Boots WebMD Partners in Health
Return To Boots

Privacy policy

The Site is brought to you by Boots UK Limited ("Boots") and WebMD UK Limited ("WebMD"). We understand how important the privacy of personal information is to our users. This Privacy Policy will tell you how we handle information about you and about your use of the BootsWebMD site ("Site") and its services. It will explain the choices you have about how your personal information is used and how we protect that information. We urge you to read this Privacy Policy carefully. See Part 8(A) of this Privacy Policy for more information on how this Site handles and processes personally identifiable information.

We have organised this Privacy Policy under the following topics:

Part 1: Our Accreditation and Privacy Seals
Part 2: About This Privacy Policy and Using Our Site and Tools
Part 3: Non-Personal Information We Collect About You
  1. Cookies
  2. Web Beacons
  3. Third Parties Collecting Non-Personal Information
Part 4: Personally Identifiable Information BootsWebMD Collects About You
  1. Newsletters & Emails to You
  2. Email a Friend
  3. Emails You Send to Us
  4. Message Boards and other Public Forums
  5. Site Registration and Interactive Tools
  6. Children
  7. Market Research
Part 5: Information Collected by Third Parties Not Acting on Our Behalf
Part 6: Disclosure of Your Information
  1. Disclosure to Boots UK Limited, Operations and Maintenance Contractors
  2. Disclosure to Third Party Contractor Websites
  3. Disclosure to Linked Sites
  4. Disclosure of Aggregate Information
Part 7: How We Handle Privacy and Security Internally
Part 8: Updating Your Information and Contacting Us
  1. Updating Your Personally Identifiable Information
  2. Contacting Us
  3. Removing your Personal Information
  4. Limitations on Removing or Changing Information
Part 9: Changes to This Privacy Policy
Part 10: Glossary

Personal information collected on the Site may be processed in the United Kingdom, the United States or any other country in which we or our affiliates, subsidiaries or service providers maintain facilities. Boots and WebMD abide by the Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of data from the European Union. In addition, our Privacy Policy complies with the UK Data Protection Act 1998. By registering or supplying data or information on the Site, you consent to the collection, use and transfer of your information under the terms of this Policy.

Part 1: Our Accreditation and Privacy Seals

We adhere to strict healthcare industry privacy standards. To give you confidence that we provide reliable and trustworthy health information, we participate in the following independent programmes:

HonCode: Health on the Net Foundation

Health on The Net Foundation – BootsWebMD complies with the principles of the HONCode of Conduct established by the Health on the Net Foundation. To verify our compliance, click on the HONCode logo.

Part 2: About This Privacy Policy and Using Our Site and Tools

This Privacy Policy applies to the BootsWebMD Site, including any mobile optimised version(s) of the Site that may be developed from time to time. Reference to "Us" or "We" means Boots and WebMD or either of them. We may share information among our subsidiaries or affiliates or sites that either Boots or WebMD owns or controls, but it is always protected under the terms of this Privacy Policy.

The Site contains links to other organisations' sites. Once you enter any of these sites (whether through an advertisement, service, or content link), be aware that we are not responsible for the privacy practices of these other sites. We encourage you to look for and review the privacy statements of each and every website that you visit through a link or advertisement on our Site.

We hope that reading our Privacy Policy helps you understand how we manage information about you. Throughout our Privacy Policy, we have underlined various terms and hot-linked them to our Glossary or to the corresponding Section within the Privacy Policy to help you better understand their meaning.

While you may use some of the functionality of the Site without registration, many of the specific tools and services on our website require registration. If you use the Site without registering, the only information we collect will be Non-Personal Information through the use of Cookies or Web Beacons. If you choose to register for certain Interactive Tools or other services, we require you to submit Personally Identifiable Information. Depending on the tool or service you have selected, we may also collect Personal Health Information. You are responsible for ensuring the accuracy of the Personally Identifiable Information and Personal Health Information you submit to us. Inaccurate information will affect the information you receive when using our Site and tools and our ability to contact you as described in this Privacy Policy. For example, your email address should be kept current because that it is how we communicate with you.

