--- title: Privacy Policy | Women's Health Services | TribElle description: Discover how TribElle collects, uses, and protects your personal and health information while outlining your rights under UK GDPR. --- [Skip to content](https://pharmacy.tribelle.co.uk/privacy-policy#main-content) [![TribElle logo – women’s health pharmacy](https://pharmacy.tribelle.co.uk/hs-fs/hubfs/Logo-1.png?width=115&height=115&name=Logo-1.png)Homepage](https://tribelle.co.uk/) - [Treatments](https://tribelle.co.uk/treatments) - [How TribElle Works](https://pharmacy.tribelle.co.uk?hsLang=en-gb) - [About Us](https://pharmacy.tribelle.co.uk/about-us-tribelle-uk?hsLang=en-gb) - Education - [Women's Health Through the Decades](https://pharmacy.tribelle.co.uk/life-stages?hsLang=en-gb) - Blog - [Blog English](https://blog.tribelle.co.uk?hsLang=en-gb) - [Blog Punjabi](https://blog.tribelle.co.uk/pa?hsLang=en-gb) - [Blog Telugu](https://blog.tribelle.co.uk/te?hsLang=en-gb) - [Blog Hindi](https://blog.tribelle.co.uk/hi-in?hsLang=en-gb) - [Events](https://pharmacy.tribelle.co.uk/events?hsLang=en-gb) - [FAQs](https://pharmacy.tribelle.co.uk/frequently-asked-questions?hsLang=en-gb) [Sign in](https://tribelle.co.uk/profile) - [Treatments](https://tribelle.co.uk/treatments) - [How TribElle Works](https://pharmacy.tribelle.co.uk?hsLang=en-gb) - [About Us](https://pharmacy.tribelle.co.uk/about-us-tribelle-uk?hsLang=en-gb) - Education - [Women's Health Through the Decades](https://pharmacy.tribelle.co.uk/life-stages?hsLang=en-gb) - Blog - [Blog English](https://blog.tribelle.co.uk?hsLang=en-gb) - [Blog Punjabi](https://blog.tribelle.co.uk/pa?hsLang=en-gb) - [Blog Telugu](https://blog.tribelle.co.uk/te?hsLang=en-gb) - [Blog Hindi](https://blog.tribelle.co.uk/hi-in?hsLang=en-gb) - [Events](https://pharmacy.tribelle.co.uk/events?hsLang=en-gb) - [FAQs](https://pharmacy.tribelle.co.uk/frequently-asked-questions?hsLang=en-gb) [Sign in](https://tribelle.co.uk/profile) # Privacy Policy How we collect, use and protect your personal and health information, and the rights you have over it. Last updated: October 2026 Contents 1. [Who We Are and How to Contact Us](https://pharmacy.tribelle.co.uk/privacy-policy#who) 2. [What Information We Collect](https://pharmacy.tribelle.co.uk/privacy-policy#collect) 3. [How We Collect It](https://pharmacy.tribelle.co.uk/privacy-policy#how) 4. [Why We Use It and Our Legal Bases](https://pharmacy.tribelle.co.uk/privacy-policy#why) 5. [Who We Share It With](https://pharmacy.tribelle.co.uk/privacy-policy#share) 6. [International Transfers](https://pharmacy.tribelle.co.uk/privacy-policy#transfers) 7. [Cookies and Tracking](https://pharmacy.tribelle.co.uk/privacy-policy#cookies) 8. [How Long We Keep It](https://pharmacy.tribelle.co.uk/privacy-policy#retention) 9. [How We Keep It Safe](https://pharmacy.tribelle.co.uk/privacy-policy#security) 10. [Data Breaches](https://pharmacy.tribelle.co.uk/privacy-policy#breaches) 11. [Under 18s](https://pharmacy.tribelle.co.uk/privacy-policy#minors) 12. [Your Rights](https://pharmacy.tribelle.co.uk/privacy-policy#rights) 13. [Do Not Track Signals](https://pharmacy.tribelle.co.uk/privacy-policy#dnt) 14. [Changes to This Policy](https://pharmacy.tribelle.co.uk/privacy-policy#changes) TribElle is an online pharmacy built for women's health. To treat you safely we need to know things about your health, and we take the responsibility that comes with that seriously. This Privacy Policy is issued by TribElle LTD, trading as TribElle ("we", "us", "our"). It applies when you visit [tribelle.co.uk](https://tribelle.co.uk) or any site of ours that links to this policy, use our pharmacy and consultation services, or engage with us through sales, marketing or events. It explains what we collect, why, who we share it with, and the rights you have under UK GDPR and the Data Protection Act 2018. If you do not agree with how we handle data, please do not use our services. 1 ## Who We Are and How to Contact Us TribElle LTD, trading as TribElle, is a UK online pharmacy built for women's health. We are the data controller for the personal information described in this policy, which means we decide how and why it is used. **Data Protection Officer:** TribElle LTD, 26 Cherry Orchard Road, Bromley BR2 8NE, United Kingdom. Email: [contact@tribelle.co.uk](mailto:contact@tribelle.co.uk) Phone: +44 20 7362 4107 We are regulated by the General Pharmaceutical Council (GPhC) and the Medicines and Healthcare products Regulatory Agency (MHRA), and registered with the Information Commissioner's Office (ICO). Use the details above for any question about this policy, to exercise your rights, or to raise a concern. GPhC Registered: 9012688 MHRA Regulated ICO Registered: ZB877423 Company No. 16128081 2 ## What Information We Collect Personal information you give us - Full name, date of birth and gender - Email address and phone number - Billing and delivery address - Username, password and other account or authentication data - Anything you tell us when you contact customer support, by email, phone or our website chat assistant - Reviews, testimonials and feedback you choose to give us Some of this information is required. If you do not provide information we need to supply a medicine safely, or that we are legally required to collect, we will not be able to provide that service to you. Health information To supply medicines safely, our pharmacists and prescribers need to understand your health. This is special category data under UK GDPR and we only process it with your explicit consent or where another legal condition applies (see section 4). It may include: - Health conditions and medical history - Current medications and allergies - Your answers to online consultation questionnaires - Prescription information - Notes and assessments made by our pharmacists and prescribers - Information revealing racial or ethnic origin, where it is clinically relevant and you choose to provide it - Information from your NHS Summary Care Record, where you give us permission to access it Information about other people If you give us information about anyone other than yourself, you confirm that you have their permission to do so and that they have read this policy. Payment data If you make a purchase we collect the data needed to process your payment, such as your card number and security code. All payment data is handled and stored by Stripe, not by us. Stripe's privacy notice is at [stripe.com/gb/privacy](https://stripe.com/gb/privacy). Information collected automatically When you visit our website we automatically collect some technical information. On its own it does not identify you by name, but it helps us keep the site secure and understand how it is used: - **Log and usage data:** IP address, browser type and settings, pages viewed, date and time stamps, searches and other actions you take on the site, and error reports. - **Device data:** device type and model, operating system, device identifiers, internet service provider or mobile carrier, and language preferences. - **Approximate location:** the country or region inferred from your IP address. We do not collect precise GPS location. We also collect information through cookies and similar technologies. See section 7. **Keep your details accurate.** All personal information you give us must be true, complete and accurate, and you must tell us if it changes. For medicines this matters: an out-of-date medical history can make a treatment unsafe. 3 ## How We Collect It Directly from you - When you register an account - When you complete an online consultation or medical questionnaire - When you place an order - When you contact customer support - When you subscribe to our newsletter or marketing communications Automatically - Through cookies and similar tracking tools when you browse our website - When you interact with our website (page visits, clicks, device type) From third parties - Healthcare providers such as your GP or a prescriber, where you have asked us to work with them or it is necessary for your care - Your NHS Summary Care Record, where you give us permission to access it so our clinicians can check your medicines and allergies - Our payment processor, to confirm a transaction - Our identity verification provider, to confirm your age and identity 4 ## Why We Use It and Our Legal Bases UK GDPR requires us to have a lawful basis for each thing we do with your personal information. Because much of what we hold is health data, we also need a separate condition under Article 9 for processing special category data. The table below sets out both. | Purpose | Lawful basis | | --- | --- | | Conducting online consultations and clinical assessments | Performance of a contract; legal obligation (pharmacy regulation). Health data: provision of health care by or under the responsibility of a registered health professional (Art 9(2)(h)), and your explicit consent. | | Reviewing, issuing and dispensing prescriptions and checking medication safety | Legal obligation; performance of a contract. Health data: Art 9(2)(h) and explicit consent. | | Contacting your GP or accessing your NHS Summary Care Record to check your medicines and allergies | Legal obligation; performance of a contract. Health data: Art 9(2)(h) and explicit consent. | | Creating and managing your account | Performance of a contract | | Processing orders, payments and deliveries | Performance of a contract | | Verifying your identity and age | Legal obligation; performance of a contract | | Responding to enquiries, complaints and support requests | Legitimate interests; performance of a contract | | Sending service and administrative messages (order updates, changes to terms, safety information) | Performance of a contract; legal obligation | | Sending newsletters and marketing communications | Consent, which you can withdraw at any time | | Showing you relevant advertising on our site and elsewhere | Consent (via cookie