Privacy Policy

This policy applies to our use of any and all data collected by us in relation to your use of the website.

1) The data we collect

We would like to provide you with the best possible service and experience when using our website. The following data will be collected from you in order for us to process your order:

Name
Billing address and delivery address
Telephone number
Email address
Payment details (see below for further information)

The following details are automatically collected:

IP Address
Web browser type & version
Operating system
Cookie information (see below for further details)

2) Our use of data (The Data Protection Act 1998)

We regard our customer’s data of utmost importance and all data is held securely in accordance with the principles of the Data Protection Act 1998. We have put in place suitable physical, electronic and managerial procedures to safeguard and secure your data collected online.

We do not share, sell, or loan, any customer details with third party companies, and any data we collect does not leave the UK, the exception to this is the temporary giving of customers email addresses to Reviews.co.uk (see below), this data is deleted every 30 days.

Phone numbers and addresses will only be used in circumstances where communication is needed in regards to a purchase, or a query is instigated by the customer. We also promise not to spam customers, or contact them for any irrelevant and unnecessary reason.

Our marketing department may decide to use email as a non-invasive method for notifying customers of products or offers that may be of interest to them.

There is an option during registration to opt-out of promotional marketing, and also an option in every promotional email we send. However, if there is a problem with these methods, then a customer can contact us at any time with a request to opt out of direct marketing.

3) Accessing your own data

We will endeavour to keep customer details as up-to-date and accurate as possible, you can access your account at any time to view or amend your own data. There is an edit details option available on every customer’s account page.

You also have the right to request to view any data that we have stored about you. Simply contact us via letter or email and we will be happy to help with any inquiry. We also offer the option to contact us if you believe that any data we have is inaccurate.

Customers also have the right to request the deletion of any data that we have collected from them. However, there will be some data that we are bound by law to maintain for certain periods of time, for reasons such as tax or audit.

4) How your data is protected

Whilst entering any data on our website, whether logging in, creating a new account, placing an order, or editing current account information: your data is encrypted to the industry standard 256-bit.

We also recommend customers to visit the Consumer Guidelines page on the Thawte website, as this shows useful tips for ensuring that your details are kept secure whilst shopping online.

5) Card Payments & Sage Pay

Our Payment Service Provider is Sage Pay (formerly Protx) – the largest independent payment service provider (PSP) in the UK and Ireland. Sage Pay provides a secure payment gateway (Level 1 PCI DSS), processing payments for thousands of online businesses, including ours. It is Sage Pay’s utmost priority to ensure that transaction data is handled in a safe and secure way.

Sage Pay uses a range secure methods such as fraud screening, I.P address blocking and 3D secure. Once on the Sage Pay systems, all sensitive data is secured using the same internationally recognised 256-bit encryption standards.

Sage Pay is PCI DSS (Payment Card Industry Data Security Standard) compliant to the highest level and maintains regular security audits. They are also regularly audited by the banks and banking authorities to ensure that their systems are impenetrable.

Sage Pay is an active member of the PCI Security Standards Council (PCI SSC) that defines card industry global regulation.

In addition, you know that your session is in a secure encrypted environment when you see https:// in the web address, and/or when you see the locked padlock symbol alongside the URL. So when buying through our site, you can be sure that you are completely protected.

6) Reviews.co.uk

To provide customers with the best shopping experience at AlzProducts, we have partnered with the independent review company Reviews.co.uk.

We provide Reviews.co.uk with a customer name, order number, and email address. This allows Reviews.co.uk to contact our customers to offer them independent reviews. We provide Reviews.co.uk with these details under the following conditions:

Reviews.co.uk will only use the customer's details to send one review request per order. Any customer details will not be used for any other purpose, and cannot be given to any 3rd party organisations or businesses
Reviews.co.uk will delete all customer details within a maximum of 30 days

7) VAT Relief Forms

HMRC legally requires us to keep all VAT Relief Forms for 6 years, these are securely encrypted in our database.

8) Cookies

Cookies are small text files that are used in the communication between websites and your computer. They are used to collect internet log details and personal behaviour, such as recently viewed products; these are implemented to optimise your user experience.

However, it must be noted that cookies are a crucial part of our website, and therefore, turning them off in your browser settings may affect the features and usability of our website.

9) Error Tracking and Performance Monitoring

To maintain and improve the functionality, stability, and security of AlzProducts, we utilise services for error tracking and application performance monitoring. This helps us identify and resolve technical issues promptly, ensuring a better user experience for you.

Use of Sentry

We use Sentry, a service provided by Sentry, Inc., for real-time error tracking and performance monitoring on our website.

Purpose of Data Processing

The primary purpose of using Sentry is to:

Identify, diagnose, and fix technical errors that may occur on our website.
Monitor the performance of our website to ensure it operates efficiently.
Improve the overall stability and reliability of our services.

Types of Data Collected

When an error occurs while you are using our website, or for performance analysis, Sentry may automatically collect certain technical information. This information typically includes:

Details about your browser type and version (e.g., Chrome, Firefox).
Your operating system and version (e.g., Windows 10, macOS Monterey).
Device type (e.g., desktop, mobile).
The URL of the page where an error occurred.
Technical details of the error itself, commonly known as a stack trace.
A sequence of events (breadcrumbs) leading up to an error to help understand the context.
The specific version of our website code you were using (release version).

Our Commitment to Data Minimisation

We have configured Sentry to minimise the collection of direct personal data.

For instance, IP addresses are processed by Sentry in a way that they are not stored with event data that could identify you.
Crucially, under our current configuration, your direct personal identifiers such as your customer account number, name, or email address are not sent to Sentry as the primary user identifier associated with an error report. The primary identifier used, subject to your consent as described above, is the pseudonymous guest ID.

