Privacy policy

We would like you to feel comfortable visiting our website. It is very important to us to protect your privacy when your personal data are processed.

In our privacy policy we describe how we collect, use and disclose your personal data when you visit our website www.profitlines.ie (the “Website”).

BY USING THE WEBSITE, YOU CONSENT TO THE COLLECTION, USE AND TRANSFER OF YOUR PERSONAL DATA FOR PROCESSING IN IRELAND AS DESCRIBED IN THIS PRIVACY POLICY.

1. Data Controller

 

2. Data Protection Officer

Our Data Protection Officer will be happy to assist you with any concerns regarding data protection.

3. Personal data

Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is a data subject who can be identified, directly or indirectly, in particular by reference to an identifier. Identifiers can include, for example, a name, an identification number, location data, an online identifier, an IP address or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person (hereafter referred to jointly as “data”).

United Drug collects, uses, discloses and processes personal data as outlined in this Privacy Policy, including to improve the Website and services therein (the “Services”).

4. Purposes and legal bases of data processing

4.1     General

We collect, process and use your personal data in accordance with the provisions of the General Data Protection Regulation, the Irish Data Protection Acts and other applicable data protection provisions. Data is processed only insofar as is necessary and permitted under data protection law, for example to enable a visit to the Website, to fulfil contractual purposes or to the extent that you consent to data processing.

4.2     Use of the Website for information purposes

The personal data we collect and hold depends on our relationship with you.  If you purchase goods from us, we normally collect only your business information that you provide to us during our business relationship, however, if you provide your personal data, this Privacy Policy applies to you. We process the personal data you input into our Website when you create an account, and use the Services, including but not limited to your name. If you are using our Website solely to obtain information without logging in, we do not collect any data from you. The exception to this is data transmitted by your browser to enable you to visit the Website and information transmitted to us by cookies used.

4.2.1        Technical functions of the Website

4.2.1.1   Scope of processing and purpose

From a technical perspective, in order for us to make this Website available, we need to process certain automatically transmitted information about you, so that your browser will display our Website and you are able to use the Website. This information is automatically recorded each time our Website is accessed, and stored in our server log files. This information relates to the computer system of the computer used to access the Website.

We also use cookies in order to make our Website available to you. Cookies are text files that are stored in or by the Internet browser when a Website is accessed on your computer system. A cookie contains a string of characters that uniquely identify the browser on subsequent visits to the Website. We use these cookies solely in order to make our Website and its technical functions available to you. Almost all browsers allow all cookies to be blocked, existing cookies to be removed or a cookie alert to be displayed to prevent them being placed on your device. More information about cookies can be found in the documentation, in your browser’s help file, or at www.aboutcookies.org. For more information, please see our Cookie Policy and Cookie Preferences. You can change your cookie preferences at any time here: Cookie Preferences.

Please be aware that blocking certain cookies such as functional cookies may considerably impede the use of the Website. Furthermore, we are unable to provide some functions of our Website without the use of cookies.

4.2.1.2   Legal basis

We process your data in order to deliver adequate Services to you and to make the technical functions of our Website available to you on the following legal basis:

• For the performance of a contract or in order to take steps prior to entering into a contract pursuant to Art. 6.1(b) GDPR, if you visit our Website to find out about the products we offer or our events or our on our online shop or when you make the order on our Website; and
• For the purposes of our legitimate interests pursuant to Art. 6.1(f) GDPR, in order to enable us to make the Website technically available to you. It is our legitimate interest to provide you an attractive, user-friendly, technically functioning website.
• If you have given us your consent, pursuant to Art. 6.1(a) GDPR – you have an opportunity to choose which cookies may be placed on your device by opting “in” or “out” in the cookie banner. You can always change your preferences in Cookie Preferences. Please note that the necessary cookies are pre-selected as they are necessary for the Website to display on your browser.

