<style type="text/css">h3 {
    font-size: 18px;
    line-height: 31px;
    padding: 0 0 10px 10;
    color: #000;
    font-weight: 600;
}
p {
    font-size: 14px;
    line-height: 20px;
    color: #000;
}
ul li {
     font-size: 14px;
    line-height: 20px;
    color: #000;
}
p.subhead {
    font-weight: 600;
    text-decoration: underline;
}
.privacy-policypg div {
    margin: 0px 0px 10px 0px;
}
.privacy-policypg div h3 {
       margin-bottom: 5px;
}
td {
    border-bottom: 1px solid black;
    width: 180px;
    padding: 7px 7px 7px 7px;
    background-color: #cccccc;
    border-top: 1px solid black;
    border-right: 1px solid black;
    border-left: 1px solid black;
 }
 table.table.privacy-table tr th {
    width: 180px;
    padding: 7px 7px 7px 7px;
    background-color: #cccccc;
    border-top: 1px solid black;
    border-right: 1px solid black;
    border-left: 1px solid black;
}
table.table.privacy-table tbody td {
    border-bottom: 1px solid black;
    width: 180px;
    padding: 7px 7px 7px 7px;
    border-top: none;
    border-right: 1px solid black;
    border-left: 1px solid black;
 }
 table.table.privacy-table tbody td p{
    text-align: center;
    font-weight: 600;
    margin-bottom: 0px;
 }
 table.table.privacy-table tbody ul li {
    list-style-type: disc;
}
table.table.privacy-table tbody td {

}
table.table.privacy-table tbody td p span {
    font-size: 14px !important;
    margin-bottom: 4px;
}
</style>
<div class="container-fluid privacy-policypg">
<div>
<h3>Chemist Warehouse Ireland Privacy Notice</h3>

<p>This privacy notice provides information about the personal data relating to you that is processed by Chemist Warehouse Ireland, the purposes for which it is processed and the manner and duration of the processing. You should read this Privacy Notice prior to providing any personal data to Chemist Warehouse Ireland and refer to it at any time should you have queries regarding the use of your personal data.</p>
</div>

<div>
<h3>Who Are We?</h3>

<p>Your Personal Data is controlled by Chemist Warehouse Ireland a private company limited by shares incorporated in Ireland with registered number 416045.<br />
When we refer to “we,” “us,” or “our,” in this Privacy Notice, we are talking about Chemist Warehouse Ireland. When we say “you” and “your” and “individuals” in this notice, we mean anyone whose Personal Data we may collect.</p>
</div>

<div>
<h3>How We Obtain Your Personal Data</h3>

<p class="subhead">Personal Data collected directly from you</p>

<p>We collect personal data from you directly in several ways including:</p>

<ul>
	<li>Correspondence with us via our website e.g., by completing the ‘Contact Us’ form on our website or by telephone, live chat, email, or social media,</li>
	<li>When you order goods or services from us either via our website or in one of our stores,</li>
	<li>If you have a business relationship with us</li>
</ul>

<p class="subhead">Personal Data collected automatically</p>

<p>Some Personal Data may be collected automatically when you visit or use our website, such as data collected by cookies and other technologies on our websites. Please also consult our <strong><a href="/cms_upgrade/web/cookie-policy">Cookies Policy</a></strong> [A1] for more information on how we make use of cookies and other automated means of data collection.</p>
</div>

<div>
<h3>Types Of Personal Data We Collect</h3>

<p>The tables below set out the different types of personal data that we collect depending on our interaction with you. We also set out the purpose of the processing, the sources we collect it from and the lawful basis for processing that personal data. Under data protection law, we must always have a lawful basis for processing your personal data. For some processing activities, we consider that more than one lawful basis may be relevant, depending on the circumstances.</p>

<table class="table privacy-table">
	<thead>
		<tr>
			<th>Category</th>
			<th>Purpose of Processing</th>
			<th>Collected From</th>
			<th>Legal Basis for Processing</th>
		</tr>
	</thead>
	<tbody>
		<tr>
			<td>
			<p><span style="color:#000">Contact Information</span></p>

