Skip to content

Legal

Privacy Policy

Effective 22 April 2026 Last updated 22 April 2026

This privacy notice tells you what to expect us to do with your personal information when you visit pillconnect.com.

Contact details

Pill Connect Limited — registered in England and Wales, company number 08719563.

What information we collect, use, and why

For dealing with queries from our contact form

When you submit our contact form, we collect:

  • Names and contact details — your name, email address, and (optionally) the organisation you work for
  • Correspondence — the message you write to us and any replies we send you

For website analytics and security monitoring

When anyone visits the site, our hosting and analytics systems automatically receive:

  • IP addresses — Azure hosting records visitor IPs in server logs for operational and security purposes. Our analytics provider, Plausible, sees the IP briefly to derive an approximate country, then discards it (no IP is stored)
  • Website user journey information — aggregated and anonymised page views, referrers, device and browser type, and session duration, via Plausible

Cookies and similar technologies

We do not use any advertising, analytics, or tracking cookies. No cookie-consent banner is shown because we set no cookies that require consent under the UK's Privacy and Electronic Communications Regulations (PECR).

A small number of strictly-necessary cookies may be set by our infrastructure to keep the site working and secure. These do not identify you as an individual and are exempt from the consent requirement:

  • When you interact with the contact form, our anti-bot provider Cloudflare may set short-lived security cookies (for example __cf_bm, _cfuvid, or cf_clearance) to mitigate automated abuse. These are strictly necessary for the form to function.
  • When you click to play one of the videos in the Watch section of our homepage, an embedded player from Vimeo loads in your browser. At that point Vimeo may set essential cookies required for video playback (including Cloudflare security cookies). The embed includes the dnt=1 flag, which instructs Vimeo to suppress its analytics and preference cookies; strictly-necessary playback cookies still apply. If you do not wish to load the Vimeo player, simply do not click to play the videos — the rest of the page works without them.

Our analytics provider Plausible is designed to be fully cookieless and sets no cookies at all; it collects no personal identifiers and generates no persistent IDs.

Lawful bases and data protection rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO's website.

Which lawful basis we rely on may affect your data protection rights, which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO's website:

  • Your right of access — you have the right to ask us for copies of your personal information. You can also ask for details of where we get personal information from and who we share it with. Some exemptions apply.
  • Your right to rectification — you have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
  • Your right to erasure — you have the right to ask us to delete your personal information.
  • Your right to restriction of processing — you have the right to ask us to limit how we can use your personal information.
  • Your right to object to processing — you have the right to object to the processing of your personal data.
  • Your right to data portability — you have the right to ask us to transfer the personal information you gave us to another organisation, or to you.

If you make a request, we must respond without undue delay and in any event within one month. To make a request, contact us using the details at the top of this notice.

Our lawful bases

For dealing with queries from our contact form, our lawful basis is:

  • Legitimate interests — our legitimate interest is responding to enquiries from prospective customers, partners, and other interested parties who choose to contact us. All of your data protection rights may apply, except the right to data portability.

For website analytics and security monitoring, our lawful basis is:

  • Legitimate interests — our legitimate interest is understanding aggregated, anonymised patterns of website use to improve the site, and detecting and preventing automated abuse and security threats to the service. All of your data protection rights may apply, except the right to data portability.

Where we get personal information from

  • Directly from you

We do not buy marketing lists, obtain data from credit bureaus, or receive personal information about you from third parties.

How long we keep information

  • Contact form messages (including our replies) — up to 2 years from the last correspondence, then deleted
  • Azure diagnostic logs (IP address, user agent, timestamps) — retained in our Azure Log Analytics workspace for 30 days, then rotated out automatically
  • Plausible analytics data — aggregated, no personal identifiers, and retained for the active lifetime of our Plausible subscription
  • Cloudflare Turnstile verification tokens — discarded immediately after each verification; not stored

Who we share information with

We share personal information with the following data processors, each of whom processes personal information on our behalf to deliver a specific service:

Microsoft Ireland Operations Limited

Hosts the website on Azure Static Web Apps (including server logs) and sends our contact-form emails through Azure Communication Services.

Plausible Insights OÜ

Provides cookieless, aggregated website analytics so we can understand visitor numbers and which pages are viewed, without identifying individual visitors. Company registered in Estonia; production servers in Germany with backups in Finland.

Cloudflare, Inc.

Provides the Turnstile anti-bot verification that runs on our contact form to prevent automated abuse.

Vimeo, Inc.

Hosts and streams the three videos embedded in the Watch section of our homepage. The Vimeo player only loads when a visitor clicks one of those videos to play it; Vimeo does not receive any information about visitors who do not click to play a video.

Legal disclosures

We may also disclose personal information where we are legally required to do so — for example, in response to a valid request from a court, regulator, or law enforcement agency.

Sharing information outside the UK

Where necessary, we transfer personal information outside of the UK. When doing so, we comply with UK GDPR, making sure appropriate safeguards are in place. For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, contact us using the details at the top of this notice.

Microsoft Ireland Operations Limited

  • Category of recipient: website hosting and email delivery provider
  • Country: Netherlands (European Economic Area)
  • Transfer mechanism: the country has been assessed as providing adequate protection (UK Adequacy Regulations for the EEA)

Plausible Insights OÜ

  • Category of recipient: cookieless website analytics provider
  • Country: Germany (production servers) with backups in Finland — both within the European Economic Area. Plausible Insights OÜ itself is registered in Estonia.
  • Transfer mechanism: the EEA has been assessed as providing adequate protection (UK Adequacy Regulations for the EEA)

Cloudflare, Inc.

  • Category of recipient: anti-bot security provider
  • Country: United States of America
  • Transfer mechanism: UK Extension to the EU-US Data Privacy Framework (also known as the UK data bridge for DPF-certified US organisations); Standard Contractual Clauses apply as a fallback mechanism

Vimeo, Inc.

  • Category of recipient: video hosting and streaming provider
  • Country: United States of America
  • Transfer mechanism: UK Extension to the EU-US Data Privacy Framework (UK data bridge); Standard Contractual Clauses apply as a fallback mechanism. The Vimeo player only loads when a visitor clicks to play one of the three videos in the Watch section — no transfer occurs otherwise.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the Information Commissioner's Office (ICO):

  • Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
  • Helpline: 0303 123 1113
  • Website: ico.org.uk/make-a-complaint

Changes to this notice

We may update this privacy notice from time to time. When we do, we'll update the "Last updated" date at the top of the page.