Collecting information about you
Information we get from you
Name, address, contact details, browsing history (including any adverts you may click on), purchases, and information about any devices you may use to access our services.
Name, address, age, gender, contact details and purchases. Details of the emails and other digital communications we send to you, including information about which emails you open, and what links you might click on.
Your contact details and prescription information (including name, sex, medical records, history, allergy, disease, and medicines purchase history), images and video recordings from CCTV.
Boots collects personal information about you whenever you shop with us online or instore, and when you use our services. Please see below for examples of the data we collect from you:
A 'cookie' is a file in your web browser that enables us to recognise your computer when you visit www.boots.co.th and makes using our site quicker and easier (e.g. login fields may be pre-filled with your email address). Cookies are also essential to the functioning of certain parts of the site and we use them to collect information about how the site is used, such as how many people visit and return and what products are being viewed. We also use ‘Pixels’, or ‘Transparent GIF files’, to help manage our online advertising. These are files provided by our advertising management partner, Sear Ads 360, DoubleClick that can recognise a unique cookie we have placed on your web browser. This in turn helps us learn which advertisements are most effective at bringing users to our website. The information collected in this way is anonymous, and doesn’t contain any information that identifies you personally. If you’d like more information about DoubleClick, please click here. To find out more about cookies, how they work and how to manage them, visit www.allaboutcookies.org
These Cookies are essential so that you can move around the site and log in to the secure areas. Without them you’d be unable to shop on the website or access your account.
These Cookies collect information about how visitors use the www.boots.co.th site and Boots app, e.g. which pages they visit most often and whether they see error messages. The information is aggregated so it doesn’t identify individuals, and we use it only to help us improve the way the website works.
These Cookies allow our website to remember choices you have made, such as your username or the region you’re in, and help us provide you with a better, more personal experience. For example, they may allow you to watch a video clip, comment on a blog or add a product review.
These cookies enable us to give you a more personalised experience when you visit our site, by recognising you and remembering any preferences or choices you’ve made on previous visits to the site. We may link these cookies to other information we hold about you (such as Boots Membership data) and use this to provide you with more relevant content and offers. The cookies also enable us to provide you with more personalised content and offers through our other communication channels. These include our stores, post, email, website, app, social, and online media.
These Cookies are used to deliver adverts that are more relevant to you, as well as to limit the number of times you see a particular advertisement and to measure the effectiveness of advertising campaigns. The Cookies remember that you have visited a website and this information may then be shared with other organisations for advertising purposes. They're also used to enable price-comparison sites to work and to improve website performance.
In order to link your online activity with your instore purchases, we may match customer information tied to our in-store transaction data, with data collected online, for example by matching on email address or Boots Card number. Examples of the companies with whom we undertake this type of analysis include Google and Facebook. The information collected is used to improve the effectiveness of our advertising activity, and to personalise the content and messages that we send to you.
www.boots.co.th uses Adobe Flash Player to deliver video content and interactive product images. Flash Cookies are stored on your device in a similar way to other types of Cookies, but they're managed differently by your browser. If you wish to disable or delete Flash Cookies, you can do this through Adobe Flash Player security settings, but please note that you may then be unable to view certain types of information and content on the www.boots.co.th website.
|Function||Name of Cookie(s)|
These cookies are necessary for the safe and normal operation of the website and enable us to identify you when you access the website, such as your log in credentials, browsing, preferred language and cookies settings.
You may not opt-out from these cookies.
|Function||Name of Cookie(s)|
These cookies help us analyse or measure performance so that we can better understand your interests. For example, they process visitor traffic and activity, so we can make suitable improvements to meet your interests and enhance your usage
|Function||Name of Cookie(s)|
These cookies enable us to remember your access settings and will be used to make changes to the website to show advertisement that are most suitable for you. For example, to prevent or limit the number of times you see a repeat advertisement on the website
If you log in to www.boots.co.th from a shared computer, such as in an internet cafe or from a colleague’s computer at work, Cookies may cause your e-mail address to display in the login field to anyone who uses the site on that computer after you. You can avoid this by clearing the Cookies stored by the web browser. The option to do this is normally in the ‘Tools’ dropdown menu at the top of the browser window.
