Privacy Policy

---

1. Introduction
This policy explains how EunoPharm Ltd processes personal data in line with UK GDPR.

2. Data Controller
EunoPharm Ltd, United Kingdom.
Contact: privacy@eunopharm.co.uk

3. What Data We Collect

• User names & emails
   
• Pharmacy details
   
• Compliance records
   
• Uploaded documents
   
• Audit logs
   
• Incident reports (may contain personal data)
   

4. Purpose & Legal Basis

• Provision of service (Contract)
   
• Security (Legitimate interest)
   
• Regulatory evidence storage (Legal obligation)
   

5. Data Sharing
We do not sell data.
We may share data with:

• Cloud hosting providers
   
• Email service providers
   
• Regulatory bodies only if legally required
   

6. Retention
Data is kept for the duration of your subscription + 24 months unless requested otherwise.

7. Security

• Encryption in transit & at rest
   
• Role-based access
   
• Secure UK data centres
   

8. Your Rights

• Access
   
• Correction
   
• Erasure
   
• Restriction
   
• Portability
   

9. Contact
privacy@eunopharm.co.uk