Privacy policy

What we hold about you

When you use Marketing25 as a pharmacy, we hold:

• your name, email address and password (stored only as a hash)
• your pharmacy’s name, address, postcode, ODS/F code and phone number
• the posters, campaigns and videos you create
• billing details, held by our payment provider rather than by us
• sign-in times, so we can show you recent activity and investigate problems

The contacts you upload

Marketing contacts you add or import — a name, and an email address or phone number — are held so that campaigns can be sent to them.

These are marketing contacts, not clinical records. Marketing25 has no field for a diagnosis, a prescription or any other health information, and you must not put such information into a free-text field.

For these contacts, your pharmacy is the data controller and Sonar Informatics is the processor: we act on your instructions, and you are responsible for having a lawful basis to contact them.

Who else processes it

We use a small number of providers to run the service:

• Microsoft Azure — hosting, database and file storage (UK/EU regions)
• Mailjet — sending campaign and account emails
• Stripe — subscription billing

We do not sell your data, and we do not share it for anyone else’s advertising.

How long we keep it

Account and content data is kept while your account is open. When an account is closed we delete it, and backups age out within 30 days.

Contacts you delete are removed immediately. Records we must keep for accounting purposes are retained for as long as the law requires.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email info@sonarinformatics.com and we will respond within one month.

If a contact of yours contacts us directly, we will point them to your pharmacy, since you are the controller for their details.

You can also complain to the Information Commissioner’s Office at ico.org.uk.

Security

Traffic is encrypted in transit. Passwords are hashed, never stored in a readable form. Access to production data is limited to staff who need it.

If a breach affects your data we will tell you and the ICO within the time the law requires.

Cookies

We set cookies to keep you signed in and to remember which pharmacy you are working as. We do not use advertising cookies.