The Boots Online Doctor Services are operated by Boots Digital Health Ltd. Boots Digital Health Ltd is a Boots business and a member of Walgreens Boots Alliance. You can find out more about the companies in Walgreen Boots Alliance on our website.
This Privacy Policy, together with Boots’ full Privacy Policy available at www.boots.com/privacypolicy, sets out how we collect and process your personal data.
Throughout this Privacy Policy, ‘we’, ‘us’ and ‘our’ means Boots Digital Health Ltd, and ‘Boots’ means companies within the Walgreens Boots Alliance, including subsidiaries, affiliates, joint ventures and franchises.
Individual Data
Advertising Data
Information Technology Data
Account and Profile Data
Economic and Financial Data
Sales Data
Health Data
Special Category Data
Market Research Data
Aggregated Data
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.
This includes personal data which relates to your identity, such as your first name, middle name, last name, username or similar identifier, title, date of birth, gender and your contact details such as your billing address, delivery address, email address and telephone numbers.
This includes personal data which relates to your advertising preferences, such as whether you open our emails (and if you do what links you click on), information about your preferences in receiving marketing materials from us and our third parties and your communication preferences.
This includes personal data which relates to your use of our website, such as your internet protocol (IP) address, login data, traffic data, weblogs and other communication data, browsing behaviour information, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices (which include computers as well as hand held devices such as mobile phones and tablets) that you use to access our website.
This includes personal data which relates to your account or profile on our website, such as your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
This includes personal data which relates to your finances, such as your payment card details and information which we collect from you for the purposes of the prevention of fraud.
This includes personal data which relates to the transactions you have conducted with us, such as details about payments to and from you and details of products and services you have purchased from us.
This includes personal data relating to your current or former physical or mental health, including information about any healthcare you have received from us or other healthcare providers such as GPs, dentists, or hospitals (private and/or NHS), which may include test results, referral letters, prescription or treatment details, photos, information you provide when communicating with our doctors, details of clinic and hospital visits, as well as medicines administered.
We may obtain some of your more sensitive data such as personal data revealing racial or ethnic origin, the processing of genetic data, biometric data, data concerning health or data concerning sex life or sexual orientation.
This individual data which is gathered for the purposes of market research, such as price comparison information.
We also obtain and use certain aggregated data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but does not directly or indirectly reveal your identity. For example, we may aggregate your Information Technology Data to calculate the percentage of users accessing a specific feature on our website. However, if we re-combine or re-connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.
THE SOURCES FROM WHICH BOOTS ONLINE DOCTOR OBTAINS YOUR PERSONAL DATA
We collect personal data about you in order to:
Perform our contractual obligations to you
Consent
Legal Obligations
Public Interest
Legitimate Interests
Detail
Processing data for the purposes of a contract to which you are a party to.
There’s a range of legal and regulatory requirements we and our parent company need to comply with, and some of these may affect the way we process personal data, or the length of time we are required to keep it.
You’ll be asked to confirm that you’re happy to provide your personal data and that you give permission to BOD to process your personal data. All of the details such as why BOD want your data, how it will be used and if your data will be shared, will be provided at the time of asking you for your consent. Where BOD are relying on consent you will usually see a tick box
BOD will on occasion be under a legal obligation to obtain and disclose your personal data.
Where possible BOD will notify you when processing your data due to a legal obligation, however this may not always be possible.
The processing is necessary for the performance of a task carried out in the or in the exercise of official authority vested in us
BOD process personal data for our own legitimate business interest. This relates to us managing our business to enable us to give you the best service/products and most secure experience. When we rely on this, we’ll carry out a legitimate interest assessment to ensure we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws.
Our legitimate business interests don’t automatically override your interests – we will not use your Personal Data for activities where our interests are overridden by the impact on you unless we have your consent or are otherwise required or permitted to do so by law.
Example
registering you as a patient;
providing you with healthcare and related services and to communicating with you in relation to the same (including in relation to complaints);
providing any treatments or prescriptions which have been prescribed to you or referring you to Boots for the fulfilment of any prescriptions;
communicating with any other individual that you ask us to update about your care, including family members and other healthcare professionals;
using our systems to compile and organise your answers to our health questionnaire to enable our healthcare professionals to better assess your health, understand your healthcare needs and provide you with any relevant prescriptions;
making or receiving payments, fees and charges;
collecting and recovering money owed.
