Let's talk about privacy

At Boots, we believe in making things easy for our customers. We know there’s nothing more off-putting than the sight of a lot of boring small print, so we’ve written our Privacy Policy to make it clear, simple and easy to read.

The policy explains how Boots uses your personal data, whether you’re shopping on boots.com, having your eyes tested at Boots Opticians or having a prescription made up at your local Boots pharmacy.

Click here if you are looking for a full list of cookies that we use on this site.


Our promise to you

Boots is committed to protecting your privacy. We believe in using your personal information to make things simpler and better for you. We’ll always keep your personal information safe and will never sell it to third parties. We’ll be clear and open with you about why we collect your personal information and how we use it. Where you have choices or rights, we’ll explain them to you and respect your wishes. We’ve written this Privacy Policy in plain English to tell you how and why we use your personal information. We hope you’ll find it clear and simple but if you have any concerns or questions please feel free to contact our Boots Customer Care.

Who's in control of your information?

You are. Throughout this Privacy Policy, ‘we’ or ‘Boots’ means companies within the Walgreens Boots Alliance Group, including subsidiaries, affiliates, joint ventures and franchises. We share your personal information among these companies in order to provide, and keep you informed about our products and services, to handle any complaints or queries, and to give you the best customer service we possibly can. However, we never lose sight of the fact that it is your personal information and we will only send you marketing material if you have agreed that we can do so. You can find out more about the companies in Walgreen Boots Alliance on our website.

How we process your personal data

Collecting information about you

Boots collects personal information about you whenever you shop with us online or instore, and when you use our services. Please see below for examples of the data we collect from you:

Type

boots.com

Boots mobile app

Boots Advantage Card

Pharmacies, Opticians, Hearing care and stores

Appointment booking

Social media

Processing data about children

Information provided by other people on your behalf

Examples of data

Name, address, contact details, purchases, devices information, browsing behaviour, adverts you may click on (including those shown on other organisations’ websites)

Personal data about yourself, purchases, emails and other digital communications we send to you, including information about which emails you open, and what links you might click on. 

Personal data about yourself, such as name, address, age, gender, contact details purchases, appointment information, prescription, and audiological data. 

Personal data about yourself, such as name, address, age, gender, contact details and medical information. 

When opted into marketing we obtain information posted publicly on social media sites and use it to help us understand how our different customers interact with us and what people think and feel about our brand.  We do this in a way that doesn’t always identify individual customers e.g. we may look at which groups of customers are more likely to talk to us via social media or use social media to talk about Boots products. 

Boots share pseudonymised data with social media platforms such as Facebook to enable Boots to deliver content and messages which may be of interest to you.

Boots Opticians and Pharmacy process children’s data for appointments and processing prescriptions. Children under the age of 16 using these services must be accompanied by an adult at all times. 

If you’re a member of the Parenting Club, Boots will also store and process your child’s data, such as their date of birth. In order to obtain a Boots Advantage Card or a boots.com account you must be at least 13 years old. 

If someone books an appointment on your behalf we’ll ask them for basic details about you, which may include health details such as whether you have a family history of diabetes or glaucoma. This is to ensure we book you in for the right type and length of appointment. We’ll check with you when you come to your appointment to make sure the information we’ve been given is accurate. 

If you’re booking an appointment or registering for a service for someone else, please make sure they’re happy for you to provide their personal information on their behalf and that they understand why the information is needed.

boots.com

Boots mobile app

Name, address, contact details, purchases, devices information, browsing behaviour, adverts you may click on (including those shown on other organisations’ websites)

Boots Advantage Card

Personal data about yourself, purchases, emails and other digital communications we send to you, including information about which emails you open, and what links you might click on. 

Pharmacies, Opticians, Hearing care and stores

Personal data about yourself, such as name, address, age, gender, contact details purchases, appointment information, prescription, and audiological data. 

Appointment booking

Personal data about yourself, such as name, address, age, gender, contact details and medical information. 

Social media

When opted into marketing we obtain information posted publicly on social media sites and use it to help us understand how our different customers interact with us and what people think and feel about our brand.  We do this in a way that doesn’t always identify individual customers e.g. we may look at which groups of customers are more likely to talk to us via social media or use social media to talk about Boots products. 

Boots share pseudonymised data with social media platforms such as Facebook to enable Boots to deliver content and messages which may be of interest to you.

Processing data about children

Boots Opticians and Pharmacy process children’s data for appointments and processing prescriptions. Children under the age of 16 using these services must be accompanied by an adult at all times. 

If you’re a member of the Parenting Club, Boots will also store and process your child’s data, such as their date of birth. In order to obtain a Boots Advantage Card or a boots.com account you must be at least 13 years old. 

Information provided by other people on your behalf

If someone books an appointment on your behalf we’ll ask them for basic details about you, which may include health details such as whether you have a family history of diabetes or glaucoma. This is to ensure we book you in for the right type and length of appointment. We’ll check with you when you come to your appointment to make sure the information we’ve been given is accurate. 

If you’re booking an appointment or registering for a service for someone else, please make sure they’re happy for you to provide their personal information on their behalf and that they understand why the information is needed.

How & why we use your personal information

We use your personal information to provide our products and services.  Some are essential for us to provide the services you use or to fulfil our legal obligations.  Some help us run our business efficiently and effectively.  Some enable us to provide you with more relevant and personalised offers and information for example to set up and run your account, process orders and transactions, respond to queries and comments and provide you with the best possible level of customer service. 

We may use it to contact you about orders you’ve placed or appointments you’ve booked or to send you reminders (e.g. about repeat prescriptions). We may also contact you in emergency situations, such as an urgent product recall or where we have a duty of care to notify you of information that relates to your health.