preferences) | | Requesting feedback and measuring the effectiveness of our marketing | Legitimate interests | | Using your review or testimonial in our marketing | Consent | | Recording phone calls for training, quality and record-keeping | Legitimate interests; legal obligation (pharmacy record-keeping) | | Keeping our services secure, preventing fraud and diagnosing problems | Legitimate interests; legal obligation | | Analysing how our website is used so we can improve it | Legitimate interests; consent for analytics cookies | | Complying with UK healthcare, tax and other laws, and cooperating with regulators | Legal obligation | | Protecting someone's life or physical safety | Vital interests | Where we rely on legitimate interests, we have checked that those interests are not overridden by your rights and freedoms. Where we rely on consent, you can withdraw it at any time (see section 12); this does not affect processing that happened before you withdrew it. **We do not sell or rent your personal information to anyone.** Website chat assistant Our website has an AI-powered chat assistant that anyone can use to ask general questions about our services. It does not have access to your account, consultation answers or medical records, and it cannot give you clinical advice. Anything you type into it is stored so we can improve the assistant and respond to you if needed, so please do not enter health details or other sensitive information into it. For anything about your own treatment, contact our team directly. Phone calls Calls to and from our team are recorded for staff training, quality control and to keep an accurate record of advice given. Recordings are kept in line with section 8. Reviews and testimonials We may display reviews you post publicly on Trustpilot on our website and in our marketing. For any other testimonial, patient story or photograph, we will only use it with your written agreement, which sets out where it will appear and for how long. You can withdraw that agreement at any time by contacting us, and we will stop using it in new material. 5 ## Who We Share It With We only share your data with the people and providers needed to deliver your care, run our service and meet our legal duties. | Recipient | Why | | --- | --- | | Our pharmacists and prescribers | To assess your consultation and issue a valid prescription | | Your GP or other healthcare providers | Where you ask us to, or where it is necessary for your safe care | | NHS England (Summary Care Record) | To access your medicines and allergy record with your permission | | Stripe (payment processor) | To process your payment securely | | AgeChecked (identity verification) | To confirm your age and identity before supplying medicines | | Delivery couriers | To deliver your order | | Regulators: GPhC, MHRA, NHS bodies, ICO | Where required to comply with UK pharmacy and data protection law | | IT, hosting, cloud storage and security providers | To run and protect our website and systems | | Analytics providers | To understand how our website is used | | Marketing and CRM platforms | To send you communications you have opted into and manage our relationship with you | | Advertising platforms (for example Meta, Google and Microsoft) | With your consent, we share information about how you use our website, such as pages visited, products viewed and purchase events, so that we can measure our advertising and show you relevant ads. Because our website is about women's health, this can indicate an interest in a treatment area. We never share your consultation answers, prescriptions, clinical notes or any other medical record with advertising platforms. | Every provider we work with handles your data under a contract that requires them to keep it secure and use it only for the purpose we have agreed, in line with UK GDPR. We may also share your information: - **In a business transfer.** If we are involved in a merger, sale of assets, financing or acquisition of all or part of our business, your information may be transferred as part of that transaction. - **With business partners.** To offer you specific products, services or promotions, where you have agreed to this. - **Where the law requires it.** To comply with a legal obligation, court order or lawful request from a regulator or law enforcement body, or to establish, exercise or defend legal claims. 6 ## International Transfers We store your personal information within the United Kingdom or the European Economic Area. Some of the providers we work with, including our payment processor, CRM, analytics and advertising platforms, are based in or process data in the United States or other countries outside the UK. Where personal information is transferred to a country that the UK Government has found to offer adequate protection, including countries in the European Economic Area, we rely on that adequacy decision. For transfers to other countries, including the United States, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or the provider's certification under the UK Extension to the EU-US Data Privacy Framework (the UK-US Data Bridge). You can ask us for more information about the safeguards that apply to a specific transfer. **Your medical records** are stored within the UK or the EEA and are not shared with providers outside those regions. 