Your privacy, protected — at every step of your Makatussin order.

1. Overview

This Privacy Policy explains how Makatussin.shop (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you visit our website, place an order for Makatussin Comp, or contact our pharmacy team.

We comply with the EU General Data Protection Regulation (GDPR), the German Bundesdatenschutzgesetz (BDSG), and all applicable national pharmacy and data-protection laws in the countries we ship to.

2. Data controller

The data controller responsible for your personal data is the licensed German pharmacy operating Makatussin.shop. For all data-protection matters you can reach our team at:

• Email: support@makatussin.shop
• Website: https://makatussin.shop

3. Data we collect

We only collect the data we need to fulfil your Makatussin Comp order, comply with pharmacy regulations, and improve your experience. This includes:

Order & delivery data

• Full name and shipping address
• Billing address (if different)
• Email address and phone number
• Order contents, quantities and order history
• Chosen shipping option (Standard €25 or Express €35)

Payment data

• Transaction ID, amount, currency and payment status
• We do not store your full card number, CVV or bank credentials — these are handled directly by our PCI-DSS-certified payment provider.

Technical data

• IP address, browser type, device type and language
• Pages visited and basic analytics events
• Cookies you accept (see section 8)

Optional health-related notes

• Any information you voluntarily share with our pharmacist (e.g. allergies, current medication) when asking for advice

4. How we use your data

We process your personal data exclusively for the following purposes:

• To process, dispatch and deliver your Makatussin Comp order
• To send order confirmations, tracking links and delivery updates
• To handle returns, refunds, replacements and customer support requests
• To comply with our legal obligations as a licensed German pharmacy
• To prevent fraud, abuse and unauthorised access
• To improve our website, product range and checkout experience
• To send you marketing emails — only if you have explicitly opted in

5. Legal basis (GDPR Art. 6)

• Art. 6(1)(b) — contract: processing your order, delivery and customer support.
• Art. 6(1)(c) — legal obligation: pharmacy record-keeping, tax and accounting law.
• Art. 6(1)(f) — legitimate interest: fraud prevention, IT security, basic analytics.
• Art. 6(1)(a) — consent: marketing emails and non-essential cookies.
• Art. 9(2)(h) — health data: processing of any voluntary health information for pharmaceutical consultation.

6. Sharing & processors

We never sell your data. We only share it with carefully selected processors who help us deliver your order, and only to the extent strictly necessary:

• Shipping carriers (DHL, DHL Express) — name, address, phone number for the parcel label.
• Payment providers — transaction details for processing your payment securely.
• Hosting & email providers — to operate the website and send you order emails.
• Tax & accounting — to fulfil our German legal record-keeping obligations.
• Authorities — only when legally required (court order, regulator request).

7. Data retention

• Order & invoice data: 10 years (German tax law, §147 AO).
• Customer account data: until you delete your account or after 3 years of inactivity.
• Support emails: 3 years from last contact.
• Marketing consent records: until you withdraw consent.
• Server logs: 14 days, then automatically deleted.

8. Cookies & analytics

We use a minimal set of cookies to keep the site working and to understand how it is used:

• Essential cookies — required for login, cart and checkout. Always active.
• Analytics cookies — anonymised page-view statistics. Only set if you accept.
• Marketing cookies — used only with your explicit consent.

You can review and withdraw your cookie consent at any time via the cookie banner or your browser settings.

9. Security measures

We protect your data with industry-standard measures:

• End-to-end HTTPS / TLS encryption across the entire site and checkout
• Encrypted databases and access-restricted servers inside the EU
• Strict two-factor authentication for all staff accounts
• Regular security audits, patching and backup procedures
• Plain, unbranded packaging — your privacy is protected offline too

10. Your GDPR rights

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Correct inaccurate or incomplete data (Art. 16)
• Erase your data, where legally possible (Art. 17)
• Restrict or object to certain processing (Art. 18, 21)
• Receive your data in a portable, machine-readable format (Art. 20)
• Withdraw consent at any time, without affecting prior lawful processing
• Lodge a complaint with a supervisory authority (e.g. the data-protection authority of your EU country of residence)

To exercise any of these rights, simply email support@makatussin.shop. We respond to all requests within 30 days.

11. Children’s privacy

Makatussin.shop is intended for adult patients aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided personal data, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect legal, technical or operational changes. The “Last updated” date at the top of this page always shows the current version. Material changes will be announced on the homepage and, where relevant, by email.

13. Contact us

For any questions about this Privacy Policy or the data we hold about you, please contact our pharmacy team: