1.                    ABOUT US

Introduction

This privacy and cookie notice (‘the Privacy Notice’) sets out the ways in which Medina Healthcare Limited(registered in Malta, Europe with Registration Number C44038) (hereafter ‘Medina’) may use your personal data.

1.2              Our Contact Details

You can contact us:

• by post, using the postal address below: 90, Triq il-Hafur, Attard, ATD 3013

(c)      by email, on dataprotection@daystar.com.mt

2.                    ABOUT YOUR DATA

Data We Process

The personal data we collect/process in Your regard is the following:

DATA CATEGORY	TYPE OF DATA	WHAT IT’S USED FOR	OUR LEGAL BASIS
Tracking Data Data about Your use of the Website.	IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, website navigation paths, and information about the timing, frequency and pattern of Your use.	For functionality, for security purposes, to analyse the use of the Website and to personalise and optimize content available to You on the Website.	Legitimate interest
CommunicationsData Data provided to us when You complete a ‘Contact Us’ Form.	Name and surname, email address, IP address, and other information You may enter into the form.	To reply to Your queries about the products and services available through the Website.	Legitimate interest

 

Registration Data Data provided to us when you register an account with Us.	Name & surname, email address, IP address, postal address, phone number, username and password, products purchased.	To provide You with an account which will enable Youto make purchases on the Website, To provide You with products You have purchased.	Legitimate interest, contractual performance
Guest Purchase Data Data provided to us when you purchase products from the Website without registering an account with Us.	Name & surname, email address, IP address, postal address, phone number, username and password and products purchased.	To provide You with products You have purchased.	Contractual performance
Financial Data Payment details provided when you purchase products from the Website. Financial data is processed through our chosen payment gateway.	Information that payment has been effected.	To provide You with products You have purchased.	Contractual performance
Account History All Data relating to Your purchasing activity and patterns.	Purchase history, returns.	To process Your purchase transactions for products and services, and to ensure any transaction issues can be dealt with. For accounting and taxation purposes.	Contractual performance Legal obligation
Subscription Data Information that You provide to us for the purpose of subscribing to our newsletter.	Name and surname, email address, IP address	To send You information about our products, services, offers, discounts and news.	Consent NOTE that you have the right to withdraw Your consent, at any time by clicking on the ‘unsubscribe’ link found in any marketing communications. You may also send an email to dataprotection@daystar.com.mt.

 

Information relating to adverse effects

Name andcontact number / email address – only if we need to call you back (contact details as above are deleted once used to contact you forthe first time). Age, sex, adverse reactions on a no- name basis.

To call you back if we cannot immediately respond to your call. To report adverse effects to the manufacturer.

Legal obligation Legal obligation

2.2              Cookies & Other Tracking Mechanisms

A cookie is a small file of letters and numbers that are stored on your browser or the hard drive of your computer and contain information that is transferred to your computer’s hard drive. We use cookies on the Website to improve its functionality, and to allow Us to better the site. When You continue to browse the Website, You are agreeing to our use of cookies.

Please note that You can block cookies at any time by activating the setting on Your browser that allows You to refuse the setting of all or some cookies. Keep in mind, however, that blocking all cookies, or even some of them,will have a negative impact on the usability and possibly the rendering of many websites, including ours. If You blockcookies You will not be able to use all the features on the Website and might not be able to view it correctly or in the way it was originally intended to be displayed. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them visit: www.allaboutcookies.org.

We use cookies as follows:

NAME	FUNCTION	INFORMATION COLLECTED
Google Analytics	We use this cookie to be able to optimize our website designs, gain insight on popular features, identify usage trends, track the delivery of our promotional content and, more generally, to know our market better. Google Privacy Policy: https://policies.google.com/privacy?hl=en	Geographic location, Product Interest, Gender, Age, Browser, Operating System, Website usage,Website spend
Facebook Pixel	We use this cookie to be able to optimize our website designs, gain insight on popular features, identify usage trends, track the delivery of our promotional content and, more generally, to know our market better, retarget adverts to you, track sales. Facebook Privacy Policy: https://www.facebook.com/policy.php	Geographic location, Product Interest, Gender, Age, Browser, Operating System, Website usage,Website spend

 

