Privacy policy

Last updated: 18 October 2026

This privacy policy explains how we collect and use your personal information when you visit www.brightcarepharmacy.com, buy from us or contact us. It covers our customers in the United States and the United Kingdom. For customers in the United Kingdom it follows the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). For customers in the United States it follows the state privacy laws that apply to them, including the California Consumer Privacy Act as amended by the CPRA. Section 7 sets out the rights that apply to you, wherever you live.

1. Who we are

The controller responsible for your personal information is Advanced Health Knowledge LLC, trading as BrightCare Pharmacy:

Advanced Health Knowledge LLC
Trading as BrightCare Pharmacy
Registered office and US returns address: 530B Harkle Rd Ste 100, Santa Fe, New Mexico 87505-4739, United States
UK warehouse and returns address: 44 Rosenthorpe Road, London, England, SE15 3EG, United Kingdom
Email: info@brightcarepharmacy.com
Phone: +1 575 999 9918
Free call-back: email us your phone number and a good time to call, and we will call you back at no cost to you.
Website: www.brightcarepharmacy.com

Contacting us from the UK

Advanced Health Knowledge LLC is a company registered in the United States. If you are in the UK, you can send any question or request about your personal information directly to us at info@brightcarepharmacy.com, with "Privacy request" in the subject line, or by post to our UK address: 44 Rosenthorpe Road, London, England, SE15 3EG, United Kingdom.

2. The information we collect

  • Contact and delivery details: your name, email address, phone number, and billing and delivery addresses.
  • Order details: the products you buy, cancel or return, prices, discounts and delivery information.
  • Payment information: the payment method, transaction details and payment confirmation. Your full card number is handled by our payment providers. We do not see or store it.
  • Account details: if you create a customer account, your login details and saved preferences.
  • Your messages: what you tell us when you email or call us.
  • Device and usage information: your IP address, browser and device type, the pages you view and how you use our website. Some of this is collected using cookies (see section 9).
  • Marketing preferences: whether you have agreed to receive marketing from us.

Health information

We do not ask for information about your health, and we do not use your orders to draw conclusions about your health. Please do not send us health information unless it is needed to deal with your message.

If you do send it, for example when telling us about a problem with a product, we use it only to deal with that matter. Where needed, we will ask you to confirm your explicit consent, or rely on the need to establish, exercise or defend legal claims.

Where the information comes from

Most of it comes directly from you. Some is collected automatically by our website and cookies. Some comes from our service providers, for example payment confirmation from our payment provider and delivery updates from the delivery service.

3. How we use your information and our lawful bases

  • To process, deliver and support your order, including payment, delivery, cancellations, returns and refunds. Lawful basis: contract.
  • To run your customer account, if you create one. Lawful basis: contract.
  • To send service messages, such as order acknowledgement and dispatch emails. Lawful basis: contract.
  • To answer your questions and complaints. Lawful basis: contract where your message is about an order; otherwise our legitimate interest in providing good customer service.
  • To prevent fraud and keep our website and payments secure. Lawful basis: our legitimate interest in protecting our customers and our business, and legal obligation where the law requires it.
  • To keep tax and accounting records and meet other legal obligations. Lawful basis: legal obligation.
  • To send you marketing emails or text messages about our products and offers. Lawful basis: your consent, which you can withdraw at any time.
  • To measure how our website is used and show you relevant advertising, using analytics and marketing cookies. Lawful basis: our legitimate interests in understanding how our website is used and in advertising our products. You can block or delete these cookies at any time (see section 9).
  • To improve our website, products and service, using information that does not depend on optional cookies, such as order totals and customer feedback. Lawful basis: our legitimate interest in running and improving our business.
  • To establish, exercise or defend legal claims. Lawful basis: our legitimate interest in protecting our legal position.

Where we rely on legitimate interests, we have weighed them against your interests and rights. You can ask us for details, and you have the right to object (see section 7).

If you do not give us the information we need to process your order, such as a delivery address, we will not be able to complete it.

Our payment providers use automated checks to help prevent fraud when you pay. If you think a payment was declined or an order cancelled in error, contact us and a person will review it.

4. Who we share it with

We do not sell your personal information. We share it only where needed, with:

  • Shopify, which hosts our online store and processes information on our behalf. For some features, such as Shop Pay and the Shop app, Shopify acts independently. See the Shopify Consumer Privacy Policy.
  • Payment providers, to take payments and help prevent fraud.
  • Delivery services, and any fulfilment partner that runs our UK warehouse, so they can pack and deliver your order and handle returns.
  • IT, email and customer support providers that help us run our business.
  • Analytics and advertising partners, such as Google, only if you accept the relevant cookies.
  • Professional advisers, such as accountants and lawyers.
  • Public authorities, such as HM Revenue & Customs or the police, where the law requires it or to prevent fraud.
  • A buyer or successor, if our business is sold or reorganised, who must protect your information in the same way.

Our service providers may only use your information on our instructions and must keep it secure.

