Privacy policy
McCabes Pharmacy Privacy Policy
This Privacy Policy explains when and why we might use the personal information you give us or that we collect from you. McCabes Pharmacy are committed to protecting your privacy. We use your personal information to make your experiences within our stores and our website easier, and we will never sell your personal information to a third party or use it for any other purpose other than what you have consented to. We will be clear and open with you about why we collect your personal information and how we use it. You are ultimately in control of your personal information.
Who We Are
McCabes Pharmacy is the trading name of McCabes Pharmacy Limited, company number 342371. Our registered office is at United Drug House, Magna Drive, Magna Business Park, Citywest, Dublin 24, Ireland.
Who This Policy Applies To
Our privacy policy follows the Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR), meaning we only use your personal information when we have a clear and lawful reason to do so.
This privacy policy describes how we, as a data controller, collect and process personal information about:
- visitors to our websites
- visitors to in store pharmacies
- job applicants through our website
- subscribers to or users of our online services
- users of our services
- individuals who are employed or engaged by our vendors
- individuals captured on CCTV on our premises
- followers on social media
- individuals who contact our customer service
What Personal Information We Collect
|
Attending our pharmacies in store |
- Name - PPSN - Home Address - Date of birth - Health Information & Prescription Information - Medical card details - Billing information - Credit card details - Email address - Telephone number - CCTV images
And other information that is relevant to the provision of our services.
|
|
Visiting our website |
- Name - Home Address/Shipping Address - Date of birth - Telephone Number - Email Address - Health Information - Devices’ information - Browsing behaviour - Order history and preferences - Cookies and tracking data (for website functionality and analytics) - Job application
|
|
Individuals who are employed or engaged by our vendors
|
During business interactions we may collect: - Names - contact details
|
|
Social media |
Followers on social media that leave comments or reactions to our posts
|
|
Individuals who contact our customer service
|
We may collect personal information from anyone who contacts our customer service team.
|
|
Personal Information not provided directly by you
|
|
|
Personal information when we acquire a new pharmacy |
If you’re a customer of a pharmacy business that has been acquired, we will receive your personal information as part of the acquisition. Where this happens, we place a notice in-store, or we may contact you in writing to tell you that your personal information is being transferred. If you don’t wish for your personal information to be transferred, you should email datapro@mccabespharmacies.ie |
Why We Collect Personal Information
|
Personal Information we process because we have a contractual obligation with you
|
When you create an account on our website, buy a product or service from us, or otherwise agree to our terms and conditions, a contract is formed between you and us. In order to carry out our obligations under that contract we must process the information you give us. Some of this information may be personal information. We may use your personal information in order to: - verify your identity for security purposes - sell products to you - provide you with our services - provide you with suggestions and advice on products, services and how to obtain the most from using our website. We shall continue to process your personal information until the contract between us ends.
|
|
Personal Information we process with your consent
|
When you browse our website or ask us to provide you with more information about our business, including job opportunities and our products and services, you provide your consent to us to process information that may be personal information.
Wherever possible, we aim to obtain your explicit consent to process your personal information, for example, by asking you to agree to our use of cookies.
Sometimes you might give your consent implicitly, such as when you send us a message by e-mail to which you would reasonably expect us to reply.
We do not use your personal information in any way that would identify you personally, without your consent. If you have given us permission to do so, we may from time to time pass your name and contact information to selected associates whom we consider may provide services or products you would find useful.
We continue to process your personal information on this basis until you withdraw your consent, or it can be reasonably assumed that your consent no longer exists.
You may withdraw your consent at any time by instructing us at Datapro@mccabespharmacy.ie However, please note that any processing which takes place before you withdraw your consent will remain valid. If you withdraw your consent, you may not be able to use our website or our services further.
|
|
Information we process for the purposes of legitimate interests
|
We may process information on the basis there is a legitimate interest of doing so.
Where we process your information on this basis, we do so after having given careful consideration to: - whether the same objective could be achieved through other means - whether processing (or not processing) might cause you harm - whether you would expect us to process your personal information, and whether you would, in the round, consider it reasonable to do so
Our legitimate interests don’t automatically override your interests. We won’t use your personal information for activities where our interests are overridden by the impact on you, unless we have your consent or are otherwise required or permitted to by law.
|
|
Personal information we process because we have a legal or regulatory obligation
|
Sometimes, we must process your personal information to comply with a statutory obligation.
We are regulated by the Pharmaceutical Society of Ireland (PSI), who set out standards and Codes of Practice with which we need to comply. The PSI may set out requirements which we need to comply with when processing personal information. This includes timescales for keeping personal information, reporting requirements and professional Codes of Practice.
Where we provide HSE services in our pharmacies, for example medical card or vaccination services, we must comply with HSE Information Governance requirements.
We may also be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order. This may include your personal information.
|
Legal Basis for Processing Your Personal Information
|
Purpose(s) for Processing your Personal information
|
Legal Bases |
|
Communicating with you in the course of our business |
(a) To fulfil our obligations to you under our contract with you or (b) to support our legitimate interests in operating, managing and improving our business and services and providing services provided such interests are not overridden by your rights and interests.
|
|
Providing our services to you and managing and improving our business and services
|
As above. |
|
Maintaining and operating our websites |
(a) To support our legitimate interests in operating, managing and improving our business and services and providing services provided such interests are not overridden by your rights and interests. (b) consent which may be withdrawn using cookie preferences.
|
|
Marketing about our companies and services and events |
(a) To support our legitimate interests in organising promotions, events, managing our business and providing and improving services, provided such interests are not overridden by your rights and interests. (b) consent which you may withdraw at anytime.
