Privacy Policy

Note for review: this policy must be checked against what the business actually does — retention period, analytics tools, and which delivery partners receive customer details.

1. What we collect

• Account details — your name, email address, phone number and password.
• Order details — delivery address, order contents, payment method, and order history.
• Membership details — your membership tier and the discount rate applied to your orders.
• Technical data — information your browser sends when you visit, such as pages viewed, used to keep the site working and secure.

2. How we use it

• To process, deliver and support your orders.
• To operate your account and apply your membership discount.
• To respond when you contact us.
• To meet our legal and accounting obligations, including keeping sales and stock records.
• To detect and prevent fraud and misuse of the site.

3. How your password is stored

Passwords are never stored in readable form. They are hashed with bcrypt on our server, and the hash is never sent back to your browser or exposed through our API. We cannot recover your password — only reset it.

4. Who we share it with

We do not sell your personal information. We share it only where necessary:

• Delivery partners — the name, address and phone number needed to deliver your order.
• Payment providers — where you pay by a method other than Cash on Delivery, to process that payment.
• Authorities — where we are required to by law.

5. Cookies

We use cookies and similar browser storage to keep you signed in and to remember your cart and language preference. You can clear or block these in your browser, though parts of the site will stop working if you do.

6. How long we keep it

We keep account and order records for as long as your account is active, and afterwards for as long as we are required to for tax and accounting purposes.

7. Your rights

You can ask us to show you the personal information we hold about you, correct anything inaccurate, or close your account. You can update most of your details yourself in your account. Requests that we cannot act on — for example where a record must be kept for tax purposes — will be explained to you.

8. Security

Access to customer data is restricted to staff accounts that need it, and the level of access depends on the staff member’s role. No system is perfectly secure, but we take reasonable steps to protect your information.

9. Children

This site is not intended for children, and we do not knowingly collect their personal information.

10. Changes

If we change this policy we will update the date at the top of this page.

11. Contact

For any privacy question, contact Genexis Healthcare Limited or through our contact page.