmacy account or Rewards Club membership, you can ask us to close your account or remove your loyalty membership at any time by contacting customerservice@inishpharmacy.com. Your Shop account itself is managed by Shopify, and its use is governed by Shopify's own privacy policy.

Complete an Order

During the order process we collect the following information:

• Email
• First Name/Last Name
• Address Details
• Mobile Phone Number
• Order Details

Patient Consultation Forms

On specific product pages, for example on Viagra Connect, patient consultation questions are provided so that our pharmacists can make an assessment on the safe supply of medicine. We rely on Article 9(2)(h) of the GDPR, that "processing is necessary for the purposes of preventative or occupational medicine, or the provision of health or social care", as the lawful basis under which we gather health data. This data may include:

• Details of other medication being used
• Details of other health conditions or symptoms

Information provided in patient consultation forms is retained for a period of six months in instances when an order has been completed, or for 14 days when an order has not been completed.

Making a Payment

Shopify

We use Shopify Payments to process online transactions securely. When you make a purchase, Shopify Payments collects and stores information required to complete the payment, such as your credit or debit card details, billing address, and transaction data. Inish Pharmacy does not have access to your full payment card information. Shopify Payments processes your data in accordance with applicable data protection laws and its own privacy policy. You can learn more about how Shopify uses and protects your information by visiting Shopify's Privacy Policy.

PayPal

Our website accepts payment via PayPal. We never record your credit card details in our database but we do pass these details on to PayPal. More information can be found here: https://www.paypal.com/ie/webapps/mpp/ua/privacy-full

Contact Forms

Data supplied via contact forms are recorded in our database. We reply to all contacts made directly through email. Examples of forms included in our website include:

• Contact Us
• Ask Our Pharmacist
• Chiropody / Podiatry Appointment Form
• Physiotherapy Appointment Form
• Newsletter Signup Form

Data collected via these forms include:

• Name
• Email Address
• Message info
• Contact number

Email Marketing

We use Dotdigital to manage and send our marketing emails, newsletters and customer communications. When you subscribe or make a purchase, certain information, such as your name, email address, and interaction data (e.g., email opens or link clicks), may be processed by Dotdigital to help us deliver relevant and effective communications. Dotdigital processes this information in compliance with data protection laws and its own privacy policy. You can opt out of marketing communications at any time by using the unsubscribe link in our emails.

We collect email marketing data through:

• The checkout process
• Contact us forms
• Sign up to newsletter
• Create an account/register
• Pop-up box on site

The data collected includes:

• name
• email address
• order history
• wish lists
• abandoned baskets

We do not use your purchase history of medicines to target or personalise our marketing emails.

We put an UNSUBSCRIBE link at the bottom of ALL our marketing emails so that you can unsubscribe from our marketing emails at any time. Users can also unsubscribe at any time here.

Dotdigital hosts its platform on Microsoft Azure and Google Cloud, and stores our data in its EU/UK region. For Microsoft Azure, the primary data centre is in Amsterdam, the Netherlands, and the secondary data centre is in Ireland. Dotdigital may also use its group companies and approved sub-processors to provide its services, some of which may process data outside the European Economic Area. Where this happens, the transfer is protected by safeguards recognised under the GDPR, such as an adequacy decision by the European Commission or Standard Contractual Clauses. A list of Dotdigital's sub-processors is available at https://dotdigital.com/trust-center/.

SMS and WhatsApp Communications

From time to time, we may contact you by SMS (text message) or WhatsApp using the mobile number you have provided to us. We use these messages for the following purposes:

• To provide updates or information relating to your order or prescription;
• To confirm delivery or collection details; and
• Where you have given your consent for that channel, to send you marketing communications relating to our products, promotions or services.

We ask for your consent to marketing by SMS and by WhatsApp separately. You will only receive marketing messages on a channel you have actively opted into, and agreeing to one does not mean you have agreed to the other. You may withdraw your consent at any time by following the opt-out instructions included in each message or by contacting us using the details provided in this Privacy Policy.

Transactional or service-related messages, such as those relating to your order, prescription or delivery, may still be sent where necessary to perform our contract with you.

We send SMS and WhatsApp messages using Dotdigital (see "Email Marketing" above for how Dotdigital stores and protects your data). WhatsApp messages are also delivered through WhatsApp, which is provided in the EU by WhatsApp Ireland Limited, part of Meta. WhatsApp processes your phone number and message delivery information in accordance with its own terms and privacy policy.

We do not share your mobile number with any third parties for their own marketing purposes. All SMS and WhatsApp communications are sent in accordance with the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018.

