Privacy Policy | PharmaDS

PharmaDS is operated by Pharmacie de Niederkorn (Kirt, Camille Marcel Jean). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile application for pharmacy services — including ordering products online, uploading prescriptions, and arranging home delivery of medications.

By registering for and using the App, you consent to the practices described in this policy.

1. Information We Collect

a. Registration & Account Information

When you register, we collect: Full name Email address Mobile phone number

b. Delivery Information

You may voluntarily add one or more delivery addresses, including: street address, city, postal code, country, and special delivery instructions.

You may voluntarily add one or more preferred delivery time frames.

c. Prescription & Health Information

To fulfill medication orders, we may collect:

Images or scans of your prescriptions (uploaded by you)
Medication names, dosages, and instructions visible on prescriptions
Additional health information you voluntarily provide (e.g., allergies, conditions)

Sensitive Data Notice: Prescription and health data are considered sensitive personal information. We process this data only to provide pharmacy services as requested by you and as permitted by applicable law.

d. Order & Transaction Information

Products ordered, order history, and payment information (processed via secure third-party payment gateway; we do not store full payment card details).

e. Automatically Collected Information

When you use the App, we may collect: device type, OS, app version, IP address, mobile network information, app usage data, and push notification tokens.

2. How We Use Your Information

Create and manage your account
Process orders and payments
Verify and fulfill prescriptions (pharmacist review)
Arrange home delivery of medications and products
Communicate order status, delivery updates, and pharmacy alerts
Comply with legal and regulatory obligations (prescription recordkeeping)
Improve App functionality and user experience
Send service-related communications (password reset, policy changes)

We do not sell your personal or health information to third parties.

3. Legal Basis for Processing (GDPR / UK users)

If you are in the European Economic Area (EEA) or UK, we process your data based on:

Performance of a contract – to provide pharmacy services and deliveries.
Legal obligation – to maintain prescription records as required by pharmacy regulations.
Legitimate interests – to improve services and prevent fraud.
Consent – for optional features (e.g., marketing notifications, if enabled).

4. Sharing Your Information

We may share your information only in these circumstances:

With pharmacists and pharmacy staff – to review prescriptions and prepare orders.
With delivery partners – name, address, and phone number are shared to facilitate home delivery. Prescription details are not shared with delivery personnel unless required by local law.
Third-party service providers – payment processors, cloud storage, customer support tools – under strict confidentiality.
For legal compliance – if required by law, court order, or regulatory authority (e.g., board of pharmacy).
Business transfers – merger, acquisition, or bankruptcy, with notice to you.

5. Data Security

We implement reasonable safeguards including encryption of prescription images and sensitive data in transit (TLS) and at rest (AES-256), access controls, and regular security reviews. However, no transmission over the internet is 100% secure.

6. Data Retention

Account data: until you delete your account, plus 30 days.
Prescription records: 5 years as required by pharmacy laws.
Order history: 3 years for service improvement and legal compliance.
Automatically collected data: 12 months.

After retention periods expire, we anonymize or securely delete your data.

7. Your Rights and Choices

Depending on your location, you may have the right to: Access, Correction, Deletion, Restriction, Data Portability, and Withdraw consent. To exercise these rights, contact us at privacy@pharmads.lu.

Note: Prescription records may be retained as required by law even after account deletion.

8. Children’s Privacy

The App is not intended for individuals under the age of 18 depending on jurisdiction. We do not knowingly collect personal information from minors. If you believe a minor has provided us with health data, contact us immediately.

9. International Data Transfers

If you are located outside [Your Country], your information may be transferred to and processed in [Your Country] or other jurisdictions. We implement standard contractual clauses or equivalent safeguards for such transfers.

10. Third-Party Links and Services

The App may contain links to external websites (e.g., payment pages). We are not responsible for the privacy practices of those third parties.

11. Changes to This Privacy Policy

We may update this Privacy Policy. Material changes will be notified via in-app notice or email. Continued use after the effective date constitutes acceptance.

12. Contact Us

Email: privacy@pharmads.lu
Mail: PharmaDS, Attn: Privacy Officer, support@pharmads.lu
Phone: +352 58 91 99

Additional Regulatory Notes

GDPR / UK GDPR

Lawful basis for health data: Article 9(2)(h) – healthcare provision.

For tailored legal advice regarding pharmacy regulations, consult your compliance team or legal counsel.

Last Update . 13 April 2026

Your privacy is at the core of our service.

You can request access, correction, or deletion of your personal data at any time. To delete your account or request prescription data, email support@pharmads.lu.