4.2.2        Statistical analysis of the use of the website and increase of coverage

4.2.2.1   Scope of processing and purpose

For the purpose of statistical analysis of the use of our Website, we use Google Analytics or other analytics tools and, therefore, cookies that allow analysis of your surfing habits. This enables us to improve the quality of our Website and its content. We learn how the Website is used and can continually optimise our service. 

The information obtained from the statistical analysis of our Website will not be associated with your other data that we obtain on the Website.

4.2.2.2   Google Analytics

This Website may use Google Analytics, a web analytics service provided by Google Ireland Limited (Parent: Google LLC). (“Google”). Google Analytics uses “cookies”: text files which are stored on your computer to collect information and report site usage statistics without personally identifying individual visitors to Google. ‘_ga’ is the main cookie used by Google Analytics. ‘_ga’ enables a service to distinguish one user from another and lasts for two years. It is used by any site that implements Google Analytics, including Google service.

The information about your use of this Website generated by the cookie is usually transferred to and stored on a Google server in the USA. However, if IP masking is enabled on this website, Google will first truncate your IP address in member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to and truncated on a Google server in the USA. Google will use this information on behalf of the operator of this Website to analyse your use of the Website, compile reports on Website activities and provide the website operator with other services relating to Website use and Internet use. The IP address transferred by your browser for the purposes of Google Analytics will not be associated with other data held by Google.

This Website uses Google Analytics with the extension “_anonymize IP()”. This truncates IP addresses before further processing, making it impossible to link them to a specific individual.

You may prevent the storage of cookies by changing your Cookie Preferences on our Website at the bottom of our page or by altering the settings in your browser software; however, please be aware that, if you do this, you may not be able to make full use of all the functions of this Website.

You may also prevent Google from collecting and processing the data generated by the cookie and relating to your use of the Website (including your IP address) by downloading and installing the browser plugin available at the following link:   https://tools.google.com/dlpage/gaoptout?hl=en-GB

As an alternative to the browser plugin, you can click on this link to prevent the collection of your data by Google Analytics on this Website in future. Doing this will place an opt-out cookie on your device. If you delete your cookies, you will have to click on the link again.

Further information on terms of use and data protection by/at Google Analytics can be found at http://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=en-GB.

Our social media pages

We want our Facebook page to provide interesting and helpful information related not just to our business, but also to help support a community of people with a wide range of healthy living options.

Because health and various conditions are often complicated, and almost always personal we cannot engage in public discussions of individuals' conditions and queries within this page. When this does happen, you may notice we'll ask to take the conversation to the phone or email, to connect with representatives better able to help in a private and sensitive way.

Please refrain from posting any personally identifiable information, such as your full name, address, national insurance number, phone number or email address.

In an effort to protect your privacy, we will delete any posts that include this information on our public wall. As a general rule, we will leave up comments that are critical of United Drug, except when those comments become disruptive to the community.

We reserve the right to remove any comments, including those that are obscene or offensive, derogatory or disparaging and that are based on an individual's sex, race, colour, religion, age, national origin, marital status, ancestry, sexual orientation, veteran status, disability, pregnancy or citizenship status or are threatening or defamatory.

You can also refer to Facebook's Terms of Service for Facebook's advice on posting rules and guidelines: https://www.facebook.com/legal/terms

4.2.2.4   Legal basis

We process your personal data for the purposes of statistical analysis of the use of our Website on the following legal bases:

• If you have consented to the processing of data using cookies for analysis purposes, in accordance with Art. 6.1(a) GDPR.
• for the purposes of our legitimate interests pursuant to Art. 6.1(f) GDPR; we have a legitimate interest in designing our Website to suit users’ needs.

 4.2.3        Enquiries

4.2.3.1   Scope of processing and purpose

To enable us to process and respond to your enquiries to us, e.g. via the contact form or to our email address, we will process the data you provide to us. The data may include your name, your age and your email address and any additional information you send to us in your communication.

4.2.3.2   Legal basis

We process your data in order to respond to your enquiries on the following legal basis:

• If you contact us in connection with a contract to which you are a party, or in order to take steps prior to entering into a contract, the legal basis is Art. 6.1(b) GDPR.
• For the purposes of pursuing our legitimate interests pursuant to Art. 6.1(f) GDPR; we have a legitimate interest in responding appropriately to customer enquiries.

 4.2.4        Newsletter, surveys etc.

4.2.4.1   Scope of processing and purpose

With your consent, we will use your data for promotional purposes, such as sending you our newsletter or for commercial surveys. When we do this, we collect mandatory details such as your email address, and details that you voluntarily share with us. We use the voluntary details to enable us to personalise our communications with you in future, analyse your preferences and inform you about products that are the best fit for you.  

If you have provided us with your email address in connection with the purchase of goods or services, this may subsequently be used by us to send you a newsletter or for commercial surveys. In this event, the newsletter will only contain direct marketing for our own, similar products or services. Please note that you can always “opt out” (unsubscribe) from receiving any such communication to your email address.

4.2.4.2   Legal basis

We process your data in order to send newsletters, surveys etc. and to personalise our communication with you, on the following legal basis:

• If you have given us your consent, pursuant to Art. 6.1(a) GDPR.
• If you have provided us with your email address in connection with the purchase of goods or services, we send you personalised marketing to pursue our legitimate interests pursuant to Art 6.1(b) GDPR; our legitimate interest is based on our commercial interest in carrying out promotional activities and targeted advertising in respect of our business customers (not individual consumers).

5. Links

Some sections of our Website contain links to the websites of third-party providers. These websites are subject to their own privacy policies. We are not responsible for their operation, including the handling of data by third-party providers. If you send information to or via such third-party websites, you should check their privacy statements before sending them information that can be traced back to you as an individual.

6. Recipients of the data

Your data will only be shared with the internal departments or organisational units and other companies affiliated with us under company law which have need of it, in order to fulfil our contractual and legal obligations or to the extent that we require the data in order to process and implement our legitimate interests.

Your data will be passed on to external recipients:

• in order to process contracts if we are obliged by legal requirements to:
• provide information,
• report or share data; or
• where we are required by law to do so; or
• if required, in order to receive legal advice; or
• if you have given us your consent to your data being shared with third parties; or
• to external service providers who are acting as processors on our behalf or who perform functions for us (e.g. IT service providers, data centres, companies that destroy data or courier services). We will check any third party that we use to ensure that they can provide sufficient guarantees regarding the confidentiality and security of your data. Any processor that we contract to assist us in the processing of your data will be subject to a data processing agreement designed to protect your data at all times.

 7. Transfers to third countries

We may transfer your data to a third party in countries outside the country in which it was originally collected for further processing in accordance with the purposes set out above. In particular, your data may be transferred throughout our Group and to our outsourced service providers outside the EEA states or outside of countries subject to adequacy decision of the European Commission. In these circumstances we will ensure that appropriate measures are in place to protect your data and to comply with our obligations under the data protection law. This may mean that we enter into contracts in the form approved by the European Commission, and that we implement appropriate technical and organisational measures in respect of such transfers. If you would like to receive further details about measures we have taken in relation to the transfer of your data, or copies of the agreements that we have put in place in relation to transfers, please contact us using our contact details below.

For example, Shopify Ireland will initially process your data in Ireland and then transfer it outside of Europe for storage and further processing, including to Canada and the United States. For more information on how Shopify data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper:

https://help.shopify.com/en/manual/your-account/privacy/GDPR.

8. Storage and duration of storage

Your data is stored by our processor Shopify Ireland as affiliate of the Shopify Canada with data storage/processing in Canada and the US.

8.1     Use of the Website for information purposes

When our Website is used purely to obtain information, we only store your data for the duration of your visit to our Website. All personal information, including where carts are abandoned and where personal information is obtained about you and/or any other person whose details you provide will be recorded, used, and protected by us in accordance with current data protection legislation, our Terms and Conditions and this Privacy Policy.

