Privacy Policy

Last updated: [01/30/2026]

Vivamen understands that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits this website, www.vivamen.co.uk (“Our Site”) and we will only collect and use personal data in the ways described in this Privacy Policy, and in a manner consistent with our legal obligations and your rights.

Please read this Privacy Policy carefully. Your acceptance of this Privacy Policy is deemed to occur upon your first use of Our Site. If you do not accept and agree with this Privacy Policy, you must stop using Our Site immediately.

1) Definitions and interpretation

www.vivamen.co.uk  is owned and operated by Vivamen (‘we’ or ‘us’ or ‘our’). We are the data controller for the purpose of the General Data Protection Regulation (“GDPR”).

Information That We Collect

In this Privacy Policy, the following terms have the following meanings:

  • Cookie means a small text file placed on your computer or device by Our Site when you visit certain parts of Our Site and when you use certain features of Our Site. Details of the Cookies used by Our Site are set out in section 11 below.
  • Cookie Law means the relevant parts of the Privacy and Electronic Communications Regulations (as amended).
  • Personal Data means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to us via Our Site. This includes definitions under the UK GDPR and the Data Protection Act 2018.
  • We / Us / Our means My Pharmacy 365, a limited company registered in Scotland under company number SC604991, whose registered address is 49–51 Crow Road, Glasgow, G11 7SH.

Our Site may contain links to other websites with their own privacy policies. We have no responsibility for those sites or their policies.

2) Information about us (controller details)

Our Site is operated as Vivamen, a brand/trading style of My Pharmacy 365.

My Pharmacy 365 is a subsidiary of Clinica Medica Ltd (company number 08558333), registered address XXXXXXXXXXXXXXXXXXXX

Data Protection contact (DPO / privacy contact):

  • Name/role: [Insert DPO name or “Data Protection Officer”]
  • Email: privacy@vivamen.co.uk
  • Telephone: [Insert phone number]

Post: My Pharmacy 365, 49–51 Crow Road, Glasgow, G11 7SH

3) What does this policy cover?

This Privacy Policy applies only to your use of Our Site and your interactions with us through it. Our Site may contain links to other websites. We have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.

4) Your rights

As a data subject, you have rights under the UK GDPR (and related data protection law), including:

  • The right to be informed about our collection and use of personal data
  • The right of access to the personal data we hold about you (see section 10)
  • The right to rectification if personal data is inaccurate or incomplete
  • The right to erasure (“the right to be forgotten”), in certain circumstances
  • The right to restrict processing
  • The right to data portability
  • The right to object to processing in certain circumstances
  • Rights relating to automated decision-making and profiling

If you have any complaint about our use of your personal data, please contact us using the details in section 13 and we will do our best to resolve it. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO).

5) What data do we collect?

Depending on your use of Our Site and the services you access, we may collect some or all of the following:

Identity & account data

  • Name
  • Username / account identifiers
  • Date of birth
  • Sex / gender information (where relevant to safe care)

Contact & delivery data

  • Email address
  • Address and postcode
  • Telephone number

Technical & usage data

  • IP address
  • Login dates/times
  • Cookie data
  • Time zone / location-derived technical data
  • Browser type and version
  • Device type
  • Operating system
  • Site activity / analytics data

Communications

  • Messages or emails you send to us, including customer support queries

Health & pharmacy services data (special category data)

  • Health information you provide via consultations or medical questionnaires
  • Medication-related information required for safe supply
  • Your registered GP details (where needed for safe care / governance)

Marketing preferences

  • Marketing preferences and opt-in/opt-out records

All data you provide to us must be true, accurate, and complete. Any inaccurate or false data may be recorded and, where we suspect fraud or unlawful activity, may be reported to appropriate authorities.

Age restriction: Our Site and services are not intended for use by anyone under 18 years. We do not knowingly collect data relating to children.

6) How do we use your data (purposes and lawful bases)?

We process personal data securely and only where we have a lawful basis. Depending on the context, our lawful bases may include:

  • Contract: to provide services you request (e.g., account creation, processing an order, supplying pharmacy services)
  • Legal obligation: to meet pharmacy, medicines, and regulatory requirements
  • Consent: where you have clearly agreed (e.g., optional marketing)
  • Legitimate interests: improving our services, preventing fraud, maintaining security, and operating our business in a way that does not override your rights
  • Vital interests: where necessary to protect life (rare)
  • Healthcare/public interest (where applicable): for safe provision and oversight of healthcare services (including handling special category health data in line with data protection law)

Specifically, we may use your data to:

  • Reply to enquiries submitted through Our Site
  • Process and administer consultations, orders, and pharmacy services
  • Contact you about orders, including requesting additional information needed for safe supply
  • Provide service updates and safety communications
  • Request feedback/reviews about products and services you received
  • Improve Our Site and user experience through analytics and performance monitoring
  • Prevent and detect fraud, misuse, or unauthorised access

Marketing: With your permission and/or where permitted by law, we may contact you by email or telephone with news and offers. We do not send unsolicited spam, and you can opt out at any time (see section 8).