7 ## Cookies and Tracking Cookies are small files placed on your device. Some are essential; others we only set with your consent. - **Essential cookies:** required for the website to function, keep your account secure and remember your basket. - **Functional cookies:** remember your preferences. - **Analytics cookies:** help us measure site performance (for example, Google Analytics). - **Marketing cookies:** used by us and third-party advertising partners to show you relevant advertising on our site and elsewhere, and to send reminders such as an abandoned basket email where you have opted in. Set only with your consent. You can change your cookie choices at any time through our cookie banner or your browser settings. Blocking some cookies may affect how parts of the site work. To opt out of Google Analytics across all websites, visit [tools.google.com/dlpage/gaoptout](https://tools.google.com/dlpage/gaoptout). Full details are in our [Cookie Notice](https://pharmacy.tribelle.co.uk/cookie-policy?hsLang=en-gb). 8 ## How Long We Keep It We keep your personal information only for as long as necessary for the purposes set out in this policy, unless a longer period is required or permitted by law, including pharmacy regulation, tax and accounting rules. | Type of data | Retention period | | --- | --- | | Medical records (consultations, prescriptions, clinical notes, call recordings relating to your care) | 10 years from your last interaction with us | | Payment and order records | 10 years | | Customer service records (emails, chat transcripts, call recordings) | 10 years | | Marketing data | Until you unsubscribe or withdraw consent | These periods reflect UK pharmacy record-keeping requirements and the time limits for clinical and legal claims. When we no longer need your information we delete or anonymise it. If that is not immediately possible (for example, because it is held in a backup archive), we store it securely and isolate it from any further processing until it can be deleted. 9 ## How We Keep It Safe - Encrypted storage for medical and consultation records - Access controls so only authorised staff and clinicians can see sensitive data, and only when they need to - SSL/TLS encryption for all traffic to and from our website - Regular security reviews and audits - Contractual security obligations on every provider that handles your data No method of transmission over the internet or of electronic storage is completely secure, so we cannot guarantee that unauthorised third parties will never defeat our security. We work hard to protect your information and ask that you also access our services from a secure device and connection, and keep your login details private. 10 ## Data Breaches If a personal data breach occurs we will take immediate steps to contain it and secure your data. Where the breach is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to you, we will tell you directly without undue delay, explaining what happened and what you can do. 11 ## Under 18s Our services are for adults. We do not knowingly collect, solicit data from, or market to anyone under 18, and we verify age before supplying medicines. By using our services you confirm you are at least 18. If we learn that we have collected personal information from someone under 18, we will deactivate the account and delete the data promptly. If you believe this has happened, contact us at [contact@tribelle.co.uk](mailto:contact@tribelle.co.uk). 12 ## Your Rights You have strong rights over your data under UK GDPR, and exercising them is free: - **Access:** ask for a copy of the personal information we hold about you. - **Rectification:** ask us to correct inaccurate or incomplete information. - **Erasure:** ask us to delete your information. We may need to keep some records, such as prescription records, where the law requires it. - **Restriction:** ask us to limit how we use your information in certain circumstances. - **Portability:** receive your information in a structured, machine-readable format, or ask us to send it to another provider. - **Objection:** object to processing based on legitimate interests, and to direct marketing at any time. - **Withdraw consent:** where we rely on consent, withdraw it at any time. - **Automated decisions:** not be subject to a decision based solely on automated processing that has a legal or similarly significant effect on you. Every consultation at TribElle is reviewed by a registered pharmacist or prescriber. To exercise any of these rights, email [contact@tribelle.co.uk](mailto:contact@tribelle.co.uk) or use the contact details in section 