Part 3: Non-Personal Information We Collect About You

Even if you do not register, we collect Non-Personal Information about your use of the Site, special promotions and newsletters.

A. Cookies

We collect Non-Personal Information about your use of the Site and your use of the sites of selected sponsors and advertisers through the use of Cookies. We assign every computer accessing the Site a different Cookie. The information collected by Cookies (i) helps us dynamically generate advertising and content on Web pages or in newsletters, (ii) allows us to statistically monitor how many people are using our Site and selected sponsors' and advertisers' sites, (iii) how many people open our emails, and (iv) for what purposes these actions are being taken. We may use Cookie information to deliver certain advertisements to your Browser based on areas of the Site that you have visited during the same session or to determine the popularity of certain content or advertisements. In connection with our sale of advertising we may allow third parties to place a Cookie on your Browser to enable advertisers to recognise your Browser in order to deliver an advertisement based on Non-Personally Identifiable Information. In connection with this, your IP address may be provided to third parties in order to enable the delivery of advertisements based on your location. Importantly, we do not allow these advertisers to collect any information based on your visits to the Site. We may also acquire Non-Personal Information about our users that these third parties have access to and we may use that information for the purpose of content development and for marketing purposes. Cookies are also used to facilitate a user's log-in, as navigation aides and as session timers. Cookies may also be used by us and sites we own or operate to restrict underage use of certain tools. We also use Cookies in order to enable us to conduct surveys for our own use and on behalf of our advertisers. These Cookies are used to determine whether you have seen certain content or advertising so that we may request your opinions.

Most Browser software can be set to reject all Cookies. Most Browsers offer instructions on how to reset the Browser to reject Cookies in the "Help" section of the toolbar. If you reject our Cookies, certain of the functions and conveniences of the Site may not work properly but you do not have to accept our Cookies in order to productively use the Site. Additionally, we may geographically target advertising based on your IP address. We may also use local shared objects, also known as Flash cookies, to enable you to use certain interactive tools on our site. Flash cookies are different from Browser Cookies because of the amount and type of data they collect, and how the data is stored. We do not share information stored in Flash cookies with third parties and the data in them is not used by or on behalf of the Site for delivery of advertisements.

Cookie management tools provided by your Browser will not remove Flash cookies. To learn how to manage privacy and storage settings for Flash cookies, please visit the Macromedia Site.

We do not link Non-Personal Information from Cookies to Personally Identifiable Information without your permission and do not use Cookies to collect or store Personal Health Information about you.

B. Web Beacons

We also may use Web Beacons, also known as "pixels" to collect Non-Personal Information about your use of the Site and the websites of selected sponsors and advertisers, and your use of special promotions or newsletters. The information collected by Web Beacons (i) allows us to statistically monitor how many people are using the Site and selected sponsors' and advertisers' sites, (ii) how many people open our emails, and (iii) for what purposes these actions are being taken. Our Web Beacons are not used to track your activity outside of the Site or those sites of our sponsors. We do not link Non-Personal Information from Web Beacons to Personally Identifiable Information without your permission and do not use Web Beacons to collect or store Personal Health Information about you.

C. Third Parties Collecting Non-Personal Information

Third parties under contract with us may use Cookies or Web Beacons to collect Non-Personal Information about your usage of our sites. These third parties may use this information, on our behalf, to help us deliver our advertising on other sites on the internet based on your browsing activity on our sites. Any browsing activity on our sites used to help deliver these advertisements would be categorized in terms of general health and wellness areas of interest, such as diet and nutrition, fitness and skin care, and not on a basis specific to any medical condition. We may further tailor the advertising on these third party sites based on other Non-Personal Information such as your geographic location (postal code), gender and/or age range to the extent known by these third parties. These third parties have agreed not to use Non-Personal Information they collect from our sites except to deliver advertisements on our behalf. If your Browser is set to reject Cookies, the Non-Personal Information will not be sent to these third parties and will not be used to deliver advertisements on third party sites. Please read Part 3.A for more information on rejecting Cookies.