8.2     Active use of the Website

When you make active use of our Website, we store your data for as long as is necessary for example, to provide the respective service or respond to your enquiry. This includes the initiation of a contract (pre-contractual legal relationship) and the performance of a contract. Provided you have given your consent, we will store your data until consent is withdrawn. 

We will also store your personal data until any legal claims arising from the relationship with you have become time-barred, in order that they can be used as evidence if required.

When the limitation period takes effect, we will delete your personal data unless there is a legal retention requirement under Irish law.

9. Automated processing

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using your data.

Our processor Shopify Ireland uses limited automated decision-making to prevent fraud.

Services that include elements of automated decision-making include:

• Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.
• Temporary denylist of credit cards associated with denylisted IP addresses. This denylist persists for a small number of days.

10. Your rights as a data subject

You have the following rights in relation to the data that we hold about you. If you choose to exercise any of these rights, we will ask you to verify your identity.

10.1     Right of access

You are entitled, pursuant to Art. 15 GDPR, to obtain following information from us at any time and free of charge:  your data we process, the purposes of the processing, the categories of recipients, the envisaged period for which the data will be stored or, in the case of transfer to a third country, the appropriate safeguards. You are also entitled to obtain a copy of your data.

10.2     Right to rectification, erasure, restriction of processing

Should the data we process of you be inaccurate or incomplete or if their processing is unlawful, you can request that we rectify, supplement or restrict the processing of your data or erase the data to the extent permitted by law, Art. 16, 17 and 18 GDPR.

There is no right to erasure if the processing of the personal data is necessary (i) for the exercise of the right of freedom of expression and information, (ii) for compliance with a legal obligation to which we are subject (e.g. statutory retention periods) or (iii) for the establishment, exercise or defence of legal claims. 

10.3     Right to data portability

If you have provided us with your data on the basis of your consent or as part of an existing contractual relationship with us, we will, at your request, make the data available to you in a structured, commonly used and machine-readable format or, where technically feasible, will transmit them to a third party named by you.

10.4     Right to object

If we process your data in order to pursue a legitimate interest, you may object to this processing on grounds relating to your particular situation, Art. 21 GDPR. The right to object may be exercised only within the confines of Art. 21 GDPR. Moreover, our interests may override the cessation of processing, meaning that, despite your objection, we are entitled to process your personal data.

10.5     Right to lodge a complaint

You are welcome to contact our Data Protection Officer (contact details in Section 2) with questions, suggestions and criticisms.

You are also entitled, subject to Art. 77 GDPR, to lodge a complaint with a supervisory authority, in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The right to lodge a complaint applies regardless of any other administrative or judicial remedies.

 

11. Obligation to provide data

In principle, you are under no obligation to provide us with data. However, if you do not provide us with data, we cannot make our Website available to you or process your application, are unable to send you a newsletter and cannot respond to enquiries that you send us.

12. Consent/rights of withdrawal

In the event that you give or have given us your consent to the collection, processing or use of your data, you can withdraw this consent at any time by notifying us – see Section 1. An email is sufficient.

You also have the right, on grounds relating to your particular situation, to object to the processing of data concerning you on the basis of Art. 6.1(e) (performance of a task carried out in the public interest) or Art. 6. 1(f) GDPR (legitimate interests pursued by the controller); the same applies to profiling pursuant to those provisions. In this event, we will no longer process the data concerning you, unless we can demonstrate compelling and legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims. 

If the data concerning you are processed in order to engage in direct marketing, you have the right to object at any time to the processing of this data for the purposes of such marketing. If you object to the processing for direct marketing purposes, the data will no longer be processed for those purposes.

Please send notification of withdrawal to the address indicated in Section 1.

13. Do not track

 Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

14. Amendments

We reserve the right to amend this privacy statement at any time. Any changes will be announced by the publication of the revised privacy statement on our Website. Unless specified to the contrary, such amendments take effect immediately. Please therefore regularly check this privacy statement to make sure you are aware of the latest version.

Last updated in January 2023