Data minimisation & retention: We only keep personal data for as long as necessary for the purpose(s) it was collected for, and/or to meet legal and regulatory obligations (including pharmacy record-keeping requirements).

7) Data security

Data security is very important to us. We take reasonable and appropriate measures to protect personal information from loss, misuse, and unauthorised access, disclosure, alteration, or destruction, taking into account the risks involved and the nature of the data.

  • Your data is stored within the UK
  • Where payments are taken online, transactions are encrypted using SSL/TLS technology
  • Where access codes or login methods are used, you are responsible for keeping them confidential
  • While we take security seriously, transmission of information over the internet can never be guaranteed to be completely secure; any transmission is at your own risk

Payment security: Where applicable, we use payment providers and environments designed to meet relevant payment security standards (e.g., PCI DSS requirements).

8) How can you control your data?

You can control how we use your data in several ways:

  • Marketing preferences: you can opt out of marketing emails at any time using the unsubscribe link in our emails and/or by contacting us
  • Cookie preferences: you can manage cookie preferences via our cookie banner/settings (and via your browser settings)

9) Your right to withhold information

  • You may browse parts of Our Site without providing personal data.
  • You may restrict the use of cookies via our cookie settings and/or your browser controls, though some site features may not function as intended.

10) How can you access your data?

You have the right to request a copy of the personal data we hold about you (where such data is held). In certain cases (e.g., where requests are manifestly unfounded, excessive, or repetitive), we may charge a reasonable fee based on the administrative cost of providing the information.

To request access, contact: [privacy@vivamen.co.uk OR info@mypharmacy365.co.uk].

11) Our use of cookies

Our Site uses first-party cookies (set by us) and may use third-party cookies (set by services used on our site, such as analytics providers).

  • Cookies help us operate Our Site, improve performance, and understand how it’s used
  • Where required by law, we request your consent before setting non-essential cookies
  • You can refuse or withdraw consent for non-essential cookies via the cookie banner/settings

Analytics: Our Site may use analytics services (such as Google Analytics) to collect and analyse anonymous usage information. This helps us improve Our Site and services. You can choose not to allow analytics cookies without preventing you from using core site functions.

You can also manage cookies through your browser settings, including deleting cookies at any time.

12) Verifying identity

We may use LexisNexis Risk Solutions UK Limited to help confirm the identity of users, where required for safe service delivery and/or fraud prevention.

The information you provide may be validated by LexisNexis (company number 07416642) for identity verification. You have a right of access to your personal records held by credit reference and fraud prevention agencies and by LexisNexis. LexisNexis can be contacted at: LexisNexis Ltd, Lexis House, 30 Farringdon Street, London.

Where identity checks are used, you agree that:

  • necessary searches may be carried out to verify your information, including searches of consumer credit records (where applicable)
  • your information may be processed in accordance with LexisNexis’s privacy policy
  • you confirm the information you provide is complete and correct to the best of your knowledge

If you have questions about identity verification, contact us using the details in section 13.

13) Contacting us

If you have questions about Our Site or this Privacy Policy, or you wish to exercise your data protection rights, please contact:

Please make your request clear—especially if you are asking for information about the data we hold about you.

14) Do we share your data?

We do not sell your personal data.

We may share your data in the following circumstances:

  • Legal/regulatory: where required to comply with legal obligations, court orders, or requests from regulators/authorities
  • Within our group: with other companies in our group to support service delivery and operations (holding company and subsidiaries)
  • Service providers/processors: with trusted third parties who perform services on our behalf under contract and instructions (e.g., IT providers, auditors, lawyers, clinicians/prescribers, pharmacy staff, platform providers)
  • Delivery providers: to deliver products (e.g., Royal Mail or other delivery services)
  • Clinical governance: where appropriate and necessary for safe care, we may share relevant information with your GP, particularly for high-risk medications or where required by good clinical practice and governance
  • Business transfers: if we restructure, merge, or sell part/all of the business, your data may be transferred to a new owner who may use it in the same way as set out in this policy

We may also compile anonymised statistics about the use of Our Site (traffic, usage patterns, sales), which do not identify you.

15) Changes to this privacy policy

We may update this Privacy Policy from time to time (for example, to reflect legal or service changes). Any changes will be posted on Our Site. Your continued use of Our Site after changes are published will be deemed acceptance of the updated policy. We recommend checking this page periodically.