Part 4: Personally Identifiable Information BootsWebMD Collects About You

We collect Personally Identifiable Information, like your name, email address, date of birth, and postcode, you provide to us when you register on this Site and/or when you update your account. We use the Personally Identifiable Information that you provide to us in order to respond to your questions, provide you with the specific services you select, send you emails about Site maintenance and updates, and inform you of significant changes to this Privacy Policy. Your information will enable us to provide you with the services on the Site. We may use your Personally Identifiable Information to contact you for your views on the Site and to notify you occasionally about important changes or developments to it. Where you have consented to us doing so, either of us might also use your Personally Identifiable Information to let you know about other products and services this website and/or Boots offers which may be of interest to you including information regarding health information or our Interactive Tools. We may contact you by post, telephone, fax, as well as by e-mail. If you change your mind about being contacted in the future, you can exercise this choice by visiting the My Account. If we propose to use and/or process Personally Identifiable Information for any purpose other than those described in this Privacy Policy and/or at the time it was collected from you, your express Opt-in authorisation will be requested for use for those other purposes.

A. Newsletters & Emails to You

At various times as you use the Site, you will be given the option of receiving recurring informational/promotional newsletters via email. These emails will not contain Personal Health Information. When you sign up for our email newsletters or at any time, you can choose to Opt-In to receiving additional promotional emails from us, our sponsors or other third parties. In order to subscribe to our newsletters via email, we need your contact information, like name and email address. You can unsubscribe from the newsletters by simply clicking on the "unsubscribe" link at the bottom of any email newsletter or by going into "My account", clicking on "Edit" under your registration details and unticking the box which offers details on products, special offers and services on the registration page. Then click on "Update details" at the bottom of the registration page. You will then be taken back to "My account", and under Registration details, "Send information via email, will say "No". However, please allow 24 hours for these details to be updated.

If you have difficulties with our unsubscribe or subscribe service, please Contact Us and let us know about your problem.

In some cases, when you click on a link or an advertisement on our site, in an e-mail or newsletter, your Browser may be momentarily directed to the website of a third party which, acting on behalf of WebMD (see Disclosure to Third Party Contractor Web sites, at Part 6B below), notes or "counts" your response to the e-mail or newsletter before re-directing your Browser to your selected destination; this re-direction process may not be apparent to you.

B. Email a Friend

If you choose to use our Email a Friend service to tell a friend about our Site or newsletter, we will ask you for your name, your email address and your friend's email address. We will automatically send your friend a one-time email inviting him or her to visit the Site using your name and email address as the from email address. We do not use your name, your email address or your friend's email information and the information you provide using this service for any other purpose. We will only use the information you provide to send the email you request.

C. Emails You Send to Us

This Privacy Policy does not apply to content, business information, ideas, concepts or inventions that you send to WebMD or Boots by email. If you want to keep content or business information, ideas, concepts or inventions private or proprietary, do not send them in an email to us. We try to answer every email within 48 business hours, but are not always able to do so.

D. Message Boards and other Public Forums

As a service to users of our Site, we may feature links to message boards, chat rooms and other public forums where users with similar interests or medical conditions can share information and support one another or where users can post questions for experts to answer. We also offer online discussions moderated by medical or healthcare experts. Any information shared (including Personally Identifiable and Personal Health Information) that you reveal in a chat room, message board, Ask Our Expert posting or online discussion is by design open to the public and is not a private, secure service. You should think carefully before disclosing any Personally Identifiable or Personal Health Information in any public forum. What you have written may be seen, disclosed to or collected by third parties and may be used by others in ways we are unable to control or predict, including to contact you for unauthorized purposes. As with any public forum on any site, this information may also appear in third-party search engines like Google, Yahoo, MSN, Bing etc.