			<ul>
				<li>First and last name</li>
				<li>Postal Address</li>
				<li>Email address</li>
				<li>Telephone number</li>
				<li>Any additional personal data entered into the free text ‘Contact Us’ section of our website.</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>Responding to your enquiries</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>You</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>For our legitimate interest in responding to your enquiry. Art 6(1)(f)</li>
			</ul>
			</td>
		</tr>
		<tr>
			<td>
			<p><span style="color:#000">Contact Information</span></p>

			<ul>
				<li>First and last name</li>
				<li>Home Address</li>
				<li>Telephone number</li>
				<li>Email Address</li>
			</ul>

			<p><span style="color:#000">Financial Information</span></p>

			<p>&nbsp;</p>

			<ul>
				<li>Payment card details</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>To process your online purchase and deliver the product to you as ordered</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>You</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>To perform contract or to take steps prior to entering a contract. Art 6(1)(b)</li>
			</ul>
			</td>
		</tr>
		<tr>
			<td>
			<p><span style="color:#000">Contact Information</span></p>

			<ul>
				<li>First and last name</li>
				<li>Home Address</li>
				<li>Telephone number</li>
				<li>Email Address</li>
			</ul>

			<p><span style="color:#000">Financial Information</span></p>

			<p>&nbsp;</p>

			<ul>
				<li>Payment card details</li>
			</ul>

			<p><span style="color:#000">Personal Information</span></p>

			<ul>
				<li>Date of Birth</li>
				<li>Age</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>To process your instore purchase</li>
				<li>To facilitate the purchasing and dispensing of your prescription</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>You</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>To perform contract or to take steps prior to entering a contract. Art 6(1)(b)</li>
				<li>The provision of health care. Art 9(2)(h)</li>
			</ul>
			</td>
		</tr>
		<tr>
			<td>
			<p><span style="color:#000">Contact Information</span></p>

			<ul>
				<li>First and last name</li>
				<li>Email address</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>To send you marketing information about our products and services</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>You</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>Your consent. Art 6(1)(a)</li>
			</ul>
			</td>
		</tr>
		<tr>
			<td>
			<p><span style="color:#000">Browsing Information</span></p>

			<ul>
				<li>Information automatically generated through your use of our website such as the type of your device and browser, about the way you use our websites, such as details of the web pages you have viewed, the banners and the hyperlinks you have clicked and the websites you have visited before arriving at one of our websites</li>
				<li>IP address</li>
				<li>MAC address</li>
				<li>Information revealing the location of your electronic device</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>To ensure your connection to the website is secure</li>
				<li>To remember your tracking preferences</li>
				<li>To help us understand how visitors to our website are using it so we can make it better.</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>From your device</li>
			</ul>
			</td>
			<td>
			<ul>
				<li>For our legitimate interests to improve the performance of our website. Art 6(1)(f)</li>
				<li>Your consent. Art 6(1)(a)</li>
			</ul>
			</td>
		</tr>
	</tbody>
</table>
</div>

<div style="margin-top: 20px;">
<h3>Special Categories Of Personal Data</h3>

<p>Under the GDPR certain sensitive types of personal data, such as information relating to health, are known as ‘Special Categories of Personal Data’. While Special Categories of Personal Data generally cannot be processed, there are limited exceptions to this general rule, including the provision of health care and/or the treatment or the management of health care systems and services on the basis of Union or Member State law or pursuant to a contract with a health professional. When dispensing your medical prescription, we may collect information relating to your health. Where this information is provided, we will ensure your personal data is subject to protection as required under the GDPR.</p>
</div>

<div>
<h3>Who Do We Share Your Personal Data With?</h3>

<p class="subhead">Service providers</p>

<p>We share your Personal Data with trusted partners who provide services on our behalf. These service providers include:</p>

<ul>
	<li>IT and support services providers for the purposes of website and customer relationship management</li>
	<li>Trusted partners to allow payment and delivery of the products that you have ordered</li>
	<li>Professional services such as lawyers and accountants.</li>
</ul>

<p class="subhead">Intra Group Data Sharing</p>

<p>Sometimes we share your Personal Data with other companies within The Chemist Warehouse Group for the purposes set out in this Privacy Notice. This includes:</p>

