Privacy Policy

Privacy Policy

We are committed to protecting your privacy and ensuring the security of your personal information. Through our website and services, we provide access to medical advice, clinical support, and treatment options to help you make informed decisions about your health.

Please read this Privacy Notice carefully as it contains important information about who we are, how and why we collect, store, use, and share personal information, your rights in relation to your personal information, and how to contact us.

Who We Are

This Privacy Notice applies to And Other Ways LLC, operating under the brand name “& Other Ways”.

  • Registered Name: And Other Ways LLC
  • Registration Number: 2540999
  • Registered Address: Shams Free Zone, Media City, UAE
  • ICO Registration: ZC048554
  • Data Protection Contact: DPO@andotherways.com

Our pharmacy services are provided through our GPhC-registered pharmacy partner: [Pharmacy Partner Name – TBC] (GPhC Registration: [TBC]).

What This Notice Covers

This Notice covers any personal information we collect:

  • When you use our website or complete our online consultation
  • When you register an account with us
  • When you purchase our products or services
  • When you interact with our social media channels
  • When you provide feedback or participate in surveys
  • When you are referred to us by a partner barbershop
  • When you contact our support team

Our services are not intended for individuals under the age of 18, and we do not knowingly collect data from children.

Personal Information We Collect

Data TypeDescription
Identity DataFirst name, last name, date of birth, username, password
Contact DataEmail address, delivery address, telephone number
Financial DataPayment card details (processed securely by Stripe)
Transaction DataDetails of products purchased, order history, subscription status
Health DataMedical history, consultation responses, treatment preferences
Technical DataIP address, browser type, device information, location data
Usage DataHow you use our website, pages visited, features used
Referral DataWhich barbershop referred you, barber name (if provided)
Marketing DataYour preferences for receiving marketing communications

How We Use Your Personal Information

PurposeData UsedLegal Basis
Assess treatment suitabilityIdentity, Contact, Health DataNecessary for healthcare purposes under health professional responsibility
Process prescriptionsIdentity, Contact, Health, Transaction DataContract performance; Healthcare purposes
Clinical consultationsIdentity, Contact, Health DataContract performance
Maintain medical recordsAll relevant health informationLegal obligation (GPhC requirements)

How We Collect Your Information

We collect information from:

  • Directly from you — when you complete our online consultation, create an account, make a purchase, or contact us
  • Automatically — when you visit our website, we collect Technical and Usage Data through cookies and similar technologies
  • From partner barbershops — referral information when you’re referred to us
  • From our pharmacy partner — prescription and dispensing information

Who We Share Information With

Pharmacy Partner

Our GPhC-registered pharmacy partner who dispenses your medication. They are bound by strict confidentiality and data protection obligations.

Payment Processor (Stripe)

We use Stripe to process payments securely. Stripe handles your payment card details and does not share them with us.

Delivery Partners

Courier services that deliver your treatments. We share only the information necessary for delivery (name and address).

Partner Barbershops

If you were referred by a barbershop, we may share limited information (that a purchase was made) to calculate their referral commission. We do not share your health data.

Email Service Provider (Mailchimp)

We use Mailchimp to send marketing emails. They process your contact data and marketing preferences on our behalf.

Analytics Providers (Google Analytics)

We use analytics tools to understand how our website is used and to improve our services. These collect technical and usage data only.

Professional Advisers

Lawyers, auditors, and accountants where necessary.

Legal Compliance

We may disclose information where required by law or to protect our legal rights.

All service providers are contractually bound to keep your information confidential and use it only for the services they provide to us.

International Data Transfers

As a UAE-registered company serving UK customers, your personal information may be transferred outside the United Kingdom.

Transfers may occur to:

  • United Arab Emirates — where our company is registered
  • United States — where some of our service providers are based (Stripe, Mailchimp, Google)

Whenever we transfer your personal information outside the UK, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the UK Information Commissioner
  • Adequacy decisions where applicable
  • Contractual commitments to data protection standards

For more information about the specific safeguards we use, please contact us at DPO@anotherways.com.

Data Security

We have implemented appropriate technical and organisational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Secure payment processing through Stripe (PCI-DSS compliant)
  • Access controls limiting who can view your information
  • Regular security assessments
  • Staff training on data protection

Whilst we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. We will notify you promptly if any breach occurs that may affect you.

How Long We Keep Information

Data TypeRetention Period
Medical records & health data10 years from last treatment (GPhC requirement)
Transaction records7 years (tax and accounting requirements)
Account informationDuration of account plus 3 years
Marketing data (non-customers)2 years from last engagement
Referral dataDuration of subscription plus 2 years
Technical/usage data26 months

We may retain your data for longer if required by law or to defend legal claims.

Your Rights

Under UK data protection law, you have the right to:

Access Your Data

Request a copy of the personal information we hold about you.

Correct Your Data

Request correction of inaccurate or incomplete information.

Delete Your Data

Request deletion of your personal data in certain circumstances.

Data Portability

Receive your data in a structured, commonly used format.

Restrict Processing

Request limitation on how we use your data in certain situations.

Object to Processing

Object to processing based on legitimate interests or marketing purposes.

Please note: Some rights may be limited in certain circumstances. For example, we cannot delete your medical records while you are an active patient, as we have a legal obligation to maintain them.
Note: Due to medical record-keeping requirements, we may not always be able to delete health-related information upon request.

To exercise any of these rights, please contact us at DPO@anotherways.com. We will respond within one month.

Marketing Communications

We will only send you marketing communications if you have opted in to receive them. You can withdraw your consent at any time by:

  • Clicking the “unsubscribe” link in any marketing email
  • Updating your preferences in your account settings
  • Contacting us at DPO@andotherways.com

Please note: Even if you opt out of marketing, we will still send you essential service communications (order confirmations, prescription information, account updates) as these are necessary for our service.

Cookies

We use cookies and similar technologies to improve your experience on our website. You can manage your cookie preferences through your browser settings.

For more information, please see our Cookie Policy [link to be added].

Third-Party Links

Our website may contain links to third-party websites, plugins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

Contact Us

For any questions about this Privacy Notice or to exercise your rights:

Data Protection Contact:

Company Address:

And Other Ways LLC

Shams Free Zone

Media City, UAE

Complaints

We hope to resolve any concerns you raise about our use of your personal information.

You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office (ICO)

Website: www.ico.org.uk

Helpline: 0303 123 1113

Changes to This Notice

We may update this Privacy Notice from time to time. We will notify you of significant changes by email or through our website.

Please check back periodically to stay informed about how we protect your information.

Regulatory Information

Our pharmacy services are provided in partnership with a GPhC-registered pharmacy, ensuring compliance with UK pharmacy regulations and professional standards.

This Privacy Policy was last reviewed in November 2025.