Privacy Policy

This Privacy and Cookie Notice provides information on how OneHealth collects and processes your personal data when you visit our website or mobile applications.

We collect your personal data in order to provide and continually improve our products and services. We may collect, use, store and transfer different kinds of personal data about you, including for marketing and personalisation purposes. Where we do this, we use your shopping activity — the products you browse, search for and buy — and OneHealth may use Google Digital Marketing to propose targeted offers to you. We do not use your health information for marketing, personalisation or targeted advertising. See “Health Information We Collect” below.

Here are the types of information we gather:

• Marketing and communications data includes your preferences in receiving marketing from us and our third parties and your communication preferences
• Information you give us: We receive and store any information you provide in relation to OneHealth services. Click here to see examples of what we collect
• Information on your use of our website and/or mobile applications: We automatically collect and store certain types of information regarding your use of the OneHealth marketplace including information about your searches, views, downloads and purchases
• Information from third parties and publicly available sources: We may receive information about you from third parties including our carriers; payment service providers; merchants/brands; and advertising service providers.

Because OneHealth is a pharmacy and health service, some of the data we hold about you is health information. We treat it with more care than ordinary account data. Specifically, we may collect and store:

• Health readings you enter — such as blood pressure, blood sugar, heart rate, temperature, height and weight, and the results of the BMI, calorie and ovulation calculators.
• Prescriptions and medication requests — prescription files you upload so we can dispense prescription-only medicines, and the details of medicines you ask us to source.
• Medicines you order — what was dispensed to you, and when.
• Consultation requests — the reason for the appointment and any details you give us when booking a doctor.

We never use your health information for advertising or marketing, never sell it, and never share it with advertising or analytics providers.

We use it only to dispense your medicines safely, to fulfil and support your orders, to show you your own records in your account, and where the law requires us to keep a record.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer. We use the following types of cookies:

Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. We use cookies to collect information in order to improve our services for you.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

• Recognising and counting the number of visitors and to see how visitors move around the site when they are using it. (this helps us to improve the way our website works, for example, by ensuring that users can find what they are looking for).
• Remarketing codes by storing the type of items you browsed, so we can propose targeted offers that might interest you on other websites and platforms, including Facebook and Google. We do not share your prescription uploads, medication requests, consultation details or health readings with advertising platforms.
• Information on; and
• Sending you direct messages or push messages based on your shopping interests. These are never based on your health information.

We use your personal data to operate, provide, develop and improve the products and services that we offer, including the following:

• Registering you as a new customer
• Processing and delivering your order including managing payments, fees and charges and collecting money owed to us
• Managing your relationship with us
• Enabling you to participate in promotions, competitions and surveys
• Improving our website, applications, products and services
• Recommending/advertising products or services which may be of interest to you
• Complying with our legal obligations, including verifying your identity where necessary
• Detecting fraud

We may need to share your personal data with third parties for the purposes set out in the table in paragraph 3 above:

• Sale of products and services: In order to deliver your products and services purchased on our Marketplace from third parties, we may be required to provide your personal data to such third parties.
• Working with third party service providers: We employ other companies and individuals to perform functions on our behalf. Examples include: fulfilling orders for products or services, delivering packages, analyzing data, providing marketing assistance, processing payments, transmitting content, assessing and managing credit risk, and providing customer service.
• Business transfers: As we continue to develop our business, we might sell or buy other businesses or services. Customer information may be transferred together with other business assets.
• Detecting fraud and abuse: We release account and other personal data to other companies and organizations for fraud protection and credit risk reduction, and to comply with the law.

When we share your personal data with third parties we:

• require them to agree to use your data in accordance with the terms of this Privacy Policy and Cookie Notice, our Privacy Policy and in accordance with the law; and
• only permit them to process your personal data for specified purposes and in accordance with our instructions. We do not allow our third-party service providers to use your personal data for their own purposes.

We may transfer your personal data to locations in another country, if this is permissible pursuant to applicable laws in your location.

There are inherent risks in such transfers.

In the event of international transfer of your personal data, we shall put in place measures necessary to protect your data, and we shall continue to respect your legal rights pursuant any applicable laws in your home country.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instruction and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

On this website we use Google Analytics to understand how the site is used — which pages are visited and where people drop out of a journey — so we can improve it. This runs only where you have accepted non-essential cookies.

The OneHealth mobile app does not send analytics data. Your health readings, prescriptions and medication requests are never included in analytics on any platform.

The app asks for a small number of device permissions, always at the point you use the feature that needs them. You can decline any of them and continue to use the rest of the app, and you can change your mind at any time in your device settings.

• Camera — to photograph a prescription or take a profile picture.
• Photos — to attach a prescription or profile picture you already have.
• Location — to suggest your delivery address and find nearby pickup. Used only while you are using the app.
• Notifications — to tell you about order and delivery updates.

We keep your personal data only for as long as we need it for the purposes set out in this notice.

• Your account and profile — for as long as your account is open. If you delete it, we hold it for 90 days in case it was deleted in error, then remove it permanently.
• Health readings you entered — until you delete them or delete your account.
• Prescriptions and dispensing records — for the period pharmacies are required by law to keep them, which can be longer than your account exists.
• Orders, payments and invoices — for the period required by tax, accounting and consumer-protection law.

Where we rely on your consent, you can withdraw it at any time:

• Cookies and analytics — use the cookie banner on this site to decline non-essential cookies, or clear and change your choice in your browser settings.
• App permissions — turn off camera, photos, location or notifications at any time in your device settings.
• Marketing messages — unsubscribe using the link in any marketing email, or contact us.

Withdrawing consent does not affect anything we did with your data before you withdrew it, and it does not affect data we must keep by law.

You can delete your OneHealth account at any time — in the mobile app under More, or in your account settings on this site. Our account deletion page explains exactly what is removed, what we have to keep, and how to ask us to delete your account if you can no longer sign in.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to receive, access or delete your personal data. More details on these rights can be found in our legal section.

If you have any questions or concerns about OneHealthNG privacy policies or you wish to exercise any rights in respect of your personal data, please contact customerservice@onehealthng.com.