Privacy Policy

Scope and our privacy commitment

HRPharmacyUSA respects your privacy and aims to handle personal information in line with the U.S. federal and state privacy requirements that apply to our services.

This policy applies to personal information collected through https://hrpharmacyus.com/, customer service communications, order processing, delivery, returns, account services and related business activities.

Information we may collect

Identity and contact information

• Name, date of birth or age confirmation where relevant.
• Billing and delivery address, email address and telephone number.
• Account username, password and account preferences.

Order, payment and transaction information

• Products ordered, order history, delivery instructions, returns and refund details.
• Payment status and transaction references. Card details are generally processed by our payment provider rather than stored in full by us.
• Fraud-prevention, identity-verification and chargeback information where reasonably required.

Health and medicine-related information

• Information you voluntarily provide about allergies, health conditions, medicine use, symptoms or treatment needs.
• Prescription, prescriber, pharmacist or patient details where legally required for a product or service.
• Communications relating to medicine safety, product suitability, recalls or adverse events.

Website and technical information

• IP address, browser, device type, operating system, referring pages and approximate location.
• Pages viewed, searches, cart activity, clicks, session data and cookie identifiers.
• Customer support messages, reviews, survey responses and marketing preferences.

How we collect information

We may collect information:

• directly from you when you browse, register, order, contact us, submit a form or request support;
• from an authorised representative, carer, health professional or prescriber where appropriate;
• automatically through cookies, server logs and similar technologies;
• from payment providers, delivery partners, fraud-prevention services and other service providers; and
• from publicly available sources or regulators where permitted by law.

You may choose not to provide certain information, but this may prevent us from processing an order, supplying a regulated product, arranging delivery or responding fully to your request.

How we use personal information

We may use personal information to:

• create and manage your account;
• process payments, orders, deliveries, returns and refunds;
• verify age, identity, prescription or product eligibility where required;
• provide customer support and respond to questions or complaints;
• communicate important medicine safety, recall, availability or order information;
• maintain website security, prevent fraud and investigate misuse;
• improve our website, product range, customer experience and business operations;
• send marketing communications where permitted and subject to your preferences;
• comply with legal, regulatory, tax, accounting and record-keeping obligations; and
• establish, exercise or defend legal claims.

Health and sensitive information

Health information is sensitive information. We only seek to collect it when reasonably necessary for our functions or activities and when permitted by law, including where you have consented or another legal basis applies.

Access to health and prescription-related information is restricted to personnel and service providers who need it for order assessment, dispensing or supply, customer support, safety, compliance or another authorised purpose.

When we may disclose information

We may disclose relevant information to:

• payment gateways, banks and fraud-prevention providers;
• couriers, warehouses, fulfilment partners and postal services;
• pharmacists, prescribers, health professionals or medicine suppliers where necessary and lawful;
• website hosting, cloud, email, analytics, customer support and IT security providers;
• professional advisers such as accountants, insurers and legal advisers;
• government agencies, courts, regulators or law-enforcement bodies where required or authorised by law; and
• a purchaser or successor in connection with a genuine business sale, merger or restructuring, subject to appropriate safeguards.

We do not sell personal information. We require service providers to use information only for authorised purposes and to protect it appropriately.

Overseas storage and processing

Some technology, payment, analytics, communication or cloud providers may process or store information outside the United States. The location can depend on the provider and its infrastructure.

Where applicable U.S. privacy law requires it, we take reasonable steps to ensure an overseas recipient handles personal information consistently with applicable U.S. privacy requirements. You can contact us for current information about relevant providers and likely countries.

Cookies, analytics and similar technologies

We may use essential cookies to keep the website functioning, remember cart contents, maintain sessions, help secure checkout and save preferences. We may also use analytics and advertising technologies to understand website use and improve campaigns.

You can manage cookies through your browser and any cookie-preference tool available on our website. Blocking essential cookies may affect account, cart or checkout functions. Third-party services may apply their own privacy policies.

Direct marketing

With your consent, or where otherwise permitted by law, we may send product updates, offers and service messages by email, SMS or other channels. You can unsubscribe using the link in a message or contact us. Operational messages about orders, safety or account security may still be sent when necessary.

We do not use health information for direct marketing unless permitted by law and any required consent has been obtained.

Security and retention

We use reasonable technical and organisational safeguards designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Safeguards may include access controls, encryption in transit, security monitoring, backups and restricted staff access.

No internet transmission or storage system is completely secure. We retain information only for as long as reasonably necessary for the purposes described in this policy, to meet legal and professional record-keeping requirements, to resolve disputes and to prevent fraud. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it.

Access, correction and privacy choices

You may request access to personal information we hold about you and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

We may need to verify your identity before responding. In limited circumstances, the law may allow or require us to refuse access. If so, we will generally explain the reason and available complaint options where legally permitted.

You may also ask us to update communication preferences, close an account or consider a deletion request. Some records may need to be retained where required by law or for legitimate business purposes.

Privacy questions and complaints

Please contact us first if you have a privacy concern. Include enough detail for us to understand and investigate the issue. We will acknowledge and respond within a reasonable period.

If you are not satisfied with our response, you may be able to make a complaint to the an appropriate U.S. privacy regulator or authority through hhs.gov.

Data breaches

If a suspected data breach occurs, we will assess and respond to it in accordance with our legal obligations. Where the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm, we will notify affected individuals and the the appropriate regulator where required.

Children and third-party websites

Our online store is intended for customers who can lawfully make purchases. A parent, guardian or authorised adult should place an order where a minor is involved. We do not knowingly seek to collect personal information from children where it is not reasonably necessary.

Our website may link to third-party websites or services. We are not responsible for their privacy practices. Review their privacy policies before providing information.

Changes to this policy

We may update this Privacy Policy to reflect changes to our services, technology, providers or legal obligations. The latest version will be published on this page with an updated date. Material changes may also be communicated through the website, your account or email where appropriate.