Legal
Security and privacy
St Lukes Pharmacy Holdings Limited, trading as Life Pharmacy St Lukes, is committed to protecting your privacy. This policy applies to lifepharmacystlukes.co.nz and any associated websites we establish, and governs how data is collected, stored and used. By using the website, you consent to the practices described here.
How we keep your information safe
In accordance with its obligations under the Privacy Act 2020, Life Pharmacy St Lukes secures and protects the personally identifiable information you provide on computer servers in a controlled, secure environment, protected from loss, unauthorised access, use, modification or disclosure.
To protect your personal information we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, it is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. No method of transmission over the internet or electronic storage is completely secure, but we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
If you choose a direct payment gateway to complete your purchase, your credit card data is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete the transaction, and is deleted after that. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, a joint effort of Visa, Mastercard, American Express and Discover.
If you have registered an account with us, we strongly recommend logging out each time you finish using the website, particularly on a public or shared computer.
What we collect and why
St Lukes Pharmacy Holdings Ltd complies with the Privacy Act 2020. All order information and personal details we collect are private and confidential. That may include your name, age, gender, email address, home, work and postal address, and telephone number. These details are collected for use by St Lukes Pharmacy Holdings Limited and cannot be accessed by any other party.
We use them in connection with your use of the website, to process orders and maintain transaction records, to verify your identity so we can help with any queries, and to improve the website.
When you browse our store we also automatically receive your computer's IP address, which tells us about your browser and operating system.
We may also use your information to tell you about other products or services, unless you have asked us not to contact you with promotional communications, to notify you of important changes to the website, and to help us fix problems with it. We may occasionally contact you through surveys about current or potential services.
Rewards and marketing emails
By creating an account on our website, you agree to join our Rewards programme and to receive advertising, marketing material and other communications from Life Pharmacy St Lukes. Signing up subscribes you to programme emails automatically.
If you would rather not receive them, you can update your profile on the website, email admin@lifepharmacystlukes.co.nz, or call +64 9 846 3213.
Consent, and how to withdraw it
When you give us personal information to complete a transaction, verify your credit card, place an order, arrange a delivery or return a purchase, we take it that you consent to us collecting and using it for that specific reason.
If we ask for further personal information for a secondary reason, we will either ask for your express consent or give you the opportunity to say no.
You can withdraw your consent to the continued collection, use or disclosure of your information at any time, by emailing admin@lifepharmacystlukes.co.nz or writing to us at Life Pharmacy St Lukes, Shop 524 Westfield St Lukes, 80 St Lukes Road, Auckland 1025.
You can always choose not to receive promotional communications: use the unsubscribe link in any email, change your communication settings in your account, or call us to update your preferences.
Third parties
In general, the third-party providers we use will only collect, use and disclose your information to the extent necessary to perform the services they provide to us.
Some, such as payment gateways and payment transaction processors, have their own privacy policies covering the information we have to give them for your purchase. We recommend reading those policies so you understand how they handle your information.
Some providers may be located in, or have facilities in, a different country from you or us. If you proceed with a transaction involving them, your information may become subject to the laws of the jurisdictions where that provider or its facilities are located.
Once you leave our website or are redirected to a third-party site or application, you are no longer governed by this policy or our terms of service.
This website uses Google Analytics to help analyse how people use the site. It uses cookies to collect standard internet log information and visitor behaviour in anonymous form, which is transmitted to Google and used to compile statistical reports on website activity. We will never use it, and will not allow any third party to use it, to track or collect personally identifiable information. Google will not associate your IP address with any other data it holds, and neither we nor Google will seek to link an IP address with the identity of a computer user.
You can refuse cookies through your browser settings, though some of the website may then not work properly.
Cookies we use
- _session_id — unique token, sessional. Allows Shopify to store information about your session, such as the referrer and landing page.
- _shopify_visit — no data held, persistent for 30 minutes from the last visit. Used by our website provider's internal stats tracker to record the number of visits.
- _shopify_uniq — no data held, expires at midnight the next day. Counts the number of visits to the store by a single customer.
- cart — unique token, persistent for two weeks. Stores information about the contents of your cart.
- _secure_session_id — unique token, sessional.
- storefront_digest — unique token, indefinite. If the shop has a password, this determines whether the current visitor has access.
Links to other sites
Links on our store may take you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
Changes to this policy
We update this policy from time to time to reflect company and customer feedback and changes to applicable legislation. We encourage you to review it periodically to see how we are protecting your information.





