Privacy Policy for Brown Bag Med
Last updated: June 2025
1. Introduction
Welcome to Brown Bag Med. Your privacy is important to us. This Privacy Policy explains how we collect, use, and safeguard your information when you use our services, including our website at https://brownbagmed.eu.
2. Who We Are
Brown Bag Med is a healthcare service offering structured medication reviews by licensed pharmacists.
You can contact us at:
- ✉️ Email: contact@brownbagmed.eu
3. What Information We Collect
a. Information You Provide
- Uploaded medication images and PDFs
- Health information provided through forms (e.g. age, gender, medical conditions)
b. Automatically Collected Information
We may automatically collect certain information through cookies, analytics tools (e.g. Google Analytics), or server logs:
- IP address
- Browser and device type
- Operating system
- Pages visited and referral source
- Time spent on site
This helps us understand how users interact with the site and improve the service.
4. How We Use Your Information
- To provide and improve the medication review service
- To contact you with the report or follow-up information
- To comply with legal obligations
We do not sell your personal data.
5. Sharing of Information
We may share your data only:
- With service providers (e.g. hosting, analytics, cloud storage like Vercel Blob)
- If required by law
6. Data Storage and Security
- Files are stored in a secure, access-controlled environment (e.g. Vercel Blob)
- Access to personal health data is limited to authorized personnel
- All data transmission is encrypted via HTTPS
7. Cookies and Analytics
We use cookies and analytics tools such as Google Analytics to measure traffic and usage trends.
You can opt out of Google Analytics by visiting: https://tools.google.com/dlpage/gaoptout
8. Data Retention
Uploaded reports and metadata are kept only as long as necessary to deliver the service.
You may request deletion of your data at any time.
9. Your Rights (GDPR)
You have the right to:
- Access your data
- Request correction or deletion
- Restrict or object to processing
- Data portability
To exercise these rights, contact: privacy@brownbagmed.eu
10. Third-Party Services
We may link to or use services provided by Google, Vercel, GitHub, or similar platforms. These providers may collect technical data as part of their standard operations. See their respective privacy policies for more information.
11. Changes to This Policy
We may update this policy from time to time. The latest version will always be posted on our website.
By using our site and services, you agree to the terms of this privacy policy.