Privacy Policy

1. Who We Are

This Privacy Policy explains how iHealth Pharma ("we", "us", "our") collects, uses and protects personal data when you visit this website. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.

• Registered address: C/O SRM, 59 Terrington Hill, Marlow, SL7 2RE, UK
• Company Registration Number: 11867659 (England & Wales)

You can reach us for any data protection query through our contact page.

2. Information We Collect

We collect limited personal data through this website:

• Contact form: if you submit our contact form, we process the name, email address, phone number (optional), subject (optional) and message you provide. Your IP address is not stored; it is used only momentarily, in memory, to limit automated abuse of the form.
• Technical data: basic device and usage information collected via strictly necessary local storage, needed to remember that you have dismissed the cookie notice.
• Analytics (if enabled): if and when analytics tools (e.g. Google Analytics) are activated on this site, aggregated usage statistics may be collected. This policy will be updated at that time to reflect the specific tool and legal basis used.

3. How We Use Your Information

We only process personal data where we have a valid lawful basis under Article 6 of the UK GDPR, specifically:

• Legitimate interests — to respond to correspondence you send us and to keep the website secure and functioning correctly.
• Legal obligation — where processing is required to comply with applicable law.

4. Cookies and Local Storage

This site uses strictly necessary local browser storage only, to remember that you have acknowledged the cookie notice. No analytics or marketing cookies are currently active on this site. Should that change, this section will be updated and, where required by law, your consent will be requested before any non-essential cookies are set.

5. Sharing and International Transfers

We do not sell or rent personal data to third parties. Personal data may be shared with trusted service providers strictly for the purpose of operating this website (for example, hosting infrastructure). Where any such provider is located outside the UK, we rely on appropriate safeguards recognised under the UK GDPR, such as the UK's International Data Transfer Agreement or Standard Contractual Clauses, to ensure your data remains protected.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law, after which it is securely deleted or anonymised.

7. Your Rights Under the UK GDPR

You have the right to:

• be informed about how your data is used;
• access the personal data we hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure of your data ("right to be forgotten");
• restrict or object to certain processing;
• request portability of your data; and
• lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection (ico.org.uk).

To exercise any of these rights, please get in touch via our contact page.

8. Children's Privacy

This website is not directed at children, and we do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The "Last updated" date at the top of this page indicates when it was last revised.