Website Terms of Access
1. About us
www.aah.co.uk (the “Website”) is operated by AAH Pharmaceuticals Limited (“we”, “us”, “our”). We are a member of the McKesson UK Group of companies (“Group”) whose principal operating companies are:
AAH PHARMACEUTICALS LIMITED
BARCLAY PHARMACEUTICALS LIMITED
EXPERT HEALTH LIMITED
JOHN BELL & CROYDEN LIMITED
LLOYDS PHARMACY LIMITED
LLOYDS PHARMACY CLINICAL HOMECARE LIMITED
SANGERS (NORTHERN IRELAND) LIMITED
SAVORY & MOORE (JERSEY) LIMITED
STEPHEN SMITH LIMITED
Please note, our Website may contain links to other websites which are provided for your convenience. We are only responsible for the privacy practices and security of this Website. We recommend that you check the privacy and security policies and procedures of each and every other website that you visit.
You are permitted to establish a link to our Website from other sites provided that, if we believe it would damage us or any of our Group companies or an AAH Partner, you must remove the link immediately if we ask you to do so.
3. What is Personally Identifiable Information (PII) / Personal Data?
Personal data or PII means any information relating to a person who can be identified either directly or indirectly by that information; it may include name, address, email address, phone number, credit / debit card number, IP address, location data, purchase history.
4. The personal data we collect
We may collect and process the following information about you:
Information you provide to us.
For your security, we will also keep an encrypted record of your login password.
Information we collect about you–
5. How we will use your information
We will primarily use your personal data:
6. Lawful grounds for processing
To process your data lawfully we need to rely on one or more valid legal grounds. The grounds we may rely upon for the processing of your Personal Data include:
7. Disclosure of your personal data
There are circumstances where we wish to disclose or are compelled by law to disclose your personal data to third parties. This will only take place in accordance with the applicable law and for the purposes listed above. These scenarios include disclosure to:
8. Offers and opportunities
We would like to contact you and/or any person whose information you provide to us, to tell you and/or them about offers and opportunities that are available and about a range of other initiatives in a number of ways, including by post, telephone, text/picture/video message or by email.
Details of how to opt-in to receiving details of offers are on relevant pages of our Website. You can change your mind at any time (see the section "How to contact us" below).
We take the security of personal information very seriously. We employ security technology, including firewalls, and Secure Socket Layers to safeguard information and have procedures in place to ensure that our paper and computer systems and databases are protected against unauthorised disclosure, use, loss and damage.
10. Updating and correcting information
We encourage you to promptly update your personal information if it changes. If you are providing updates or corrections about another person, we may require you to provide us with proof that you are authorised to provide that information to us.
You may be able to update or correct your personal information online in the “My Account” area or by contacting us in writing or by email (see the section "How to contact us" below). Please include your name, address and/or email address when you contact us as this helps us to ensure that we accept amendments only from the correct person.
11. International Transfer of Personal Data
We may transfer your personal data to a third party in countries outside the country in which it was originally collected for further processing in accordance with the purposes set out above. In particular, your personal data may be transferred throughout our Group and to our outsourced service providers located outside the EEA states. In these circumstances we will, as required by GDPR provisions, ensure that the receiving country provides adequate protection for individuals’ rights and freedoms for their personal data.
11. Retention of Personal Data
We may keep an anonymised form of your personal data, which will no longer refer to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.
13. Your rights
Data protection law provides data subjects with numerous rights, including the right to: access, rectify, erase, restrict, transport, and object to the processing of, their personal data. Data subjects also have the right to lodge a complaint with the relevant data protection authority if they believe that their personal data is not being processed in accordance with applicable data protection law.
Right to make subject access request (SAR). Data subjects may, where permitted by applicable law, request copies of their personal data. If you would like to make a SAR, i.e. a request for copies of the personal data we hold about you, you may do so by writing to Paula Bennett, Data Protection Officer, Legal & Compliance, LloydsPharmacy Limited, Sapphire Court, Walsgrave Triangle, Coventry, CV2 2TX. The request should make clear that a SAR is being made. You may also be required to submit a proof of your identity.
Right to rectification. You may request that we rectify any inaccurate and/or complete any incomplete personal data.
Right to withdraw consent. You may, as permitted by applicable law, withdraw your consent to the processing of your personal data at any time. Such withdrawal will not affect the lawfulness of processing based on your previous consent. Please note that if you withdraw your consent, you may not be able to benefit certain service features for which the processing of your personal data is essential.
Right to object to processing, including automated processing and profiling. You may, as permitted by applicable law, request that we stop processing your personal data. In relation to automated processing and profiling, you may object to the processing and you will have the right to obtain human intervention.
Right to erasure. You may request that we erase your personal data and we will comply, unless there is a lawful reason for not doing so. For example, there may be an overriding legitimate ground for keeping your personal data, such as, a legal obligation that we have to comply with, or if retention is necessary for us to comply with our legal obligations.
Right to data portability. In certain circumstances, you may request that we provide your personal data to you in a structured, commonly used and machine readable format and have it transferred to another provider of the same or similar services. We will comply with such transfer as far as it is technically feasible. Please note that a transfer to another provider does not imply erasure of your personal data which may still be required for legitimate and lawful purposes.
Your right to lodge a complaint with the supervisory authority. We suggest that you contact us about any questions or if you have a complaint in relation to how we process your personal data. However, you do have the right to contact the relevant supervisory authority directly. To contact the Information Commissioner’s Office in the United Kingdom, please visit the ICO website for instructions.
14. Changes to the privacy laws and policies
Privacy laws and practice are constantly developing and we aim to meet high standards. Our policies and procedures are, therefore, under continual review. We may, from time to time, update our security and privacy policies and suggest that you check this page periodically to review our latest policies.
In common with many other website operators, we may use standard technology called 'cookies' on this site. Cookies are small pieces of information that are stored by your browser on your computer's hard drive and they are used to record how you navigate this website on each visit.
Most browsers automatically accept cookies, but you can usually change your browser to prevent cookies being stored. Please note, if you do turn cookies off this will limit the service that we are able to provide to you and may affect your visitor experience.
For further information on cookies and how to switch them off see www.allaboutcookies.org
2. Internet Protocol (IP) addresses.
When you visit our Website, we log your IP address (the unique address which identifies your computer on the internet). We use IP addresses to collect broad geographic information on our Site visitors, and to optimise our Website. We do not link IP addresses to personally identifiable information.