1. We may need to verify your identity before acting on a request. We will respond within one month, or tell you if we need longer for a complex request. If a request is clearly unfounded, repetitive or excessive, we may charge a reasonable fee or decline to act on it, and we will explain why. Marketing You can unsubscribe from marketing emails at any time using the link in any email, by replying with "STOP" or "UNSUBSCRIBE", or by contacting us. We will still send you service messages that are necessary to run your account and fulfil your orders, such as order confirmations, consultation outcomes and medication safety information. Your account You can review or update the information in your account by logging in or contacting us. If you ask us to close your account we will deactivate or delete it from our active databases. We may retain some information to prevent fraud, resolve problems, assist with investigations, enforce our terms or comply with legal requirements, including pharmacy record-keeping rules. Complaints If you are unhappy with how we have handled your data, please contact us first with the subject line "Data Protection Complaint" so we can try to put it right. We will investigate and reply within 30 days. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office, at [ico.org.uk/make-a-complaint](https://ico.org.uk/make-a-complaint/) or on 0303 123 1113. If you are in the European Economic Area, you may complain to your local data protection authority. 13 ## Do Not Track Signals Some browsers include a Do Not Track ("DNT") setting. There is currently no agreed standard for how websites should respond to DNT signals, so we do not respond to them. If a standard is adopted that we must follow, we will update this policy. You can control tracking on our site through our cookie preferences. 14 ## Changes to This Policy We may update this policy to reflect changes in the law, our services or our practices. The "Last updated" date at the top shows when it was last revised. If we make material changes, we will post a prominent notice on our website or contact you directly. Continued use of our services after a change means you accept the revised policy. ### Questions about your data? Email contact@tribelle.co.uk or call +44 20 7362 4107. We respond to data requests within one month. [Contact Us](mailto:contact@tribelle.co.uk) Information - [How TribElle works](https://pages.tribelle.co.uk/?hsLang=en-gb) - [FAQs](https://pharmacy.tribelle.co.uk/frequently-asked-questions?hsLang=en-gb) - [NHS](https://nhspharmacy.tribelle.co.uk/home?hsLang=en-gb) - [Blog](https://blog.tribelle.co.uk/?hsLang=en-gb) - [Events](https://pages.tribelle.co.uk/events?hsLang=en-gb) - [About Us](https://pharmacy.tribelle.co.uk/about-us-tribelle-uk?hsLang=en-gb) - [Terms & Conditions](https://pages.tribelle.co.uk/terms-and-conditions?hsLang=en-gb) - [Privacy & Policy](https://tribelle.co.uk/privacy-policy) Treatments - [Weight Loss](https://tribelle.co.uk/treatments/injectable-weight-loss) - [Menopause Management](https://tribelle.co.uk/treatments/hrt) - [Migraine Relief](https://pharmacy.tribelle.co.uk/migraines?hsLang=en-gb) - [See all treatments](https://tribelle.co.uk/treatments) Need some help? - [Contact us](https://tribelle.co.uk/contact-us) - Want to speak to a human being: [0207 362 4107](tel:+442073624107) ![tribelle-mark-transparent](https://pharmacy.tribelle.co.uk/hs-fs/hubfs/Website%20images/TribElle%20Favicon.png?width=262&height=368&name=TribElle%20Favicon.png) - General Pharmaceutical Council Registered (9012688) - Superintendent pharmacist – J Boora (2047130) - Company Number – 16128081 - DUNS Number – 232728742 [![LegitScript Certified](https://pharmacy.tribelle.co.uk/hubfs/Website%20images/Legitscript.png)](https://www.legitscript.com/websites/?checker_keywords=tribelle.co.uk) ![Endometriosis Friendly Employer](https://pharmacy.tribelle.co.uk/hubfs/Website%20images/Endo.jpg) Privacy Policy · Legal · © 2026. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "WebPage", "description" : "How TribElle collects, uses, shares and protects your personal and health information, and the rights you have under UK GDPR.", "hasPart" : { "@id" : "https://pharmacy.tribelle.co.uk/privacy-policy#policy" }, "inLanguage" : "en-GB", "name" : "Privacy Policy | Women's Health Services | TribElle", "url" : "https://pharmacy.tribelle.co.uk/privacy-policy" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://pharmacy.tribelle.co.uk/privacy-policy#policy", "@type" : "DigitalDocument", "about" : "Personal data and health data processing by TribElle LTD, a GPhC-registered UK online pharmacy for women's health", "dateModified" : "2026-10-06", "inLanguage" : "en-GB", "name" : "TribElle Privacy Policy", "publisher" : { "@type" : "Organization", "email" : "contact@tribelle.co.uk", "name" : "TribElle Ltd", "telephone" : "+44 20 7362 4107", "url" : "https://tribelle.co.uk" }, "url" : "https://pharmacy.tribelle.co.uk/privacy-policy" } ```