5. International transfers

Advanced Health Knowledge LLC is registered in the United States, so your personal information is processed in the United States. It is also used in the UK to pack and deliver your order and handle returns, by us or by delivery services and any fulfilment partner that runs our UK warehouse. Our service providers may also process it in other countries, such as Canada. Because UK GDPR applies to how we handle your information, we protect it to UK standards wherever it is processed.

Where UK law requires safeguards for a transfer, we and our service providers use safeguards recognised under UK law, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework. You can contact us for more information about these safeguards.

6. How long we keep it

  • Orders, payments, refunds and invoices: 6 years after the order, to meet tax and accounting requirements.
  • Customer account: while your account is open. If you ask us to close your account, we will close it within 30 days. We keep the details linked to your orders for the 6-year period above, then delete them.
  • Customer service messages and complaints: 3 years after your last message, or longer if needed for a legal claim.
  • Health information you choose to send us: only as long as needed to deal with the matter, and no more than 3 years after it is closed unless needed for a legal claim.
  • Marketing: until you unsubscribe or withdraw your consent. After that we keep only your email address or phone number on a suppression list, so that we do not contact you again.
  • Cookies: for the periods set out in Shopify's cookie policy and by our advertising partners. Most expire within 2 years or less.

7. Your rights

If you are in the United Kingdom

Under UK GDPR you have the right to:

  • Access: get a copy of the personal information we hold about you.
  • Rectification: ask us to correct information that is wrong or incomplete.
  • Erasure: ask us to delete your information, unless we have to keep it, for example for tax records.
  • Restriction: ask us to limit how we use your information, for example while we check its accuracy or consider an objection.
  • Objection: object to our use of your information where we rely on legitimate interests. You can object to direct marketing at any time, and we will stop.
  • Data portability: receive the information you gave us in a structured, commonly used, machine-readable format, or ask us to send it to another organisation, where we use it on the basis of consent or contract.
  • Withdraw consent: where we rely on your consent, you can withdraw it at any time. This does not affect anything we did before you withdrew it.
  • Human review: ask for a person to review any decision about you that was made solely by automated means.

To use any of these rights, email info@brightcarepharmacy.com. We may need to confirm your identity. We will reply within one month. If your request is complex, we may extend this by up to two further months and will tell you why. We do not normally charge a fee.

To stop marketing emails, use the unsubscribe link in any marketing email or contact us.

If you are in the United States

Depending on the state you live in, you may have the right to:

  • Know and access: ask what personal information we have collected about you, where we got it, why we use it and who we share it with, and get a copy of it.
  • Delete: ask us to delete the personal information we collected from you, unless we have to keep it, for example for tax or order records.
  • Correct: ask us to fix personal information that is wrong.
  • Opt out of sale or sharing: tell us not to share your personal information with advertising partners for targeted advertising. You can do this at any time on our Your Privacy Choices page, or by emailing us.
  • No retaliation: we will not give you a worse price or a worse service because you used any of these rights.

We do not sell personal information for money, and we do not knowingly process the personal information of children. To use any of these rights, email us with "Privacy request" in the subject line. We may need to confirm who you are before we act, and you can ask an authorised agent to make the request for you.

8. Complaints

If you are unhappy with how we have used your personal information, please contact us first at info@brightcarepharmacy.com so that we can try to put it right. We will acknowledge your complaint within 30 days.

If you are in the United Kingdom, you also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, helpline 0303 123 1113.

If you are in the United States, you can also complain to the attorney general or the privacy regulator of your state. In California that is the California Privacy Protection Agency.

9. Cookies

Cookies are small files stored on your device. We use cookies and similar technologies in these categories:

  • Strictly necessary: these make the website work. For example, they keep items in your basket, run the checkout, keep the website secure.
  • Preferences: these remember choices you make, such as your settings on our website.
  • Analytics: these help us understand how visitors use the website.
  • Marketing: these are used by us and our advertising partners, such as Google, to show you relevant ads and measure how well they work.

You can block or delete cookies at any time in your browser settings. Blocking some cookies may affect how the website works, for example keeping items in your basket.

For details of the cookies Shopify sets, see Shopify's cookie policy.

10. Security

We use appropriate technical and organisational measures to protect your information. Our website uses an encrypted (HTTPS) connection, and payments are handled by our payment providers. No way of sending information over the internet is completely secure, so please do not send sensitive information to us by email unless it is needed.

11. Children

Our website and products are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, please contact us and we will delete it.

12. Links to other websites

Our website may link to other websites. We are not responsible for how they handle personal information, so please read their privacy policies.

13. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date and, where appropriate, tell you about significant changes.

14. Contact us

For any question about this policy or your personal information, email info@brightcarepharmacy.com. You can also write to Advanced Health Knowledge LLC, trading as BrightCare Pharmacy, at our UK address (44 Rosenthorpe Road, London, England, SE15 3EG, United Kingdom) or at our registered office (530B Harkle Rd Ste 100, Santa Fe, New Mexico 87505-4739, United States).

Our phone number is +1 575 999 9918. If you would rather we call you, email us your phone number and a good time to call, and we will call you back at no cost to you.