E. Site Registration and Interactive Tools

After you have registered as a member of our Site, you may choose to use certain interactive content, tools and services that may ask you to voluntarily provide other types of information about yourself including Personal Health Information. Some of the tools (like certain quizzes or calculators) do not retain your Personal Health Information. Others (like Ovulation Calendar) store your Personal Health Information in accordance with the authorisation you provide at the time you use the tool.

F. Children

We are committed to protecting the privacy of children. Neither WebMD, Boots nor any of their services are designed or intended to attract children under the age of 13. We do not collect Personally Identifiable Information from any person we actually know is under the age of 13.

G. Market Research

From time to time either of our market research department, or its operations contractors acting on its behalf, conducts online research surveys in order to gather feedback about our site, our sponsors and opinions on important healthcare issues, through email invitations, pop-up surveys and online focus groups. When participating in a survey, we may ask you to submit Personally Identifiable Information. WebMD or Boots may combine your Personally Identifiable Information you submit in a survey with information about you from other sources. The information from other sources may include financial, health or other identifiable information. This Personally Identifiable Information is used for research purposes. When a survey is sponsored by a third party, Aggregate Information of the survey results is reported to the sponsor. Personally Identifiable Information collected through market research will be used only by WebMD or Boots and their service providers and contractors and will not be given or sold to a third party without your consent or as otherwise permitted by this Privacy Policy. For general market research surveys we will not knowingly accept survey responses from or conduct interviews with any person under the age of 18.

Some surveys may provide remuneration (payment of some kind) to participants such as a small cash fee for your time or an entry into a sweepstakes for a larger prize and may contain opt-in permission for additional email follow-up surveys. Each survey will disclose whether or not it is a paid survey. When our market research surveys collect Personally Identifiable Information like name, email address or contain additional opt in permissions for follow up or re-contact, or if a survey offers to provide remuneration of any kind, we will not knowingly accept participants in these instances under the age of 18. Authorised market research surveys that appear on the Site will always include a link to the BootsWebMD Privacy Policy. We are not responsible for unauthorised market research surveys that are conducted on third party sites. It is possible that when you click on certain banner advertisements on the Site to visit an advertiser's site that you may receive invitations to participate in market research surveys from the advertiser or other third party site. These surveys are not subject to BootsWebMD's Privacy Policy and are not related to the Site. You should always read the privacy policy and or terms and conditions of use so you can understand how these third parties use your information and what rights you have regarding its use.

In addition to collecting survey responses from our members, Cookies may be used to authenticate respondents or to help you pick up where you left off in a survey. If you have Cookies disabled you may not be able to participate in some studies. Cookies may be used to connect survey data with Site usage characteristics. In connection with surveys on our behalf and on behalf of our advertisers, we may use Cookies to determine whether you have seen certain content or advertising so that we may request your opinions.

Part 5: Information Collected by Third Parties Not Acting on Our Behalf

Sponsors or advertisers on our Site may use their own Cookies, web beacons or other online tracking technologies in the banner advertisements served on the Site and in emails, special promotions or newsletters we send you. Some advertisers use companies other than WebMD or Boots to serve their advertisements and to monitor users' responses to advertisements, and these companies ("Ad Servers") may also collect Non-Personal Information through the use of Cookies or Web Beacons on our Web site. In certain situations, information collection may be facilitated by momentarily directing your Browser to the website of an Ad Server or other third party acting on behalf of the sponsor, partner or advertiser before re-directing your Browser to its selected destination; this re-direction process will not be apparent to you.

We do not control third parties' use of Cookies or Web Beacons, or how they manage the Non-Personal Information they gather through them. However, we do require sponsors, advertisers and Ad Servers who collect Cookie or web beacon information through our Site to agree that they will not collect any Personally Identifiable Information from our Site without your consent. They have promised us they will not link any non-personal Cookie or web beacon information collected by them on our Site to Personally Identifiable Information they or others collect in other ways or from other sites except as may be described in connection with a particular program. In addition, our Advertising Policy is posted on the Site and will provide additional detail about our relationship with advertisers and the companies that serve advertisements. You should review the privacy policy of other sites you visit or link to from our Site to understand how these other sites use Cookies and how they use the information they collect through the use of Cookies or Web Beacons on their own sites. Certain Ad Servers allow you to prevent them from collecting data through the use of Cookies. In order to do so, you must Opt-out of such data collection with each individual site. Currently, you can Opt-out of Cookies for several Ad Servers by visiting the Network Advertising Initiative gateway Opt-out site. This website will also allow you to review the Ad Server's privacy policies.