<ul>
	<li>Marketing Operations</li>
	<li>financial Record Keeping</li>
</ul>

<p class="subhead">Disclosure to Third Parties</p>

<p>We may share your Personal Data with regulators, law enforcement, other government agencies, industry partners or our advisors if we have a good-faith belief that it is necessary to:</p>

<ul>
	<li>respond pursuant to applicable law or regulations, court orders, legal process, or government requests. For example, sharing with regulators, law enforcement, or other government agencies in response to legal requests or sharing with civil litigants pursuant to court orders.</li>
	<li>protect the rights, property and safety of our employees or others.</li>
</ul>
</div>

<div>
<h3>International Transfers Of Your Personal Data</h3>

<p>Your personal data may be transferred outside of The European Economic Area (EEA). Some of our business functions are managed by our parent company which is located in Australia. Where such transfers occur, it is our policy that that an appropriate transfer agreement is put in place to ensure your data is protected by laws equivalent to those in the EEA.</p>

<p>We also transfer your data to trusted service providers based in India and Australia for the purposes of website and software solutions. Where such transfers occur, it is our policy that: a) they do not occur without our prior written authority; and b) that an appropriate transfer agreement is put in place to ensure your data is protected by laws equivalent to those in the EEA.</p>
</div>

<div>
<h3>How Long Do We Keep Your Personal Data For?</h3>

<p>Personal data will not be held for longer than is necessary for the purpose(s) for which it was obtained as set out in this Privacy Notice or otherwise to comply with legal or regulatory requirements applicable to us.</p>

<p>When your Personal Data is processed for meeting legal and regulatory requirements, we retain your Personal Data as it is set out by the applicable law</p>

<p>Further details of retention periods for different aspects of your personal data are available by contacting us</p>

<p>In some circumstances you can ask us to delete your data: see Your Rights below for further information</p>
</div>

<div>
<h3>Automated Decision Making</h3>

<p>We do not use any form of automation decision making in relation to your personal data.</p>
</div>

<div>
<h3>Your Rights</h3>

<p>Any individual whose Personal Data we process has several rights in relation to how that information is processed by us. You have the following rights:</p>

<ul>
	<li><strong>The right to object – </strong>individuals can object to us processing their data and we will either agree to stop processing or explain why we are unable to</li>
	<li><strong>The right of access – </strong>individuals can request a copy of their personal data we hold about you</li>
	<li><strong>The right of rectification – </strong>individuals can ask us to update or correct their personal data to ensure its accuracy or completeness</li>
	<li><strong>The right to be forgotten – </strong>individuals can ask us to delete their personal data from our records if it is no longer needed for the original purpose</li>
	<li><strong>The right of restriction – </strong>individuals can ask us to restrict the processing of their personal data in certain circumstances</li>
	<li><strong>The right to data portability – </strong>individuals can ask for the data we hold about them to be transferred to another organisation.</li>
	<li><strong>Right to object to automated processing, including profiling – </strong>individuals have the right to object when a decision is based solely on automated processing of their personal data.</li>
</ul>

<p>You can exercise these rights via our Data Privacy team. You can contact them at <span style="background: yellow;"> [xxxxxxxxx]</span>. [A2] When you contact us to ask about your information, we may ask you to identify yourself to protect your information.</p>

<p class="subhead">Complaints</p>

<p>You also have a right to lodge a complaint with a supervisory authority. In Ireland this is the Data Protection Commission (DPC). You can contact the DPC via their website: <span style="text-underline:none"> <a href="https://www.dataprotection.ie/en/contact/how-contact-us" target="_blank"> https://www.dataprotection.ie/en/contact/how-contact-us</a>.</span></p>
</div>

<div>
<h3>How To Contact Us</h3>

<p>If you would like further information about this Privacy Notice or our processing of your Personal Data, you can contact us by:<br />
<span style="background: yellow;">Email: [xxxxxxxxxxxxxxxx][A3] </span></p>
</div>

<div>
<h3>Changes To Our Privacy Notice</h3>

<p>Occasionally it may be necessary for us to make changes to this notice. When such a change is made, we will post a revised version online at the earliest opportunity. Changes will be effective from the point at which they are posted. This privacy notice was last updated in <strong>August 2022 </strong></p>
</div>
</div>