Personalisation

We use Rebuy to provide personalised shopping experiences, such as product recommendations and customised content based on your browsing and purchase behaviour. To do this, Rebuy may process information including your device data, browsing activity and past order details. This helps us improve product discovery and enhance your experience on our website. These recommendations are shown only on our website and are not used to send you marketing messages. Rebuy processes this information in accordance with applicable data protection laws and its own privacy policy.

Loyalty Programme

LoyaltyLion

We use LoyaltyLion to run the Inish Pharmacy Rewards Club. When you join the Rewards Club, including automatically when you check out using a Shop account, certain information, such as your name, email address, order history and rewards activity (points earned, redeemed and your current balance), is processed by LoyaltyLion so that we can track your points and provide your rewards. LoyaltyLion processes this information in accordance with applicable data protection laws and its own privacy policy.

Review Platform

REVIEWS.io

We use REVIEWS.io to collect and display customer reviews and ratings for our products and services. When you make a purchase or submit a review, certain information, such as your name, email address, order details, and review content, may be processed by REVIEWS.io to verify your purchase and publish your feedback. REVIEWS.io processes this data in accordance with applicable data protection laws and its own privacy policy.

Non-Personal Data

Google Analytics

We record all activity on our website with Google Analytics. This helps us to analyse the performance of the website and is essential to understand our business.

Third Party Tracking Tools

• Facebook Pixel Code
• Google Tag
• Google Ad Services
• Doubleclick.net
• Adroll.com

4. Your Rights

Under the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to processing, including processing for direct marketing
• Right to withdraw your consent at any time, where we rely on your consent

To exercise any of these rights, please contact us at customerservice@inishpharmacy.com.

You also have the right to lodge a complaint with the Data Protection Commission, the supervisory authority in Ireland, at www.dataprotection.ie.

5. How Long We Keep Your Information

We keep your account and order details for as long as you hold an account with us, unless you ask us to delete them. You can ask us to delete your personal data at any time by contacting customerservice@inishpharmacy.com (see Section 4). We may need to keep some order information after such a request where the law requires it, for example for tax, accounting or pharmacy record-keeping purposes.

Information provided in patient consultation forms is kept for the periods set out under "Patient Consultation Forms" in Section 3.

6. Changes to Privacy Statement

Any changes to the Privacy Statement will be posted on this website www.inishpharmacy.com.

7. Contact Us

Inish Health (Muff) Limited, trading as Inish Pharmacy, is the data controller responsible for your personal data. Any questions, comments or queries regarding this Privacy Statement should be addressed to customerservice@inishpharmacy.com, or by post to:

Inish Pharmacy, Burnfoot Business Park, Burnfoot, Co. Donegal F93 W5TX

Messaging Terms & Conditions

Inish Pharmacy, Burnfoot Business Park, Burnfoot, Co. Donegal F93 W5TX

General

By opting into messages, you agree to receive recurring automated marketing and informational messages from Inish by SMS and/or WhatsApp, depending on the channels you have opted into. Automated messages may be sent using an automatic telephone dialing system to the mobile telephone number you provided when signing up or any other number that you designate.

Message frequency varies, and additional mobile messages may be sent periodically based on your interaction with Inish. Inish reserves the right to alter the frequency of messages sent at any time to increase or decrease the total number of sent messages. Inish also reserves the right to change the short code or phone number or alphanumeric sender where messages are sent.

Your usual message and data rates may apply. If you have any questions about your text plan or data plan, it is best to contact your mobile provider. Your mobile provider is not liable for delayed or undelivered messages.

Your consent to receive marketing messages is not a condition of purchase.

Carriers

Carriers are not liable for delayed or undelivered messages.

Cancellation

Messages will include instructions on how to unsubscribe. You can also stop WhatsApp messages by blocking our WhatsApp account. If you would like to receive messages from Inish again, just sign up as you did the first time and Inish will start sending messages to you again.

Info

For support regarding our services, email us at customerservice@inishpharmacy.com. If we include a link in messages we send you from Inish, you may also access instructions on how to unsubscribe and our company information by following that link.

Transfer of Number

You agree that before changing your mobile number or transferring your mobile number to another individual, you will either unsubscribe by following the instructions included in our messages, or notify us of your old number at customerservice@inishpharmacy.com. The duty to inform us based on the above events is a condition of using this service to receive messages.

Messaging Terms Changes

We reserve the right to change or terminate our messaging program at any time. We also reserve the right to update these Messaging Terms at any time. Such changes will be effective immediately upon posting. If you do not agree to a change to these Messaging Terms, you should cancel your enrollment with our messaging program. Your continued enrollment following such changes shall constitute your acceptance of such changes.