The data collected is primarily technical and, with the addition of consented identifiers and tags, allows for more effective statistical analysis to help us diagnose and fix problems.

Enhanced Error Context with Your Consent:

To further aid our debugging efforts and understand error patterns, if you provide consent for "Statistics Cookies" as detailed in our Cookie Policy and consent banner, we may enhance the information sent to Sentry as follows:

Persistent Pseudonymous Identifier: We may store a unique, randomly generated identifier (a "guest ID" or "browser ID") in your browser's local storage. This identifier is pseudonymous and does not directly reveal your personal identity. If consent is given, this guest ID is sent to Sentry with error reports. Its purpose is to help us correlate errors that occur within the same browser over time, allowing us to understand if an issue is persistent for a particular browser session or recurring for the same browser across multiple visits, regardless of whether you are logged in.
Logged-in User Status Tags: If you are logged into your AlzProducts account and have provided the aforementioned consent for "Statistics Cookies," we may also send non-personally identifiable tags to Sentry indicating your status (e.g., 'logged_in', 'business_user'). These tags help us understand if certain errors are specific to logged-in users or particular account types.

Sentry as a Data Processor and Data Storage

Sentry acts as a data processor on our behalf, processing the data according to our instructions and for the purposes outlined above. For our account, data processed and stored by Sentry is primarily located within data centres in the European Union (EU). We have a Data Processing Addendum (DPA) with Sentry governing their handling of this data.

You can learn more about Sentry's overall privacy commitments by visiting their privacy policy: Sentry Privacy Policy. Please note that Sentry's privacy policy also describes how they handle data for their direct customers (like us) and visitors to their own website, in addition to their role as a processor for data from applications like ours.

Legal Basis for Processing (GDPR)

We process data through Sentry using different legal bases depending on the type of information:

1. Essential Technical Error Data

What this covers: Information like your browser type, operating system, error details, and technical stack traces collected when an error occurs.
Our Legal Basis: We process this data based on our legitimate interest (Article 6(1)(f) GDPR). This means we believe it's necessary to ensure our website works correctly, stays secure, and provides you with a reliable service. We take care to only collect what's needed for this purpose.

2. Enhanced Contextual Data (Requires Your Consent)

What this covers:
- Storing a unique, pseudonymous "guest ID" in your browser's local storage.
- Sending tags to Sentry that indicate if you are logged in or a business user (if you are logged in).
Our Legal Basis: We process this additional data only with your explicit consent (Article 6(1)(a) GDPR). You provide this consent when you accept "Statistics Cookies" through our cookie consent banner.

Your Choices

If you do not consent to "Statistics Cookies", we will not store the guest ID or send the logged-in status tags to Sentry. Sentry will still collect essential technical error data based on our legitimate interest if an error occurs.
You can manage your cookie consent preferences, including for "Statistics Cookies," at any time through our cookie consent banner or settings.

10) Google Analytics

What is Google Analytics?

We use Google Analytics, a web analytics service provided by Google LLC ("Google"), to help us understand how visitors use our website and improve our services. Google Analytics collects information about your website usage and generates reports about website activity for us.

What Information We Collect Through Google Analytics

When you visit our website, Google Analytics may collect:

Technical information: Your IP address (anonymized), browser type and version, operating system, screen resolution, and device type
Usage data: Pages you visit, time spent on pages, how you arrived at our site, what you clicked on, and general geographic location (country/city level)
Website interactions: Downloads, form submissions, and other interactions with our content

Google Signals

We have enabled Google Signals, which provides us with additional insights when you:

Are signed in to your Google Account
Have turned on Ads Personalisation in your Google Account settings

Google Signals allows us to see aggregated, anonymized demographic information (such as age ranges and interests) about our website visitors as a group. This helps us better understand our audience and improve our website content and services.

Important: This feature only works with data from users who have specifically opted in to Ads Personalisation in their Google Account. If you haven't opted in, or aren't signed in to Google, this doesn't apply to you.

Your Control and Consent

We respect your privacy choices through multiple layers of control:

Cookie Consent

When you first visit our website, you'll see a cookie consent banner powered by CookieBot. You can:

Accept all cookies (including Google Analytics)
Reject non-essential cookies
Customize your preferences
Change your mind at any time through the cookie preferences link

Google's Privacy Controls

You can control how Google uses your data by:

Turning off Ads Personalisation in your Google Account settings
Using the Google Analytics Opt-out Browser Add-on
Managing your activity and data in My Activity

Data Sharing and Retention

Data sharing: We do not share your personal information with third parties through Google Analytics. Google may use aggregated, anonymized data for their own analytics and advertising services
Data retention: We retain Google Analytics data for 26 months, after which it is automatically deleted
Data location: Your data may be processed in the United States and other countries where Google operates

Your Rights

Under data protection laws, you have the right to:

Access: Request a copy of the personal data we hold about you
Rectification: Ask us to correct any inaccurate information
Erasure: Request deletion of your personal data
Portability: Receive your data in a machine-readable format
Object: Object to processing of your personal data
Withdraw consent: Withdraw your consent at any time

To exercise these rights regarding Google Analytics data, you can contact us directly or use Google's privacy tools linked above.

Updates to Google Analytics

We may update our use of Google Analytics from time to time. Any significant changes will be reflected in updates to this privacy policy, and we'll notify you of major changes through our website.

Additional Google Analytics Information:

Changes to this policy

Alzheimer’s & Dementia Products Ltd reserve the right to change this policy as we deem necessary or as may be required by law. Any changes will be immediately posted to the website.

The item has been added to your basket.