Privacy Policy

Chemist2Door is committed to protecting your personal information and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, process and protect your information when you use our Secure Age Verification System.

1. Data Controller

Chemist2Door is the Data Controller responsible for processing personal data collected through this website.

2. Information We Process

For age verification we may process:

• Selfie image captured by you.
• Identity document image uploaded by you.
• Biometric facial comparison data generated during verification.
• Verification result (Verified / Failed).
• Verification ID.
• Consent status and consent timestamp.
• Technical security logs required for fraud prevention and system security.

3. Purpose of Processing

Your information is processed only for:

• Age verification.
• Preventing underage purchases.
• Fraud prevention.
• Identity verification.
• Security monitoring.
• Regulatory compliance.

4. Lawful Basis

Processing is carried out under Article 6 UK GDPR using one or more of the following lawful bases:

• Your explicit consent.
• Compliance with legal obligations relating to age restricted sales.
• Legitimate interests in preventing fraud and protecting our business.

5. Biometric Processing

Facial images are processed only for facial comparison during the verification session. Images are not permanently retained after verification unless required by law. Biometric templates generated during processing are used solely for verification.

6. Consent

Verification cannot begin unless you actively agree to the processing of your selfie and identity document. Your consent together with the time it was provided is recorded within our audit logs.

7. Data Retention

• Raw verification images are not permanently stored.
• Audit records are retained for up to 7 days.
• Expired audit records are automatically removed.
• Only the minimum information necessary for compliance is retained.

8. Security Measures

We implement appropriate technical and organisational security measures including:

• HTTPS encrypted communication.
• Restricted administrator access.
• Password hashing.
• Audit logging.
• Automatic retention management.
• Secure server infrastructure.
• Access controls.

9. Your Rights

Under UK GDPR you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate information.
• Request deletion where legally applicable.
• Restrict processing.
• Object to processing where applicable.
• Withdraw consent where consent is the lawful basis.
• Lodge a complaint with the UK Information Commissioner's Office (ICO).

10. Third Parties

We do not sell your personal information. Information is only processed for verification purposes and may be shared where legally required.

11. Cookies

This verification service may use essential technical cookies required for secure operation and session management.

12. Contact

If you have any questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact Chemist2Door using the contact details provided on our official website.

13. Changes to this Policy

This Privacy Policy may be updated periodically to reflect legal, technical or operational changes. The latest version published on this page always applies.