Privacy Policy

Privacy Policy

  1. Home
  2. Privacy Policy

Everest Pharmacy — Privacy Policy

Last updated: August 2026

INTRODUCTION

Everest Pharmacy (“we” or “us” or “our”) respects the privacy of our users (“user” or “you”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.everestpharmacy.co.uk, including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the “Site”). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the “Last Updated” date of this Privacy Policy. Any changes or modifications will be effective immediately upon posting the updated Privacy Policy on the Site, and you waive the right to receive specific notice of each such change or modification.

COLLECTION OF YOUR INFORMATION

We may collect information about you in a variety of ways. The information we may collect on the Site includes:

Personal Data

Personally identifiable information, such as your name, shipping address, email address, and telephone number, and demographic information, such as your age, gender, hometown, and interests, that you voluntarily give to us when you register with the Site or when you choose to participate in various activities related to the Site, such as online chat and message boards. You are under no obligation to provide us with personal information of any kind, however your refusal to do so may prevent you from using certain features of the Site.

Derivative Data

Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site.

Financial Data

Financial information, such as data related to your payment method (e.g. valid credit card number, card brand, expiration date) that we may collect when you purchase, order, return, exchange, or request information about our services from the Site. We store only very limited, if any, financial information that we collect. Otherwise, all financial information is stored by our payment processor, and you are encouraged to review their privacy policy and contact them directly for responses to your questions.

Mobile Device Data

Device information, such as your mobile device ID, model, and manufacturer, and information about the location of your device, if you access the Site from a mobile device.

Third-Party Data

Information from third parties, such as personal information or network friends, if you connect your account to the third party and grant the Site permission to access this information.

AI Patient Assistant Data

The messages you send to the AI patient assistant on our Site, the replies it gives, and any contact details you choose to provide through it. See the section “AI Patient Assistant on our Website” below.

AI PATIENT ASSISTANT ON OUR WEBSITE

Our website uses an AI patient assistant (“AIPA”) to answer general questions about our services, opening hours and locations, to take enquiries and to pass messages to our team. The assistant is provided by Digitalpharm Ltd trading as AIPA, registered office Spaces, 1 Concourse Way, Sheffield City Centre, Sheffield S1 2BJ, ICO registration ZB884604.

We are the data controller for the information you give the assistant. AIPA acts as our data processor under a written data processing agreement and only processes your data on our instructions.

What we collect through the assistant

  • The messages you send and the replies the assistant gives.
  • Any contact details you choose to provide (for example name, phone number and email) when you ask to speak to a member of our team or submit a form.
  • Technical information such as the page you were on, approximate location derived from the town or postcode you type, and the time of the conversation.

Please do not share detailed medical information in the chat. The assistant is not a clinical service and cannot give medical advice. In an emergency call 999, or call 111 for urgent medical help.

Why we process it and our lawful basis

  • To answer your enquiry and provide our services — legitimate interests, or steps prior to entering a contract with you.
  • To contact you back when you request it — legitimate interests or consent.
  • To improve the accuracy and safety of the assistant — legitimate interests.

Where a message includes health information, we rely on Article 9(2)(h) UK GDPR (provision of health care) or your explicit consent.

How long we keep it

Conversations and enquiries are retained for 12 months by default, and then deleted.

Who your data is shared with

AIPA and its sub-processors host the service, generate the assistant’s replies and deliver notification emails to us. The current list is published at https://aipax.co.uk/dpa. Some of these providers are outside the UK; transfers are protected by UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it. Contact us at support@everestpharmacy.co.uk or write to Everest Pharmacy Head Office, 117B Withington Road, Whalley Range, Manchester, M16 8EE. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

USE OF YOUR INFORMATION

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:

  • Assist law enforcement and respond to subpoena.
  • Compile anonymous statistical data and analysis for use internally or with third parties.
  • Create and manage your account.
  • Email you regarding your account or order.
  • Enable user-to-user communications.
  • Fulfill and manage purchases, orders, payments, and other transactions related to the Site.
  • Generate a personal profile about you to make future visits to the Site more personalised.
  • Increase the efficiency and operation of the Site.
  • Monitor and analyse usage and trends to improve your experience with the Site.
  • Notify you of updates to the Site/s.
  • Offer new products, services, and/or recommendations to you.
  • Perform other business activities as needed.
  • Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.
  • Process payments and refunds.
  • Request feedback and contact you about your use of the Site.
  • Resolve disputes and troubleshoot problems.
  • Respond to product and customer service requests.
  • Answer your questions and take enquiries through our AI patient assistant, and contact you back where you ask us to.
  • Send you a newsletter.

DISCLOSURE OF YOUR INFORMATION

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

By Law or to Protect Rights

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation. This includes exchanging information with other entities for fraud protection and credit risk reduction.