Google TagManager	We use this cookie to be able to optimize our website designs, gain insight on popular features, identify usage trends, track the delivery of our promotional content and, more generally, to know our market better. Google Privacy Policy: https://policies.google.com/privacy?hl=en	Geographic location, Product          Interest,Gender, Age, Browser, Operating   System, Website            usage, Website spend
Google Ads	We use this cookie to be able to advertise to you, track our advertising, track return on ad spend, advertising effectiveness. Google Privacy Policy: https://policies.google.com/privacy?hl=en	Geographic location, Product          Interest,Gender, Age, Browser, Operating   System, Website            usage, Website spend
MailChimp	We use this cookie to be able to track newsletter effectiveness, gain insight on emailmailshot effectiveness, identify usage trends,track the delivery of our promotional content and, more generally, to know our marketbetter, send abandoned cart emails, send you emails customized to your preferred products. Mailchimp Privacy Policy: https://mailchimp.com/legal/privacy/	Geographic location, Product          Interest,Gender, Age, Browser, Operating   System, Website            usage, Website spend

2.3              Retention of Data

We retain Your personal data no longer than strictly necessary i) to realize the purpose for which your personal data was originally collected ii) as required by a specific law to which we may be subject and iii) to manage anylegal claims in relation to which such data may be required in evidence. Transactional records may be kept for up to 10 years from the performance of a contract for accounting and VAT record purposes. Should You need to know the complete list of the retention periods we adhere to with respect to the indicated categories of personal data,please contact us on dataprotection@daystar.com.mt.

2.4              Who has Access to Your Data

Medina Healthcare Limited is a Malta-domiciled organisation whose primary offices are in Malta. The Websitethehealthstore.com.mt is hosted in Malta. The majority of the service providers who are able to access the Websiteor any of the personal information collected from or relating thereto are located within the EEA, and where personal data may be shared, we have data processing agreements in place with these parties. These include customer relationship management, online review service provider, email service provider, web developers, affiliates,payment gateway, SEO agents, product suppliers, delivery and logistics, providers of professional advice (accounting and legal). Personal data that we hold is at all times on a strict ‘need to know’ basis.

If we need to send data outside the EEA, we will ensure that we have appropriate legal and security relationships with these parties and have taken steps to ensure that they are complying with the General Data Protection Regulation, including, as necessary, execution of contracts based on the European Union’s Standard Contractual Clauses for cross-border data transfers.

2.5              Automated Decision-Making

Other than ‘profiling’ activities carried out in order to display advertisements that will be relevant to You as explained in Paragraph 2.2 above, we do not engage in any automated decision-making.

2.6              Personal Data relating to Children

The Website should only be accessible by individuals over the age of 16. It is a parent’s or legal guardian’s responsibility to ensure that persons under 16 do not complete any registration forms or make any purchases on/through Our Website. If We have reason to believe that We hold Personal Data of a person under that age, We will delete it immediately.

3        ABOUT YOUR RIGHTS

At any point in time during Our processing of Your data, You have the following rights. All requests in this regard may be made by sending an email to dataprotection@daystar.com.mt. We will also forward Your request to the relevant 3rd Parties mentioned above as required.

• Right of access – You can request a copy of the information that We hold about
• Right of rectification – You can ask Us to correct data that We hold about You if it’s inaccurate or incomplete.
• Right to be forgotten – in some situations, You may ask Us to delete certain data We hold about You and We will always comply to the extent allowed or required by any applicable law.
• Right to restriction of processing – in some situations, You may ask Us to restrict the processing of Your data.
• Right of portability – You may ask Us to transfer certain data We hold about You to another
• Right to object – You have the right to object to certain types of processing such as direct
• Right to object to automated processing, including profiling – You also have the right to object to the legal effects of automated processing or profiling.
• Right to complain about how your Personal Data is being processed by Us (or third parties), or about how Your complaint has been handled, – You can lodge a complaint directly with the Office of the Information and Data Protection Commissioner (https://idpc.org.mt/) and with Us on dataprotection@daystar.com.mt.

RIGHT TO WITHDRAW – you have the right to withdraw Your consent, where given, at any time. This applies in particular to receiving marketing communications, where You are able to opt-out of receiving further notifications by clicking on the ‘unsubscribe’ link found in all such communications. You may also send an email to dataprotection@daystar.com.mt.

The version of this Privacy & Cookies Policy is currently Version 1.1 and was last updated on 16^th December 2021. It is valid andapplies to You until a new version uploaded on the Website and is accepted by You.