Chester Pharmacy
Privacy Policy
Your privacy and the security of your health information are central to everything we do. This policy explains what we collect, why, and the control you have over your data.
Last updated: 3 June 2026
This Privacy Policy describes how Chester Pharmacy (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you use our website, place orders, upload prescriptions, or sign in using Google. By using our services, you agree to the practices described below.
Google API Services User Data Policy Compliance
Chester Pharmacy’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The section below describes exactly what Google account data we access and how it is handled.
- 1
Data Accessed
When you choose to sign in with Google OAuth, Chester Pharmacy requests only standard, non-sensitive scopes. We access solely:
- Your basic public profile information — such as your full name and profile picture.
- Your verified email address.
We do not request access to your Gmail, contacts, calendar, files, or any other sensitive or restricted Google data.
- 2
Data Usage
The Google user data described above is processed solely to:
- Authenticate and verify your identity.
- Automatically create or log you into your secure local Chester Pharmacy customer profile.
- Populate your account dashboard layout (for example, your display name and profile picture).
Your Google user data is never used for advertising, marketing, profiling, or any purpose unrelated to providing this service.
- 3
Data Sharing
Chester Pharmacy does not share, sell, or rent your Google user data to any third-party companies, advertising or marketing networks, data brokers, or external services. Your Google account data is kept strictly within our own secure system database and is never transferred for unrelated purposes.
- 4
Data Storage & Protection
We store all account data securely using encrypted cloud database infrastructure (Supabase / PostgreSQL). Data is protected with:
- Encryption in transit (HTTPS / TLS) and at rest.
- Strict access controls and row-level security policies that limit who can view your records.
- Regular security review of authentication and database access.
- 5
Data Retention & Deletion
We retain your Google profile data only for as long as your Chester Pharmacy account remains active, or as required to meet legal and pharmaceutical record-keeping obligations. You may request deletion of your data at any time through either of the following:
- Use the “Delete My Account” button in your account dashboard to permanently remove your profile and associated data.
- Email our support team at support@chesterpharmacy.com and we will action your deletion request promptly.
Once deleted, your Google profile data is permanently removed from our active databases.
Information We Collect
To operate as a pharmacy and fulfil your orders safely, we collect the following information:
- Identity details — your full name and account login information.
- Contact & delivery details — delivery addresses and phone numbers used to dispatch and deliver orders.
- Prescription uploads — images or documents you upload so our pharmacists can review and dispense your medicines.
- Medical & order history — records of past prescriptions and orders, kept to support safe dispensing and reordering.
- Payment information — processed securely through trusted local payment gateways.
How We Use Your Information
- To process, dispense, and deliver your orders and prescriptions.
- To allow our licensed pharmacists to review uploaded prescriptions for safety and accuracy.
- To communicate order updates, delivery status, and support responses.
- To maintain your account, order history, and dashboard.
- To meet our legal, regulatory, and pharmaceutical obligations.
Payments & Transactions
Payments are processed securely through trusted local payment gateways such as Paystack and Flutterwave. Your full card details are handled directly by these PCI-DSS compliant providers and are never stored on Chester Pharmacy’s servers. We only retain a record of the transaction (such as order amount and status) needed to fulfil and account for your order.
Data Security
All personal and health data is stored on encrypted cloud infrastructure (Supabase / PostgreSQL), protected by encryption in transit and at rest, strict access controls, and row-level security. While no system can be guaranteed completely secure, we apply industry-standard safeguards to protect your information.
Your Rights & Choices
- Access and review the personal data we hold about you.
- Request correction of inaccurate or outdated information.
- Request deletion of your account and data via your dashboard or by contacting support.
- Withdraw consent for optional processing at any time.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Email: support@chesterpharmacy.com