Mobile app privacy
Information we get from the Boots mobile app
The Boots app needs to access certain information held in your phone and some of the device’s functions in order to work properly. By downloading the Boots app, you’re giving Boots permission to do this for the purposes below. Rest assured that we only use these permissions to provide the app and the services you request and use through it.
The Boots app captures information about the device it’s been installed on, such as the model of your phone, the version of the operating system it’s using and the version of the app that has been installed. This allows Boots to accurately notify you when updates to the app are available for your version. The app also captures a device ID reference which allows us to send notification messages to your specific device if you have agreed that we may do so. This service is provided with the assistance of a third party, CNES-Consulting Co., Ltd.
If you choose to link your Boots Card to the Boots App it’ll enable us to improve your experience of using the app – for example, we’re then able to provide you with personalised offers and messages. In order to do this effectively we’ll track your interactions with these offers and messages, views, activations, and redemptions to ensure we continue to provide you with offers that we believe are in your interest.
If you give permission for the Boots app to access location services (such as GPS or location from the network), the app will use this data to improve the functionality of certain features. For example, by enabling the ‘Store Locator’ feature to help identify stores near your present location. The app can access two different location options: ‘approximate’, where location is determined by accessing the network from your device, and ‘precise’, where GPS data is used in addition to network data for more accurate positioning.
The Boots app may need to access to these areas of your device to enable you to use the Photo feature and select the images you wish to send to Boots stores to be printed. The Boots app can also access your device’s camera to allow you to take photos if you choose to capture a new image for printing. The camera is also used to enable you to scan a barcode, and the app may also activate the flashlight on your device to give the camera sufficient light to take photos or scan barcodes.
The Boots app can access the phone dialer on your device to enable you to make calls directly from within the Boots app, for instance to dial the Boots customer support team.
The Boots app can access contacts stored on your device to enable you to share the Boots app via social media channels with contacts held on your device.
The Boots app needs a connection to the internet in order to function, so it’ll access data services on your device. It’ll connect to available Wi-Fi networks, if Wi-Fi is active on the device, in order to download data. If the app cannot use an available Wi-Fi network, data will be retrieved from the network using the device’s 3G or 4G connection.
The Boots app can, if required, prevent your device from sleeping to ensure the app can receive notifications even when the device is not awake.
The Boots app can access the device’s ability to vibrate so a vibration alert can be provided when a notification is received.
Google Crashlytics: the Boots app uses Google Crashlytics to help us monitor the functioning of our app and the way people engage with it. Some information is shared with Crashlytics for this purpose, but Crashlytics does not capture any personal information, only anonymised app usage information. To find out more about Crashlytics you can click here below:
From time to time we may supplement the information we hold about you with data from other commercially-available sources. This helps us keep our records up to date and learn more about our customers so we can continue to improve our products and services to them. We only work with organisations that obtain their data legally from publicly available or consent-based sources.
Occasionally, for marketing purposes, we may obtain lists of potential customers from external companies. We’ll only deal with reputable companies that take privacy and data protection as seriously as we do and have obtained consent to share this data with us. We’ll always let you choose not to receive further marketing material from us.
We may obtain information posted publicly on social media sites and use it to help us understand how our different customers interact with us and what people think and feel about our brand. We do this in a way that doesn’t always identify individual customers. For example, we may look at which groups of customers are more likely to talk to us via social media or use social media to talk about Boots products. If we intend to use your information from a social media site such as Instagram, we’ll always contact you for your permission first. If you raise a query or a complaint through Boots’ social media pages, we’ll of course have a record of your username. This is used only to enable us to correspond with you and resolve the matter you’ve raised. Boots share pseudonymised data with social media platforms such as Facebook to enable Boots to deliver content and messages which may be of interest to you. More information on this can be found here: https://www.facebook.com/policy.php
We use your personal information for a number of different purposes. Some are essential for us to provide the services you use or to fulfil our legal obligations, some help us run our business efficiently and effectively and some enable us to provide you with more relevant and personalised offers and information. In all cases we must have a reason and a legal ground for processing your personal information. Some of the most common legal grounds we rely on are briefly explained below.
You’ll be asked to confirm that you’re happy to provide your personal data and that you give your permission to Boots to process your personal data. All of the details such as why Boots want your data, how it will be used and if your data will be shared will be provided at the time of asking you for your consent.
Where Boots are relying on consent you will usually see a tick box.
Processing data for the purposes of a contract to which you are party to.
There’s a range of legal and regulatory requirements we and our parent company need to comply with, and some of these may affect the way we process personal data, or the length of time for which we are required to keep it.
Boots will on occasion be under a legal obligation to obtain and disclose your personal data.
Where possible Boots will notify you when processing your data due to a legal obligation, however this may not always be possible.
Boots may collect, use or disclose your personal data for the prevention or suppression of a danger to your life, body or health.
Boots may also hold personal data for our own legitimate business interest. This relates to us managing our business to enable us to give you the best service/products and most secure experience. When we rely on this, we’ll carry out a legitimate interest assessment to ensure we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws.
It can also apply to processing that’s in your interests as well.
Our legitimate business interests don’t automatically override your interests - we won’t use your Personal Data for activities where our interests are overridden by the impact on you, unless we have your consent or are otherwise required or permitted to by law.
We use your personal information to provide our products and services, for example to set up and run your account, process orders and transactions, respond to queries and comments and provide you with the best possible level of customer service. We may use it to contact you about orders you’ve placed or appointments you’ve booked or to send you reminders (e.g. about repeat prescriptions). We may also contact you in emergency situations, such as an urgent product recall or where we have a duty of care to notify you of information that relates to your health.
No, because this covers the many processes and legal obligations that we need to carry out in order to provide you with the Boots service(s) you’ve requested and also to protect you in emergency situations.
Meeting our obligations
Legal, regulatory and contractual requirements
As a healthcare provider, we’re regulated by the regulators, all of which may set out standards and codes of practice with which we need to comply.
We have a legal obligation to keep the personal data we hold accurate and up to date, we share your personal data across our group companies in order to do this.
We periodically update our records against commercially or publicly available sources to update addresses where customers have moved or who are deceased. This is to fill gaps in the contact details we hold and to correct addresses that are incorrectly formatted.
This excludes the information we hold about you on our prescription dispensing system. The information held there originates from your prescriber (usually your GP or a hospital) and is used only in connection with dispensing prescriptions. Any updates you make to information held elsewhere in Boots, such as your www.boots.co.th account or Boots Card, are not applied to information held on this system.
Yes, however there may be legal and regulatory requirements that require Boots to keep your information up to date if you’re using a Boots service.
We may consolidate the information we hold about you across the companies in Walgreens Boots Alliance and the different channels you use to interact with us (eg website, stores, our app, correspondence etc.). We do this to keep our records accurate and up to date, provide you with a seamless and consistent service and build a clearer picture of our customers both as a group and as individuals. By understanding you better we can offer you the best and most personalised service we can, but don't worry - we will only send you marketing material if you have agreed that we can.
Like all retailers, Boots undertakes certain activities that enable us to provide our customers and colleagues with a safe, secure and legal environment online and in stores.
When you place an order, we carry out identity verification, fraud prevention and anti-money laundering checks, validating the personal information you give against appropriate third party databases. This involves sharing your personal data with organisations, which verify those details and transactions and pick up on anything that may indicate illegal activity. This may in some cases involve the disclosure of information to a Credit Reference Agency, which will keep a record of that information and may pass it to the police.
In our stores, we use CCTV recording to prevent and detect crime and anti-social behaviour. Where we do this, we display clear signage and have internal processes in place to minimise the impact on your privacy.
No, as there will be legal and regulatory reasons that these activities need to be carried out that are mentioned above. Therefore, we’ll not be able to prevent processing your data for this reason as it’s essential to protect our customers, our colleagues and our business from criminal activity.
The following are things we do as a business to help us operate effectively and efficiently, and in turn provide you with better and simpler services. It’s in our legitimate interests to do these things and we do them in a way that respects and minimises any impact on your privacy.
We carry out analytics on the information we hold about our customers to help us understand who our customers are, how they use our services, and how people interact with us. This enables us to plan our business - for example, stock and staffing levels make sure we offer the same experience online as in our stores, maximise the effectiveness of our advertising and understand how our business is performing. We don’t do this in a way that enables individual customers to be identified. It’s not related to the direct marketing or special offers that we send to you based on your use of Boots services.
Yes, you have the right to object to the way we use your data if you believe our legitimate interest in doing it is outweighed by your right to privacy. As this type of analysis is important in enabling Boots (like all major retailers) to operate efficiently and we carry it out in a way that doesn’t identify individuals, we believe it has no impact on your privacy.
Whichever Boots services you use, wherever and however you interact with us, we want to give you the same level of service and make things simple and straightforward. We use your details across our services so we can recognise you as a customer and provide consistent care with whichever service you’re using. This also means you don’t need to give the same details each time you come in.
Yes, we do this because it makes things more efficient both for you and for Boots. You can object, but doing so will limit the Boots services you’re able to use in the future.
Yes, but we believe it’ll result in your online experience being less personal and relevant to you. The content and search results you see will be generic rather than related to your interests. Personalising your online experience doesn’t affect the marketing options you have selected, it’s to offer you a service personalised to your needs.
If you’re a registered customer, you can email the contact details given below with your request. If you’re not a registered customer, information held in our Cookies may be used to select content that we feel is more relevant for you. To prevent this, you can clear your cookies.
Boots Card offers great benefits and rewards, and we aim to make these as relevant to you as we can. In order to do so, we need your personal information. If you’re a member of our Boots Card scheme, we’ll build up a picture of you based on your use of Boots services. This includes your online and offline shopping habits, your browsing habits, information you give us about yourself and through any clubs you’re a member of and any information you provide about your family. We also include any information we’ve obtained from consent-based, commercially available sources about you and people with similar interests and attributes. By building up and fine-tuning this picture of you, we can provide you with tailored offers that are exciting and relevant to you. These might be sent to you via text, email, post our websites or apps, or via online advertising. Please note that we only send you marketing material if you’ve agreed that we can.
Please be assured that information we hold about prescriptions that we’ve dispensed aren’t included in the picture we build up of you.
The benefit of being a Boots Card member is to receive points and rewards on the products and services that interest you. Without building up a detailed picture of you we can’t tailor our offers and rewards to be personal to you and you won’t receive the full benefits of being a Boots Card member. If you don’t wish to have your data used in this way, please contact us using the details provided below.
If you do not wish to have your personal data processed for any purpose related to the Boots Card scheme, you’ll not be able to have a Boots Card. If you’re an existing member, you therefore need to close your Boots Card account. You’ll still be able to shop at Boots and use our services, but you won’t earn points or receive rewards.
We may analyse your personal information, including the products you view and buy, your browsing habits and other ways you interact with Boots to evaluate the effectiveness of our advertising and help us provide more relevant offers, advice and information across a variety of marketing channels including online advertising and social media sites such as Facebook. Rest assured that we’ll only send you marketing material if you’ve agreed that we can, and we’ll never use sensitive information about your health. If you’re a Boots Card customer, we’ll carry out this type of analysis in order to provide the benefits of the scheme.
Some of our marketing selection processes are fully automated so that we can ensure we’re selecting offers, products and services that are the most relevant for each customer. In order to do this, we use data that we’ve obtained from your use of the Boots Card such as what brands or products you like to purchase, how frequently you shop with us, how much you spend with us and which of our stores you shop in the most. We combine this with demographic data that we obtained when you signed up for the scheme, such as your gender, your age and where you live – this is particularly relevant when inviting you to events. This aggregated data is then compared against our other customers to understand your shopping habits in context. By doing this, we can tell you about products we already know you like and also suggest new products that we think you’d be interested in based on what people like you are buying.
We work with leading universities, healthcare and pharmaceutical companies and other bodies carrying out healthcare research. This may involve providing anonymised and/or aggregated data about our dispensing activities. We have a strict process for assessing research requests and we only agree to take part in projects that have received ethical approval. Where any third party has access to Boots premises or data, we have measures in place to ensure they access only the data we’ve authorised them to access and for purposes of the research only.
Being able to conduct, participate and contribute to this type of data enables Boots to assist with helping to find cures and better solutions for healthcare, which will hopefully go on to benefit the healthcare of the public and our customers.
We believe this is an important activity that will benefit the public and may lead to a breakthrough in the healthcare sector. Like any data we use or provide is anonymised in line with guidance, it’s no longer personal data and you can’t exercise a right to opt out.
As a pharmacy-based retailer, research is vital to our business. Occasionally, we contact customers who meet a particular set of criteria, including health-related factors, to invite them to take part in clinical research. The research may be carried out by external companies acting on our behalf but we’ll never pass your personal information onto them unless we have your consent to do so. You’re always free to decline or withdraw your consent at any time by contacting us.
On occasion, we may work with researchers who are looking for volunteers to take part in various research studies. Therefore, our pharmacists in store may ask if you’re willing to take part in this type of research. If you’re interested in hearing more, we may then put you in touch with the researchers who will provide you with all of information required and ask for your consent before any research begins. In such cases, Boots doesn’t receive any details about people who decide to take part in the research, and your data will be processed by the researcher.
We may invite you to give feedback on Boots services you’ve used or take part in market research activities such as customer surveys, questionnaires or focus groups. Although the invitation may be sent to you by third party agencies on our behalf, rest assured that we only send your contact details and, where relevant, data that we’ve collected through the use of your Boots Card. We’ll only contact you by email or text if you’ve have indicated that you’re happy to receive marketing from Boots. Please be aware that we never sell your personal data.
Boots will only ever share your data with reputable agencies in a safe and secure manner. All personal data is deleted as soon as it’s been used. Keeping your data safe is our top priority.
Yes, you’ll always be able to decline to take part in research activities and you can opt out of these types of emails from Boots as well as other marketing emails. You can do this by managing your preferences online or following the unsubscribe link at the bottom of any of our emails
Using your data with your consent
Appointment booking – searching our systems
If you’ve previously had a prescription dispensed at a Boots pharmacy, we may have your contact details in our pharmacy system. These may be retrieved when we look up your details, but rest assured that we’re unable to access any pharmacy details beyond your contact details.
We use your information to send you offers and information, and you’ll always be asked if you want to receive offers and information and via what channels you would like to receive them.
Yes, you can change your mind about receiving marketing material from us at any time by contacting our Customer Service Centre.
Please be aware that as our marketing campaigns are prepared well in advance, you may still receive material by e-mail or text after updating your preferences.
When you use our services, some of the information we collect may be about your health. And we'll ask for your consent first.
As a healthcare provider, we’re regulated by bodies including FDA. All of whom may set out requirements which we need to comply with when processing personal data, including timescales for keeping data, reporting requirements and professional codes of practice.
Yes, however, we may no longer be able to provide you with the relevant services as a result. If you request Boots Pharmacy to carry out this service, we need to use this information to dispense your prescription safely and legally. So, it is required that you consent for that purpose.
This is only used with your consent and in emergencies.
We’ll never use information about your prescriptions for marketing, although we may use it to let you know about services, we provide that might be useful and relevant to you when you come into our pharmacy. For example, when you collect a prescription a Boots pharmacist might ask if you’d like to take advantage of our new medicines service, a medicines use review, diabetic support services or other similar services that may be relevant and useful to you. These services are voluntary, but if you choose to use them, we’ll need to ask you some health-related questions in order to fulfil our contractual obligations with the national health service bodies. The information you give us will only be shared with the relevant national health service bodies and we won’t use it for any other purpose.
Sharing your information outside the Walgreens Boots Alliance Group
We may share your personal information with third parties where required or permitted by law, if we believe we need to do so to protect our rights, or to comply with legal proceedings. In such cases, we’ll always do so legally and with due regard to your privacy.
From time to time we may contact you with special offers on behalf of brands we stock, but we’ll never sell or share your data with those brands for them to use in their own marketing.
If ownership of all or part of our business changes, or we undergo a reorganisation (including a merger or transfer between Walgreens Boots Alliance companies), we’ll transfer your personal information to the new owner or successor company so we can continue to provide our services.
We share your personal information with companies that provide services on our behalf, such as printers, couriers, mailing houses, data hosting services, social media organisations, digital marketing agencies, call centre providers, market research, manufacturers and suppliers. We always ensure these companies give your information the same level of care and security we do. If your information is to be sent outside Thailand, we make sure it’ll be subject to standards of protection and security that are as high as those Boots uses here.
We hold your personal information for as long as we have a legal or business reason to do so, which generally means as long as you remain a Boots customer or as required to meet our legal obligations, resolve disputes or enforce our agreements. To fulfil our obligations to FDA, health-related personal information may need to be retained for a period of time after you cease to be a Boots customer. We’ll always store your data securely and won’t use it for any other purpose.
Keeping your data secure: what you can do?
Staying in control of your information: Your rights
We respect the fact that your personal information is your information, and we’ll make it easy for you to update or change your personal details or marketing permissions. Please help us to help you by letting us know if your contact details change, or if you spot any errors in the information we hold about you.
However, we may refuse to comply with your request (to exercise any rights to the extent permitted by laws) if you do not give a specific instruction or do not follow our request procedure or the request is manifestly unfound or excessive, or there are exemptions under applicable laws. Taking into account if the request has been made in a repetitive nature, we may request a reasonable fee to process.
If you would like a copy of the information Boots holds about you or have any queries about the way Boots handles your personal information, please contact our Customer Service Centre.
You have to right to obtain a copy of all information that Boots holds about you, such as personal details, correspondence, marketing preferences, consent information, complaints, queries and Boots Card history, within a 30 day time limit and free of charge.
Under certain circumstances you can request that Boots moves your data to another service provider. This is not an automatic right, depending on the type of data that Boots holds about you and the reason Boots process the data will depend on what Boots are able to do.
You have the right to request for rectification of incomplete, inaccurate, misleading, or not up-to-date personal data.
While you remain a customer, we’ll process and retain your data as described in this Policy. Once you cease to be a customer we’ll hold your data for as long as required by law. You do have a right to request that Boots deletes your personal data it holds. This isn’t an automatic right, what Boots are able to delete will depend on the type of data that Boots hold about you. Please contact Boots Customer Call Center to request you data to be deleted.
You have the right to restrict the use of your personal data in certain circumstances as permitted by law.
While you remain a customer, we’ll process and retain your data as described in this Policy. Once you cease to be a customer, we’ll hold your data for as long as required by law. You do have a right to request that Boots deletes your personal data it holds. This isn’t an automatic right, what Boots are able to delete will depend on the type of data that Boots hold about you. Please contact Boots Customer Call Center to request your data to be deleted.
For the purposes you have consented to our collecting, using and disclosing of your personal data, you have the right to withdraw your consent at any time. However, you will no longer be able to receive points and rewards on the products and services from us.
You have the right to file a complaint to the Office of the Personal Data Protection Committee where you believe our collection, use and disclosure of your personal data is unlawful or non-compliance with applicable data protection law.
If you require access to CCTV footage (for example, if you’re the victim of a crime that takes place on Boots’ premises), you should contact the Store Manager of such Boots’ premises or contact us at Boots Customer Call Center: 02 269 – 9599 for more details of our procedure.
We’ll ask the date and approximate time of the incident you wish to view and as much detail as you can to help us locate the correct footage, and we may make a small charge. We’ll ask you to report the local police officer to view the CCTV footage. We’ll do our best to help, but there are situations in which we may be unable to make CCTV footage available to you, such as where the incident occurred some time ago or if we believe that allowing you to view it would breach someone else’s privacy unless the police officer submits a legitimate request otherwise. CCTV is held for a 30 day period.
For all request mentioned above, there is a 30 day limit to which Boots must respond by and you may be required to provide proof of your identity.
We may disclose these data to any legal enforcement agencies if the disclosure is necessary for compliance with legal obligations and to support or assist them in the prevention, detection, and prosecution of crime.
Technologies associated with our CCTV systems may be used for the purpose of collecting non-identifiable analytical data e.g. to understand how long our customers wait in queues when making a purchase or using services within our stores. You cannot be identified by the use of these technologies.
Minor using these services must be accompanied by an adult at all times.
If you wish to exercise any of your rights above, please contact Contact.firstname.lastname@example.org or Boots Customer Call Center: 02 269 – 9599. For all questions or concerns relating to this policy, please contact DPO@bootsrt.com.