|
|
Processing of job applications |
(a) To perform or enter into a contract with you (b) to support our legitimate interests in managing our business and providing services to you, provided such interests are not overridden by your rights and interests.
|
|
Managing the goods and services we receive (including contract management, managing security and access to our systems and premises, payment of invoices and assessment of our suppliers or parties who tender to provide goods or services to us) |
(a) To fulfil our obligations to you under our contract with you or (b) to support our legitimate interests in (i) performing a contract with our supplier who you work for or represent (ii) ensuring the protection of our systems and premises and (iii) assessing our suppliers or tenderers, provided such interests are not overridden by your rights and interests.
|
|
For the prevention and detection of fraud, money laundering and other crimes |
To comply with our legal obligations particularly anti bribery or antiterrorism legislation. |
|
Transferring information to third parties, including to our own service providers |
(a) To support our legitimate interests in managing and improving our business and services and providing services to our clients provided such interests are not overridden by your rights and interests; or (b) to comply with our legal obligations.
|
|
To use data analytics to improve our website, services, marketing, customer relationships and experiences. |
Necessary for our legitimate interests (to define types of customers for our services, to keep our website updated and relevant, to develop our business, and to inform our marketing strategy).
|
Who We Share Your Personal Information With
Based on the legal basis set out in the table above we may disclose your personal information to:
- our outsourced service providers or suppliers to facilitate the provision of our services to you. Below is a non-exhaustive list of third-party service providers we currently use, along with the purpose of sharing your personal information with them.
- public authorities where we are required by law to do so
- if required, in order for us to receive legal advice
- any other third party where you have provided your consent.
|
List of Third Parties We Work With
Clicking each link will take you to their respective privacy policy. |
|
|
Third-Party |
Reason |
|
To handle and process payments when you buy something from us, including credit/debit card transactions and digital wallets
|
|
|
To send personalised marketing emails and newsletters |
|
|
|
To better understand how visitors use our website and to make our advertising more relevant |
|
To help us show you ads for our products on platforms like Facebook, Instagram, TikTok, and Google when you're browsing online. |
|
|
Processing Operations |
|
|
|
To maintain our systems and securely store your personal information |
|
To arrange and complete the delivery of your purchases to you |
|
|
To manage job applications and recruitment processes. |
|
|
https://www.lamapoll.de/Support/Datenschutz/ |
To conduct surveys |
|
https://deepsight.de/en/privacy-policy/ |
To analyse open answers given in surveys |
|
https://quividi.com/privacy/ |
To provide audience measurement and shopper engagement |
Note: This list may be updated from time to time as our service provider’s change.
Transfers of Your Personal Information Outside the EEA (Abroad)
In certain instances, we may transfer your personal information outside of the EEA. We will ensure that appropriate measures are in place to protect your personal information and to comply with our obligations under the data protection law. This may mean that we enter into contracts in the form approved by the European Commission, and that we implement appropriate technical and organisational measures in respect of such transfers. If you would like to receive further details about these safeguarding measures, please contact us at datapro@mccabespharmacy.ie
Personal Information Retention
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for your personal information, we consider the amount, nature, and sensitivity of your personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. Details of retention periods for different aspects of your personal information are available by contacting us datapro@mccabespharmacy.ie
Links to Other Sites
Our websites may contain third party links to and from other websites, plugins and applications. If you click on those links or enable a connection, you may allow those third parties to collect or share your personal information. We are not responsible for the operation of those websites or their privacy policies. They are subject to their own privacy policies. Please check their privacy policies before you submit any personal information to those websites.
Your Rights as a Data Subject
To the extent that we are the data controller of your personal information you have rights under data protection laws. You have the right to:
- - request access to your personal information (commonly known as a “data subject access request”)
- - request correction of the personal information that we hold about you
- -request erasure of your personal information. We may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request
- -object to processing of your personal information where we are relying on a legitimate interest (or those of a third party). You also have the right to object where we are processing your personal information for direct marketing purposes
- - request the transfer of your personal information to you or to a third party.
- - where you have previously provided your consent, you have the right to withdraw your consent to our processing of your personal information at any time. For example, you can withdraw your consent to email marketing by using the unsubscribe link in such communications or contacting us Datapro@mccabespharmacy.ie
- lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:
Data Protection Commission (DPC)
Dublin Office
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Phone: (01) 765 0100
LoCall: 1890 252 231
Website: www.dataprotection.ie
Email: info@dataprotection.ie
If you wish to exercise any of the rights set out above, please contact us (see details below). We will respond to your request within one month. That period may be extended by two further months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt of your request. We may need to request specific information from you to help us confirm your identity and ensure your right to access the personal information requested (or to exercise any of your other rights).
Contact Us
We are the data controller for the personal information we process, unless otherwise stated. Fiona Joyce is our Data Protection Officer. If you have any queries in relation to this privacy policy, you can contact either using the contact details below.
Data Controller
McCabes Pharmacy Limited
United Drug House, Magna Drive, Magna Business Park, Citywest RoadD24 XKE5, Dublin, Ireland.
Telephone: +353 1 215 8800
Email: Datapro@mccabespharmacy.ie
Data Protection Officer
Fiona Joyce
United Drug House, Magna Drive, Magna Business Park, Citywest Road, D24 XKE5, Dublin, Ireland.
Telephone: +353 1 215 8800
Email: Datapro@mccabespharmacy.ie
CHANGES TO THIS PRIVACY POLICY
We reserve the right to amend this privacy policy at any time. Any changes will be announced by the publication of the revised privacy policy on our websites, and we will update the “Last updated” at the bottom of this privacy policy. Unless specified to the contrary, any amendments take effect immediately.
Please review this privacy policy regularly for updates.
Last updated in August 2025
