Privacy Policy

1. Introduction

Ozempo Limited ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are registered as a data controller with the Information Commissioner's Office (ICO) under registration number [Registration Number]. Our registered office is at [Address].

2. Information We Collect

Personal Information

We may collect the following personal information:

• Name, email address, phone number, and postal address
• Date of birth and gender
• Medical information and health records
• Payment and billing information
• Communication preferences

Technical Information

• IP address and browser type
• Device information and operating system
• Website usage data and cookies
• Location data (if permitted)

3. How We Use Your Information

We use your information for the following purposes:

• To provide medical consultations and healthcare services
• To process prescriptions and deliver medications
• To communicate with you about your treatment
• To process payments and manage your account
• To improve our services and website functionality
• To comply with legal and regulatory requirements
• To send you marketing communications (with your consent)

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: For marketing communications and non-essential cookies
• Contract: To provide our healthcare services and fulfill our obligations
• Legal Obligation: To comply with healthcare regulations and legal requirements
• Vital Interests: To protect your health and safety
• Legitimate Interests: To improve our services and prevent fraud

5. Sharing Your Information

We may share your information with:

• Healthcare Professionals: Licensed doctors and pharmacists providing your care
• Pharmacy Partners: To fulfill prescription orders
• Payment Processors: To process transactions securely
• Delivery Services: To deliver medications to you
• Regulatory Bodies: When required by law (e.g., MHRA, GMC)
• Service Providers: Third parties who help us operate our business

We never sell your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• End-to-end encryption for sensitive data
• Secure servers and firewalls
• Regular security audits and updates
• Staff training on data protection
• Access controls and authentication measures

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Medical Records: 8 years after your last consultation (or longer if required by law)
• Account Information: Until you request deletion or close your account
• Marketing Data: Until you withdraw consent
• Financial Records: 6 years for tax and accounting purposes

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal requirements)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing or cookies

To exercise these rights, contact us at privacy@ozempo.com or use our online form.

9. Cookies and Tracking

We use cookies and similar technologies to improve your experience on our website. For detailed information about our use of cookies, please see our Cookie Policy.

10. International Transfers

Your personal data is primarily processed within the UK. If we need to transfer data outside the UK, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses.

11. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children under 18 without parental consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: