GDPR Compliance

Data Collection and Processing

At Unknown Pharma Books, we collect, store, and process personal information only as necessary to provide services, enhance user experience, and comply with legal obligations under United States law. Our website may collect personal data including, but not limited to, email addresses, names, geographic locations, and browsing behaviors for the purposes of communication, analytics, and service personalization. All data collection activities are transparently disclosed at the point of collection, and we employ secure technical and organizational measures to protect user data. Any data provided voluntarily by users, such as through forms or email correspondence, is managed with strict confidentiality. We process such information in accordance with General Data Protection Regulation (GDPR) principles, even though our primary operations are within the United States, to ensure trust, transparency, and respect for user privacy. No personal data is sold to third parties. We may use anonymized and aggregated information for research or reporting purposes, but identifiable data is never shared beyond what is required for fulfillment of user requests. By interacting with this website, users consent to the outlined collection and processing practices.

Lawful Basis for Processing Data

Unknown Pharma Books only processes personal data when there is a lawful basis for doing so, as recognized by GDPR principles adapted to the United States context. The lawful bases typically include user consent provided through explicit opt-in mechanisms, necessity for the performance of a contract, compliance with legal obligations, and legitimate business interests that do not override the fundamental rights and freedoms of users. Situations qualifying as legitimate interests are carefully assessed, weighing the impact on individual privacy. Processes are regularly reviewed to ensure ongoing compliance and prompt updating in line with regulatory developments. Each processing activity is documented and maintained as part of our internal compliance policies. Users may withdraw consent at any time without detriment, and mechanisms for such withdrawal are made easily accessible. Any changes to the lawful basis for processing will be communicated promptly and transparently.

Data Subject Rights

We respect and uphold the rights of data subjects as outlined in GDPR—translated and applied, where relevant, within the regulatory landscape of the United States. Users have the right to access their personal data held by Unknown Pharma Books at any time. Requests for rectification of inaccurate data, erasure of personal data (“right to be forgotten”), restriction of processing, and objection to data processing are promptly addressed. Data portability requests will be honored, ensuring users can obtain their data in a structured and commonly used electronic format. Users may exercise their rights by contacting the data controller at [email protected]. Each request is processed with diligence and provided within the legally required timeframe. Verification steps are implemented to confirm requester identity, protecting against unauthorized access. If a user believes their rights have been violated, guidance on escalating the issue to appropriate supervisory authorities will be provided.

Information Security Measures

Unknown Pharma Books employs robust security protocols to safeguard all collected and processed personal information. We utilize industry-standard encryption, secure data storage, regular security assessments, and access restriction techniques to minimize risks of unauthorized access, data breaches, or loss of personal data. Employees and contractors with access to personal information are bound by strict confidentiality agreements and receive data protection training. Our policies are regularly updated to address emerging threats and vulnerabilities. Incident response plans are in place, including notification procedures in the rare event of a data breach. We continuously monitor our digital environment to identify suspicious activity and remediate potential risks swiftly. User data is only accessed on a need-to-know basis and is safely disposed of when no longer required for its intended purpose. Physical, administrative, and technical controls are thoughtfully integrated for all stages of the data lifecycle.

Retention and Deletion of Data

Personal data collected by Unknown Pharma Books is retained only for as long as necessary to fulfill the purposes for which it was collected, meet legal and regulatory requirements, resolve disputes, and enforce agreements. Retention periods are clearly documented in our internal policies and aligned with legal standards. Upon the expiration of retention periods or upon valid request by data subjects, all personal data is securely deleted using methods that prevent recovery and misuse. Data destruction procedures are periodically reviewed to ensure compliance with best practices in information lifecycle management. If users wish to exercise their right to erasure, detailed procedures are available via contact with the data controller.

International Data Transfers

Although the owner of Unknown Pharma Books is based in the United Kingdom and the website operates within the United States of America, we are committed to ensuring that any international data transfers are conducted in compliance with applicable laws. When personal data is transferred across borders, equivalent protection measures are maintained through the use of contractual clauses, adherence to recognized frameworks, and secure transfer protocols. We do not transfer personal information to jurisdictions lacking adequate data protection standards without first securing clear consent from users and implementing supplementary safeguards. Ongoing monitoring of legal and regulatory changes ensures our international transfer procedures remain compliant and protective of user privacy.

Contact Information and Data Controller

Contact Details

If you have any questions, concerns, or wish to exercise your data protection rights, please contact the data controller:

• April Morone
• Cadbury World, Linden Rd, Bournville, Birmingham, B30 1JR, United Kingdom
• Email: [email protected]

We are committed to treating all communications confidentially and responding within reasonable timeframes. Your privacy and trust are of the utmost importance to us, and all inquiries or complaints will be managed diligently, transparently, and in accordance with regulatory obligations.