Third-Party Service Providers

We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, marketing assistance, and the operation of our AI patient assistant.

Processors we use for the AI patient assistant

Digitalpharm Ltd trading as AIPA — provides the patient assistant and dashboard (UK). AIPA uses the following sub-processors on our behalf:

  • Cloudflare, Inc. — hosting and delivery of the website assistant (global edge).
  • Supabase — database, authentication and file storage (EU).
  • OpenAI, L.L.C. — generating assistant replies, speech and transcription (US).
  • Postmark (ActiveCampaign, LLC) — notification and enquiry emails (US).
  • Mollie B.V. — subscription billing for our pharmacy account (EU).
  • Firecrawl (Sideguide Technologies, Inc.) — reading our published website content so the assistant can answer accurately (US).

An up-to-date list is maintained at https://aipax.co.uk/dpa.

Marketing Communications

With your consent, or with an opportunity for you to withdraw consent, we may share your information with third parties for marketing purposes, as permitted by law.

Interactions with Other Users

If you interact with other users of the Site, those users may see your name, profile photo, and descriptions of your activity, including sending invitations to other users, chatting with other users, liking posts, following blogs.

Online Postings

When you post comments, contributions or other content to the Site, your posts may be viewed by all users and may be publicly distributed outside the Site in perpetuity.

Third-Party Advertisers

We may use third-party advertising companies to serve ads when you visit the Site. These companies may use information about your visits to the Site and other websites that are contained in web cookies in order to provide advertisements about goods and services of interest to you.

Affiliates

We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners or other companies that we control or that are under common control with us.

Business Partners

We may share your information with our business partners to offer you certain products, services or promotions.

Social Media Contacts

If you connect to the Site through a social network, your contacts on the social network will see your name, profile photo, and descriptions of your activity.

INTERNATIONAL TRANSFERS

Some of the service providers we use, including certain sub-processors used by our AI patient assistant, are located outside the United Kingdom. Where personal data is transferred outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, together with appropriate additional safeguards.

TRACKING TECHNOLOGIES

Cookies and Web Beacons

We may use cookies, web beacons, tracking pixels, and other tracking technologies on the Site to help customize the Site and improve your experience. When you access the Site, your personal information is not collected through the use of tracking technology. Most browsers are set to accept cookies by default. You can remove or reject cookies, but be aware that such action could affect the availability and functionality of the Site. You may not decline web beacons. However, they can be rendered ineffective by declining all cookies or by modifying your web browser’s settings to notify you each time a cookie is tendered, permitting you to accept or decline cookies on an individual basis.

For more information on how we use cookies, please refer to our Cookie Policy posted on the Site, which is incorporated into this Privacy Policy. By using the Site, you agree to be bound by our Cookie Policy.

AI assistant (cookies and local storage)

The AI patient assistant stores a small identifier in your browser so a conversation can continue across pages, and remembers whether you have dismissed the chat window. These are strictly necessary for the assistant to work once you open it. No advertising or cross-site tracking cookies are set by the assistant.

You should be aware that getting a new computer, installing a new browser, upgrading an existing browser, or erasing or otherwise altering your browser’s cookies files may also clear certain opt-out cookies, plug-ins, or settings.

THIRD-PARTY WEBSITES

The Site may contain links to third-party websites and applications of interest, including advertisements and external services, that are not affiliated with us. Once you have used these links to leave the Site, any information you provide to these third parties is not covered by this Privacy Policy, and we cannot guarantee the safety and privacy of your information. Before visiting and providing any information to any third-party websites, you should inform yourself of the privacy policies and practices (if any) of the third party responsible for that website, and should take those steps necessary to, in your discretion, protect the privacy of your information. We are not responsible for the content or privacy and security practices and policies of any third parties.

SECURITY OF YOUR INFORMATION

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorised parties.

OPTIONS REGARDING YOUR INFORMATION

Account Information

You may at any time review or change the information in your account or terminate your account by:

  • Logging into your account settings and updating your account
  • Contacting us using the contact information provided below

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with legal requirements.

Emails and Communications

If you no longer wish to receive correspondence, emails, or other communications from us, you may opt-out by:

  • Noting your preferences at the time you register your account with the Site
  • Logging into your account settings and updating your preferences
  • Contacting us using the contact information provided below
  • If you no longer wish to receive correspondence, emails, or other communications from third parties, you are responsible for contacting the third party directly.

CONTACT US

If you have questions or comments about this Privacy Policy, please contact us at:

Everest Pharmacy Head Office, 117B Withington Road, Whalley Range, Manchester, M16 8EE

support@everestpharmacy.co.uk 0161 2278106