Privacy Policy

OM Pharmacy (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, place orders, or interact with our services.

This policy is designed to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Information We Collect

1.1 Personal Information

When you create an account or place an order, we collect:

• Full name
• Email address
• Phone number
• Delivery and billing addresses
• Password (stored in encrypted form)

1.2 Business Information (Trader Accounts)

For pharmacy or wholesale customers, we additionally collect:

• Business name and ABN
• Pharmacy Approval Number
• Responsible Pharmacist Number

1.3 Sensitive Health Information

When you purchase prescription-only products, we collect and store a copy of the prescription you upload. This is considered “sensitive information” under Australian privacy law and is handled with additional care:

• Prescriptions are stored securely with restricted access
• Only authorised pharmacy staff can view prescriptions for the purpose of verifying and dispensing your order
• Prescriptions are retained as required by law for record-keeping purposes

1.4 Order and Transaction Data

• Order history, including products, quantities, and amounts
• Shipping addresses used
• Prescription attachments and their verification status

1.5 Technical Information

• Device type, browser, and operating system
• IP address (for security and fraud prevention)
• Interaction data (pages visited, actions taken)

2. How We Use Your Information

We use your information for the following purposes:

• Processing and fulfilling your orders
• Verifying prescriptions and confirming eligibility to purchase certain products
• Providing customer support and responding to enquiries
• Managing your account and preferences
• Sending order confirmations and status updates
• Verifying trader accounts (ABN checks, pharmacy license validation)
• Complying with legal obligations, including pharmaceutical regulations
• Preventing fraud and ensuring platform security
• Improving our services and user experience

3. How We Share Your Information

We do not sell your personal information. We may share it with:

• Delivery partners (name, phone, address only) to fulfil shipments
• Payment processors to complete transactions (payment card details are handled directly by our payment provider and not stored by us)
• Service providers who help us operate our platform (hosting, email delivery, file storage). These providers are bound by confidentiality obligations.
• Regulatory authorities where required by law, including the Therapeutic Goods Administration (TGA) and other health regulators
• Law enforcement when legally compelled

4. Data Security

We take reasonable steps to protect your information:

• Passwords are stored using industry-standard hashing
• Data transmission is encrypted using HTTPS/TLS
• Prescription files are stored on secure cloud infrastructure with restricted access
• Access to sensitive data is limited to authorised staff on a need-to-know basis
• Regular security reviews and monitoring

However, no system is completely secure. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

5. Data Retention

• Account information: retained while your account is active, and for up to 7 years after account closure for tax and record-keeping purposes
• Order and prescription records: retained as required by pharmaceutical regulations and Australian tax law (typically 7 years minimum)
• Technical logs: retained for up to 12 months for security and troubleshooting

6. Your Rights

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information (subject to legal retention requirements)
• Withdraw consent to marketing communications
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise these rights, contact us using the details below. We will respond within a reasonable timeframe, typically within 30 days.

7. Cookies

We use cookies and similar technologies to keep you logged in, remember your cart contents, and understand how our site is used. You can control cookies through your browser settings, but some features of the site may not function correctly without them.

8. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.

9. Children's Privacy

Our services are not directed at people under 18. We do not knowingly collect information from children. If you believe a child has provided us with information, please contact us so we can delete it.

10. International Transfers

Some of our service providers (such as cloud hosting) may be located outside Australia. When we transfer data internationally, we take reasonable steps to ensure it receives an equivalent level of protection.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users via email or a prominent notice on our website. The “Last updated” date at the top of this page indicates when the policy was last revised.

12. Contact Us

If you have questions, concerns, or requests about your privacy, please contact us:

• Email: support@ompharmacy.com.au
• Phone: 0243 441 618
• Post: 25/16 Washington Avenue, Niagara Park NSW 2250, Australia

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au.