Privacy and cookies

Information we collect

We store your account email, pharmacy name, account creation date, verification status, acceptance of these subscription terms, salted password hash and active browser session. Subscription records include the PayPal subscription and plan identifiers, payment status and paid access period. Mediqo does not receive your PayPal password or full payment-card details.

Do not submit patient-identifiable information. The pharmacy account is for medicines-reference access, not patient records.

Why we use it

Account administration, email verification, recovery and paid access are needed to provide the subscription contract. Fraud prevention, access security and limited troubleshooting support our legitimate interests in operating a secure service. Records needed for legal or tax requirements are retained for those obligations. We do not sell subscriber personal information or automatically enrol you in marketing emails.

Service providers

Hostinger hosts the website and account service. Zoho handles account emails. PayPal handles checkout, recurring payments and payment notifications under its own privacy notice. These providers process information needed for their roles; their processing locations and transfer protections are covered by their applicable service agreements. We do not send clinical search terms to PayPal. Medicine Services Limited is the authorised PayPal payment collector for Darren Lingaloo and can access payment information made available to its merchant account for collection and payment administration. Darren Lingaloo remains the subscription provider and your contact for account and privacy requests.

Cookies and security

Signing in sets an essential secure session cookie, valid for up to 12 hours. It identifies your authenticated browser and enforces one active browser per account. Transferring access or resetting your password signs out the previous browser. No advertising or optional analytics cookies are set by the account service.

Verification and recovery links are single-use and expire. Recovery emails may briefly be queued on the private server; their content is removed after delivery or expiry. Access and rate-limit records help protect accounts. Do not share passwords or recovery links.

Keeping and deleting information

We keep account information while needed to operate your subscription and handle account, security or legal obligations. Payment and contract records may need to be retained after account closure for accounting and dispute purposes. You can request account closure and deletion; we will explain any information we must retain and why. Routine expiry removes recovery tokens, queued email content and expired sessions.

Your rights

You can ask for access, correction, deletion or restriction of your information, object where applicable, and request portability where applicable. Contact the provider using the address above. We may need to verify your identity before releasing or changing account information. You can also complain to the Information Commissioner’s Office.