Privacy Notice - Pharmasphere

Pharmasphere Ltd Privacy Notice

Version 1.0 Date: 14/02/2020

Our contact details

Pharmasphere Ltd

Postal Address: Kemp House, 160 City Road, London, EC1V 2NX

Introduction

Pharmasphere Ltd take the security of any data shared with us seriously. This privacy notice details the data we collect, how we use this data and how we protect your data.

We will also explain what rights you have with regards to your personal data and how you can exercise those rights.

What type of information we have

We currently collect and process the following information:

Personal identifiers, contacts and characteristics (for example, name, contact details, email, telephone, address)
Bank account details and other payment details
MHRA, GPhC licence and registration details

How we get the information and why we have it

Most of the personal information we process is provided to us directly by you by

Filling in a contact form on our website
Emailing us directly
Connecting with us via social media
Completing contractual, legal and/or regulatory information

Completing documentation for the services you have contracted us for
Providing a payment or bank details
Providing accounting or company taxation details

for one (or more) of the following reasons:

• To provide you with information of the services we offer

To provide a quotation for services
To discuss your (or the company you work for) service requirements
Fulfilment of contractual, legal and/or regulatory requirements
Fulfilment of a service provided by us for you

Purchase/payment of a service or product
Accounting and taxation purposes

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

Your consent. You are able to remove your consent at any time. You can do this by contacting info@pharmasphere.co.uk
We have a contractual obligation.
We have a legal obligation.
We have a legitimate interest.

What we do with the information we have

We use the information that you have given us in order to

To provide appropriate information about products and services that you have requested
To provide quotation(s) for products and services that you have requested
To discuss your (or the company you work for) service requirements

Fulfilment of contractual, legal and/or regulatory requirements
Fulfilment of a service provided by us for you
Purchase/payment of a service or product
Accounting and taxation purposes
Support the security and integrity of the data we hold, our website and business infrastructure

We may share this information with

Regulatory bodies (MHRA or GPhC) and their authorised representatives
HMRC and their authorised representatives

Professional advisers on legal, accounting or taxation matters
Third-party contractors used to generate quotations for you (or the company you work for)
Third-party contractors used to fulfil our contract or service for you (or the company you work for)
Data security providers

How we store your information

Our website and email services are hosted by Hostinger UK Limited. Their privacy policy can be viewed here https://www.hostinger.co.uk/privacy

Our customer relationship management is hosted by Zoho Corporation Pvt. Ltd. Their privacy policy can be viewed here https://www.zoho.com/privacy.html and their GDPR compliance information here https://www.zoho.com/crm/gdpr/

Cloud storage is provided by Mega Limited (New Zealand) a leading privacy company which provides end-to-end encryption. Their privacy policy can be viewed here https://mega.nz/privacy.

Banking services are provided by Starling Bank. Their privacy notice can be viewed here https://www.starlingbank.com/legal/privacy-notice/

All locally stored data is stored on password protected equipment. Hard copies of data are stored securely to prevent unauthorised access

How long we store your information

Data	Kept for
Personal identifiers, contacts and characteristics (for example, name, contact details, email, telephone, address)	Maximum eight years from the date the information is collected.
Bank account details and other payment details	Maximum eight years from the completion of the contract
MHRA, GPhC licence and registration details	Maximum eight years from the completion of the contract

We will then dispose of your information by permanently deleting records from cloud services and electronic devices. Hard copies will be shredded using a third-party contractor.

Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.

Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at info@pharmasphere.co.uk if you wish to make a request or to obtain further information.

For information about the cookies we use on our website(s) please view our Cookie Policy

How to complain

You can complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113