Privacy policy

Who we are

PharmacyReview is operated by Secure Medical, Inc.. This policy explains what we collect, why, and what you can do about it. Questions, or to exercise any right below: privacy@pharmacyreview.com.

What we collect

• If you create an account: your email address, the display name you choose, and your password (stored only as a secure hash, never in readable form).
• If you write a review: your rating, title, review text and, if you choose, what you used the pharmacy for. Reviews are public once approved, shown with your display name only.
• When you visit: a session cookie that keeps you logged in, and basic server logs (such as IP address and browser user-agent) used for security and to stop spam.
• When you click through to a pharmacy's website: we count the click — which pharmacy, and which page you came from. We don't record who you are.
• If you use the "help me choose" quiz: nothing. Your answers stay in your browser and are never sent to us.

We don't ask for, and you shouldn't send us, your date of birth, government ID numbers, payment card details, insurance details or medical records. We have no need for them.

Health-related information

If you choose to say what you used a pharmacy for, that is health-related information about you, and in some states it is treated as a protected category of data. We ask for it only because it helps other readers, it is always optional, and you can remove it at any time by editing or deleting your review.

We do not sell health-related information, we do not share it for advertising, and we do not use it to build profiles or to target you. Reviews are public, so please don't include details about your health, medications, diagnoses or orders that you wouldn't want anyone to read. We remove personal details from reviews when we spot them.

We are not a healthcare provider, and this site is not a covered entity under HIPAA. Information you post here does not have the protections it would have in a medical record.

Cookies

We use one cookie, and only when you log in: a session cookie that keeps you signed in. It expires when your session ends. We do not use advertising cookies, third-party trackers, or cross-site tracking pixels, and we do not run behavioural advertising on this site. Because of that, there's nothing here to opt out of — but your browser's "Do Not Track" or Global Privacy Control signal is respected by default, since we don't do the thing it asks us not to do.

How we use what we collect

To run your account, publish and moderate reviews, send account emails (address confirmation and password resets), count outbound clicks in aggregate so we know which comparisons people find useful, and protect the site from spam and abuse. That's all.

We don't sell your data

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We have not done so in the preceding twelve months. We don't send marketing email.

Who else sees it

• Our hosting provider stores the site's data on our behalf, under contract.
• Our email provider delivers account emails.
• Law enforcement or regulators, if we're legally required to disclose something.

Your email address is never shown publicly and is never shared with the pharmacies reviewed here. Public reviews are visible to anyone, including search engines.

How long we keep it

• Account and reviews: until you delete them. Deleting your account removes your reviews and your email address.
• Server logs: up to 90 days, then discarded.
• Click counts: kept as totals by pharmacy and date, with nothing identifying you.

Security

The site is served over HTTPS, passwords are stored as salted hashes, and administrative areas require a separate login. No system is perfectly secure, but we don't hold payment details or medical records, which limits what there is to lose.

Your choices and rights

From your account page you can edit or delete any review, change your display name, and delete your account together with all of your reviews. For anything else, email us.

Depending on where you live, you may have the right to: know what personal information we hold about you and get a copy; correct it; delete it; and not be discriminated against for exercising these rights. Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana and other states with comprehensive privacy laws have these rights by statute; we extend them to everyone who asks. Residents of Washington and Nevada have specific rights over health-related data, including the right to have it deleted — email us and we'll action it.

We'll verify a request by confirming you control the account's email address, and respond within 45 days. You can authorise someone to make a request for you; we'll ask for proof. If we decline a request, we'll say why, and you can appeal by replying to our response.

Children

This site is for adults. We don't knowingly collect information from anyone under 18, and we delete it if we discover it.

Where your data is held

The site and its data are hosted in the United States. If you use the site from outside the US, you're sending your information to the US.

Changes to this policy

We'll update this page when our practices change, and the "last updated" date above will change with it. If a change is material, we'll say so on the site.

Contact

privacy@pharmacyreview.com, or write to Secure Medical, Inc., Tempe, Arizona.