In all cases we must have a reason and a legal ground for processing your personal information. Some of the most common legal grounds we rely on are briefly explained below.

Detail

Consent

You’ll be asked to confirm that you’re happy to provide your personal data and that you give permission to Boots to process your personal data. All of the details such as why Boots want your data, how it will be used and if your data will be shared, will be provided at the time of asking you for your consent.
Where Boots are relying on consent you will usually see a tick box. 
You have the right to withdraw your consent at any time if you no longer want to be part of the Boots processing activity

Contractual

Processing data for the purposes of a contract to which you are party to. 

There’s a range of legal and regulatory requirements we and our parent company need to comply with, and some of these may affect the way we process personal data, or the length of time for which we are required to keep it.  

Legal obligation

Boots will on occasion be under a legal obligation to obtain and disclose your personal data. 

Where possible Boots will notify you when processing your data due to a legal obligation, however this may not always be possible.

Legitimate interest

Boots hold personal data for our own legitimate business interest. This relates to us managing our business to enable us to give you the best service/products and most secure experience. When we rely on this, we’ll carry out a legitimate interest assessment to ensure we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. 

Our legitimate business interests don’t automatically override your interests - we won’t use your Personal Data for activities where our interests are overridden by the impact on you, unless we have your consent or are otherwise required or permitted to by law. 

Examples

Consent

Boots may use consent where we’re asking you to confirm your marketing preferences to ensure we only contact you via the medium you have chosen i.e. text or email

Contractual

When you purchase a product in a Boots store, on Boots.com or via the Boots app you are entering into an agreement to purchase the products from Boots.

Boots are required to obtain your personal information such as your name and delivery address to fulfil the order.

Legal obligation

In order to prevent and detect fraudulent or criminal activity we may share information with forces such as the Police. This is done in a safe and secure manner. You may not be notified of this. 

Boots provides a range of clinical and healthcare services in partnership with, or on behalf of, NHS trusts, local health authorities and Clinical Commissioning Groups. As part of this, Boots are required to share certain amounts of personal data in order for the NHS and Boots to meet regulatory and legal obligations. Boots will tell you when we share your data for this reason. 

 

Legitimate interest

We may process your information to protect you against fraud when transacting on our website, and to ensure our websites and systems are secure.    

We have an interest in making sure our marketing is relevant for you, we send you marketing that’s tailored to your interests. 

When you place an order on our website we carry out identity verification and anti-money laundering checks, validating the personal information you give against appropriate third-party databases. This involves sharing your personal data with organisations such as Datacash, which verify those details and transactions and pick up on anything that may indicate illegal activity. This may in some cases involve the disclosure of information to a Credit Reference Agency, which will keep a record of that information and may pass it to the police.   

Consent

You’ll be asked to confirm that you’re happy to provide your personal data and that you give permission to Boots to process your personal data. All of the details such as why Boots want your data, how it will be used and if your data will be shared, will be provided at the time of asking you for your consent.
Where Boots are relying on consent you will usually see a tick box. 
You have the right to withdraw your consent at any time if you no longer want to be part of the Boots processing activity

Boots may use consent where we’re asking you to confirm your marketing preferences to ensure we only contact you via the medium you have chosen i.e. text or email

Contractual

Processing data for the purposes of a contract to which you are party to. 

There’s a range of legal and regulatory requirements we and our parent company need to comply with, and some of these may affect the way we process personal data, or the length of time for which we are required to keep it.  

When you purchase a product in a Boots store, on Boots.com or via the Boots app you are entering into an agreement to purchase the products from Boots.

Boots are required to obtain your personal information such as your name and delivery address to fulfil the order.

Legal obligation

Boots will on occasion be under a legal obligation to obtain and disclose your personal data. 

Where possible Boots will notify you when processing your data due to a legal obligation, however this may not always be possible.

In order to prevent and detect fraudulent or criminal activity we may share information with forces such as the Police. This is done in a safe and secure manner. You may not be notified of this. 

Boots provides a range of clinical and healthcare services in partnership with, or on behalf of, NHS trusts, local health authorities and Clinical Commissioning Groups. As part of this, Boots are required to share certain amounts of personal data in order for the NHS and Boots to meet regulatory and legal obligations. Boots will tell you when we share your data for this reason. 

 

Legitimate interest

Boots hold personal data for our own legitimate business interest. This relates to us managing our business to enable us to give you the best service/products and most secure experience. When we rely on this, we’ll carry out a legitimate interest assessment to ensure we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. 

Our legitimate business interests don’t automatically override your interests - we won’t use your Personal Data for activities where our interests are overridden by the impact on you, unless we have your consent or are otherwise required or permitted to by law. 

We may process your information to protect you against fraud when transacting on our website, and to ensure our websites and systems are secure.    

We have an interest in making sure our marketing is relevant for you, we send you marketing that’s tailored to your interests. 

When you place an order on our website we carry out identity verification and anti-money laundering checks, validating the personal information you give against appropriate third-party databases. This involves sharing your personal data with organisations such as Datacash, which verify those details and transactions and pick up on anything that may indicate illegal activity. This may in some cases involve the disclosure of information to a Credit Reference Agency, which will keep a record of that information and may pass it to the police.   

Keeping our records up to date

Whichever Boots services you use, wherever and however you interact with us, we want to give you the same level of service and make things simple and straightforward. We also have a legal obligation to keep the personal data we hold accurate and up to date.

In order meet this legal obligation, to ensure we can recognise you as a customer and pr