Privacy policy

1. Who controls your data

VIP Pharmacy is the personal-information controller for the data you provide on this storefront. The storefront software is operated on VIP Pharmacy's behalf by Pharmacy OS (the platform processor). VIP Pharmacy holds its own PH FDA License To Operate (CDRR-RVI-DS-94779).

2. What we collect and why

• Account details (name, email, phone) — to create and secure your account.
• Delivery addresses — to fulfil and deliver your orders.
• Order history (products, quantities, amounts, fulfilment method) — to process orders, returns, and your reorder convenience.
• Senior Citizen / PWD ID details, if you provide them — to apply the legally mandated 20% discount and VAT exemption (RA 9994 / RA 7277).
• Uploaded prescriptions and the health information they contain — sensitive personal information, processed only so a licensed pharmacist can verify and dispense them (RA 6675 / RA 9165).
• Technical data (IP address, device/browser) — for security, fraud prevention, and to record your privacy choices.

3. Lawful basis

We process your account, address, and order data on the basis of your consent and to perform the contract of sale. We process prescription/health data only with your explicit consent at upload time and as required by pharmacy law. Marketing messages (offers, refill reminders) are sent only if you opt in — you can withdraw any time.

4. Who we share it with

Only as needed to serve you: the pharmacist who verifies your prescription; the courier (in-house or a third-party rider) for delivery; the payment processor for paid orders (we never store card numbers); and government agencies where pharmacy or tax law requires. We never sell your data. SMS is sent via a Philippine provider (Semaphore) — never via cross-border messaging platforms.

5. How long we keep it

Account and address data: for as long as your account is active, then anonymised. Order, prescription, and dispensing records: retained for the periods PH FDA, RA 9165, and BIR require — these survive account erasure (anonymised where the law allows). The consent ledger and audit log: retained for the regulatory period.

6. Your rights

You may, at any time, from Account → Privacy:

• Access — download a copy of the data we hold about you.
• Rectify — correct your profile and addresses.
• Withdraw consent — turn off marketing messages, or withdraw the data-processing consent (which closes normal use of the storefront).
• Erasure — delete your account. We anonymise your identity; records the law requires us to keep are retained without your identifying details.
• Complain — to VIP Pharmacy's Data Protection Officer (yourpartner@viosintegrated.net), or to the National Privacy Commission.

7. How to delete your data

8. Contact

Data Protection Officer: yourpartner@viosintegrated.net. National Privacy Commission: privacy.gov.ph.