Data Protection

Jun, 5 2025

Lawful Basis for Data Processing

Enkehaus Pharmacy is committed to ensuring that all personal data collected from users is processed in accordance with the requirements set forth by the General Data Protection Regulation (GDPR), to the extent applicable in the United States of America. The principal lawful bases for processing personal data are based on user consent, the necessity for the performance of a contract, compliance with legal obligations, and the legitimate interests pursued by Enkehaus Pharmacy. We undertake to identify and document the lawful basis at the time of data collection and provide transparency concerning these bases to all users. Users' choices and rights are respected throughout the entire data lifecycle, and personal data will not be used for purposes incompatible with those specified at the time of collection. All processing activities are strictly regulated, and routine reviews are conducted to validate compliance with the declared lawful bases. Where the consent mechanism is employed, users are empowered to withdraw their consent at any time without prejudice. In such cases, any processing predicated on that consent will cease promptly and efficiently.

Types of Data Collected

Enkehaus Pharmacy collects a wide range of data, including but not limited to, information provided voluntarily through website forms, subscription details, contact information, and health-related queries. Data may include users’ names, email addresses, postal addresses, and any additional information requisite for the purpose of providing accurate pharmaceutical and healthcare guidance. Furthermore, we collect data related to the usage of our website, including device information, IP addresses, browser types, and cookies to enhance user experience, optimize services, and support security measures. At all times, we are transparent about the specific categories of data collected, and users are notified about optional or mandatory nature of each field. Any supplemental information collected in the context of disease management or medication information is handled with heightened care to ensure confidentiality and compliance with applicable health privacy laws.

Purpose of Data Collection and Use

Personal data obtained through Enkehaus Pharmacy is used exclusively for the stated purpose of providing personalized healthcare resources, pharmaceutical guidance, and relevant site functionalities. This includes but is not limited to, responding to user enquiries, facilitating access to disease guides, supplement information, and medication safety tips. Data is also utilized to support research and analysis aimed at improving service offerings, content quality, and user experience. The processing of data for communication and promotional outreach is strictly opt-in and users retain full control over their preferences regarding marketing correspondence. We do not employ automated decision-making or profiling in ways that produce legal or significant effects on individuals. Internal policies ensure periodic review of data processing activities to align with legitimate purposes and regulatory requirements.

Data Sharing and Disclosure

Enkehaus Pharmacy treats all personal data as confidential and does not disclose user information to third parties except when required by law, court order, or with the explicit consent of the data subject. Third-party vendors and service providers are only engaged after stringent due diligence, contractual data processing agreements, and assurances of GDPR-equivalent safeguarding practices. Data sharing for analytical or website functionality purposes is anonymized where possible, and all disclosures are transparently communicated to users. We adamantly reject any unauthorized access or misuse of personal data and utilize appropriate processes to address breach notifications where applicable. No user data is sold or leased to marketing agencies or non-affiliated entities. If cross-border data transfers are necessary, they are performed subject to the adequacy principles outlined in applicable data protection laws.

Data Storage, Security, and Retention

All personal data collected by Enkehaus Pharmacy is stored on secure servers with robust technological and organizational safeguards in place to prevent unauthorized access, disclosure, alteration, or destruction. We regularly audit our security frameworks, which encompass data encryption, user authentication, and secure backup solutions. Access to personal data is strictly limited to authorized personnel under strict confidentiality obligations. Data retention policies are clearly defined, and personal data is retained for no longer than necessary to fulfill the purposes for which it was collected. Upon expiration of the retention period or withdrawal of consent, data is securely deleted or anonymized in compliance with recognized data disposal standards. Users are informed of their retention periods in accordance with best practice standards and are provided with methods to request early deletion where permissible.

User Rights under GDPR

Enkehaus Pharmacy acknowledges and upholds the rights of all users regarding their personal data as stipulated under the GDPR, including the right to access, rectify, erase, restrict further processing, and port their data. Users also maintain the right to object to certain processing activities and to withdraw consent at any time. Formal requests to exercise these rights may be submitted to Enkehaus Pharmacy, and we are obligated to provide a prompt and comprehensive response as required by law. Data subjects are not subject to discriminatory treatment for exercising their rights, and all requests are tracked to ensure procedural integrity. Where refusal of requests is justified, clear reasoning is provided in writing, along with information on how to seek redress or lodge a complaint with relevant supervisory authorities.

Cookies and Automated Data Collection

Our website employs cookies and similar technologies to enhance functionality, analyze user behavior, and improve service delivery. All users are informed about the use of cookies via a clear and accessible cookie notice upon their first site visit. Cookies are categorized by their purpose, such as strictly necessary, functional, analytical, and marketing cookies, and users are granted the ability to configure their consent preferences. Detailed information about cookie types, duration, and third-party involvement is available on request. Users may disable cookies via browser settings; however, this may affect website performance and the availability of certain features. Automated data logged through cookies is used solely for internal purposes and is not linked to identifiable information without explicit consent from the user.

Contact Information for Data Subjects

Data subjects wishing to exercise any rights, request further information, or communicate concerns regarding data protection are encouraged to contact Enkehaus Pharmacy’s owner and Data Protection Officer. The designated contact person is Darren Whitby, and he may be reached at the postal address: University of Manchester, Oxford Rd, Manchester M13 9PL, United Kingdom. For electronic correspondence, data subjects may use the following email address: [email protected]. We are committed to swift and confidential handling of all privacy-related enquiries and will acknowledge and address requests without undue delay.