For certain purposes it may be appropriate for us to obtain your prior consent such as our marketing activity. The legal basis of consent is only used by us in relation to processing that is entirely voluntary – it is not used for processing that is necessary or obligatory in any way.
In the event that we rely on your consent, you may at any time withdraw the specific consent you give to our processing your personal data. Please email us at
service@weightlosonlinepharmacy.com
to do so.
Please note even if you withdraw consent for us to use your personal data for a particular purpose we may continue to rely on other lawful bases to process your personal data for other purposes.
processing is necessary for the establishment, exercise, or defence of legal claims; or
compliance with legislation;
prevent and detect fraudulent or criminal activity we may share information with forces such as the Police. This is done in a safe and secure manner. You may not be notified of this.
To protect individuals or society from the risk of harm or death, such as from a serious communicable disease or violent crime.
the provision of our healthcare services and goods;
the recovery of debt;
the provision of administration and / or technology services;
the security of our technology network;
the prevention of fraud;
marketing of goods and services and promotion of our business;
the reorganisation or sale or refinancing of the business or a group restructure;
the study in how to develop, update and improve our products and services;
to invite you to participate in clinical trials;
the development of our business strategy;
protecting our business and property.
Extra conditions for sensitive personal data
Where we are processing your sensitive / special category personal data one of the following conditions will also apply:
you have given your explicit consent to the processing;
the processing relates to personal data which are manifestly made public by you;
the processing is necessary for the establishment, exercise or defence of legal claims;
the processing is necessary for archiving purposes in the public interest;
the processing is necessary to protect an individual’s vital interests where the individual cannot give consent;
the processing is necessary for reasons of substantial public interest;
processing is necessary in relation to your or our rights in the field of employment and social security and social protection law;
processing is necessary for the purposes of preventative or occupational medicine; and
processing is necessary for reasons of public interest in the area of public health.
We will always ask you if you want to receive offers and information from us and via what channels you are happy to receive them.
Your BOD preferences provided will need to be managed independently of your Boots preferences.
If you have opted into to receive email and digital communications, you will receive traditional emails but may also receive marketing online and via social media platforms.
If you have opted into marketing using your lifestyle and health information, we will send you offers on healthcare products you buy.
Some of our marketing selection processes are fully automated so that we can ensure we’re selecting offers, products and services that are the most relevant for each customer. We combine our data with demographic data that we obtained when you signed up, such as your gender, your age and where you live. This aggregated data is then compared against our other customers to understand you better.
Please be aware that as our marketing campaigns are prepared well in advance, you may still receive material by post for up to two months, and by e-mail or text for up to 28 days after updating your preferences.
We may disclose your personal data to:
If you provide personal data to us about someone else (such as one of your next of kin or, where you are a business, your directors or employees, or someone with whom you have business dealings) you must ensure that you are entitled to disclose that personal data to us and that, without taking any further steps, we may collect, use and disclose that personal data as described or referenced in this Privacy Policy.
You must ensure the individual concerned is aware of the various matters detailed or referenced in this Privacy Policy, as those matters relate to that individual, including our identity, how to contact us, the way in which we collect and use personal data and our personal data disclosure practices, that individual’s right to obtain access to the personal data and make complaints about the handling of the personal data, and the consequences if the personal data is not provided.
It is important that the personal data we hold about you is accurate and current, and we take all reasonable precautions to ensure that this is the case, but we do not undertake to check or verify the accuracy of personal data provided by you. Please keep us informed if your personal data changes during your relationship with us either by logging onto your account on the website or by contacting us. We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient, or incomplete personal data that you provide to us.
We respect the fact that your personal information is your information, and we’ll make it easy for you to update or change your personal details or marketing permissions. Please help us to help you by letting us know if your contact details change, or if you spot any errors in the information, we hold about you.
Your data rights are explained below, all of which are free of charge and should be concluded within a 30-day time frame. We may require you to provide identification in order to fulfil your request.
To exercise any of your data rights below, please contact
The Online Doctor: Coach app is operated by Liva Health US Ltd (“Liva”) on behalf of Digital Health Ltd t/a Online Doctor (“ Online Doctor”).
Information we get from the Bo Online Doctor: Coach
Online Doctor will share with Liva information required for you to register on the app such as your name, date of birth, email address and phone number. Online Doctor will also share subscription information with Liva to confirm you have a subscription. Online Doctor may also collect and process information you provide to Liva on the app such as transcripts of coaching calls and chat messages in cases of customer complaints and incidents. The legal basis for processing this data is for the fulfilment of a contract.
