Privacy Policy

Introduction

Pharmin is a trading name of Nutrapi Ltd, a company registered in Ireland (company registration number 721111). This privacy policy explains how we collect, use, store, and protect your personal data when you use our services, visit our websites, or otherwise interact with us.

We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR) and applicable Irish and EU data protection law. By using our services, you acknowledge that you have read and understood this policy.

Information We Collect

We may collect and process the following categories of personal data:

• Personal information such as your name, email address, and phone number
• Pharmacy business information including pharmacy name, address, and professional registration details
• Call recordings and transcripts, which may be used for AI model training and quality assurance purposes
• Usage data including how you interact with our platform, features accessed, and session duration
• Cookies and analytics data collected through our websites

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our services
• To process and manage communications between pharmacies and their patients
• To train and improve our AI models for better accuracy and service quality
• To send service updates, technical notices, and administrative messages
• To comply with legal obligations and regulatory requirements

Legal Basis for Processing

Under the GDPR, we rely on the following legal bases for processing your personal data:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contractual necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legitimate interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your rights
• Legal obligation: Where processing is necessary for compliance with a legal obligation to which we are subject

Data Sharing

We do not sell your personal data to third parties. We may share your information with the following categories of recipients where necessary:

• Service providers who assist with hosting, analytics, payment processing, and other operational functions, subject to appropriate data processing agreements
• Professional advisors including lawyers, auditors, and accountants where necessary for the provision of their professional services
• Law enforcement or regulatory authorities where required by law or in response to a valid legal request

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements.

Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data
• Right to erasure: You have the right to request that we delete your personal data in certain circumstances
• Right to restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format
• Right to object: You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing

To exercise any of these rights, please contact us using the details provided in the Contact Us section below. We will respond to your request within one month of receipt.

International Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your personal data in accordance with applicable data protection law.

Security

We implement industry-standard security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and staff training on data protection. While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure.

Cookies

We use cookies and similar technologies on our websites. These include essential cookies required for the operation of our site, and analytics cookies that help us understand how visitors use our platform. You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our services.

Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete that information as soon as possible.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technologies, or legal requirements. Where we make material changes, we will notify you by updating the date at the top of this policy and, where appropriate, providing additional notice via email or through our platform.

Contact Us

If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us:

Nutrapi Ltd
Ireland
Company registration number: 721111
Email: privacy@pharmin.io