This policy explains how PharmacySpark handles personal information when you browse the site, create an account, place an order, request support, or use a payment or delivery service connected to an order. Effective 13 July 2026.
Information we collect
We may collect account and contact details, billing and delivery information, order contents and status, support messages, fraud-prevention signals, consent records, device and security logs, and cookie or session identifiers needed to operate the store.
Do not send identity documents or full payment credentials through the support form. If a payment partner requires KYC, that partner collects the information on its own secure service under its privacy terms.
How we use information
- Provide the catalog, cart, account, checkout, order, delivery, tracking, and support functions.
- Process and reconcile payments through available providers.
- Prevent fraud, account misuse, duplicate transactions, and security incidents.
- Meet accounting, tax, legal, regulatory, sanctions, and dispute-handling duties that apply to a transaction.
- Maintain records, improve reliability, and answer customer requests.
Legal grounds
Depending on the customer and transaction, processing may be needed to perform a contract, take steps requested before a contract, comply with law, protect legitimate security and business interests, establish or defend legal claims, or act on consent where consent is required.
Who receives information
Information may be shared with hosting and infrastructure providers, WooCommerce service components, payment processors, fraud-prevention providers, fulfillment partners, carriers, professional advisers, and public authorities where required. Each recipient receives only the information needed for its role.
International processing
Store, payment, support, and delivery providers may process information outside the customer’s country. Each external provider’s privacy notice identifies where it processes information and the transfer safeguards it applies. Review that notice before continuing to the provider’s service.
Retention
Account and order records are kept only as long as needed for fulfillment, support, fraud prevention, accounting, dispute handling, and applicable legal obligations. Security logs and abandoned-session data are kept for shorter operational periods where possible. Data is deleted or anonymized when it is no longer needed, subject to required records and backups.
Cookies and local storage
Essential storage keeps the cart, checkout, account session, security controls, and support-form anti-spam protection working. PharmacySpark does not currently enable non-essential analytics or marketing cookies. See the Cookie policy for the active storage inventory and typical durations.
Your choices and rights
Depending on local law, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent where processing relies on consent. Some order records cannot be deleted immediately when they must be retained for legal, security, payment, or dispute purposes.
Security
PharmacySpark uses HTTPS, access controls, software updates, backups, and service-provider controls to reduce risk. No online system can guarantee absolute security. Report a suspected account or payment issue through the support form without including sensitive credentials.
Children
The store is not directed to children. Do not create an account or place an order if you lack legal capacity to do so.
Contact and changes
Use the Contact page for a privacy request and clearly label the subject “Privacy request.” PharmacySpark may revise this policy when the store, providers, or legal duties change. The effective date above identifies the current version.