You can also find additional information and resources about how to opt out of advertising and related Cookies by visiting the World Privacy Forum's Site. World Privacy Forum's Site.

WebMD and Boots does not knowingly engage in business with any company that uses spyware or malware. We do not provide users with downloadable software that collects or uses any Personally Identifiable Information or Personal Health Information without full disclosure and Opt-in consent.

Part 6: Disclosure of Your Information

Except as described in this Privacy Policy or as specifically agreed to by you, we will not disclose any Personally Identifiable or Personal Health Information we gather from you on our Site. We may only release Personally Identifiable or Personal Health Information to third parties: (1) to comply with valid legal requirements such as a law, regulation, search warrant, subpoena or court order; (2) in special cases, such as in response to a physical threat to you or others, to protect property or defend or assert legal rights; (3) if we reorganise ourselves within our respective groups of companies your information may be disclosed to another group company or (4) if we enter into a joint venture or our business is sold to or merged with another business entity.

In the event that we are legally compelled to disclose your Personally Identifiable or Personal Health Information to a third party, we will attempt to notify you unless doing so would violate the law or court order. In addition, we may disclose Personal Information as described below.

A. Disclosure to Boots UK Limited, Operations and Maintenance Contractors

We use the services of Boots UK Limited through www.boots.com (the "Boots Site") to provide the Site with services for the maintenance and storage of Personally Identifiable Information. For example, the Boots Site hosts our message boards and maintains registration information. All Personally Identifiable Information collected by this Site will be processed and stored by the Boots Site. In addition, information you submit to us, such as information on a message board or chat room, is stored on the Boots Site. Your Personally Identifiable Information can be maintained or updated by visiting the "My Account" section on the Boots Site.

Our operations and maintenance contractors sometimes have limited access to your Personally Identifiable Information in the course of providing products or services to us. These contractors include vendors and suppliers that provide us with technology, services, and/or content for the operation and maintenance of the Site. Unless you have Opted-out of receiving emails and newsletters from us, these contractors also may have access to your email address to send newsletters or special promotions to you on our behalf or to send emails to you for purposes such as conducting market research on our behalf. Access to your Personally Identifiable Information by these contractors is limited to the information reasonably necessary for the contractor to perform its limited function for us. We also contractually require that our operations and maintenance contractors 1) protect the privacy of your Personally Identifiable Information consistent with this Privacy Policy, and 2) not use or disclose your Personally Identifiable Information for any purpose other than providing us with products and services as required by law.

B. Disclosure to Third Party Contractor Websites

Certain content and services offered to you through our website are served on websites hosted and operated by a company other than us ("Third Party Contractor Websites"). We do not disclose your Personally Identifiable Information to these Third Party Contractor Websites without your consent, but you should be aware that any information you disclose once you access these other websites is not subject to this Privacy Policy. Neither WebMD nor Boots endorses, and neither Boots nor WebMD is responsible for, the privacy practices of these Third Party Contractor Websites. You should review the privacy policy posted on those websites to understand how that Third Party Contractor Website collects and uses your Personally Identifiable Information. We make an effort to make it obvious to you when you leave our website and enter a Third Party Contractor Website, either by requiring you to click on a link or by notifying you on the site before you visit the third party site. In addition, if you see a phrase such as "Powered by" or "in association with" followed by the name of a company other than Boots or WebMD, then you are on a website hosted by a company other than Boots or WebMD.

We also provide links to sites provided by Third Party Contractor Websites that have business arrangements with us to pay commissions based on sales of products or services generated through our Site.

C. Disclosure to Linked Sites

In addition to the Third Party Contractor Websites that you may access as described above, for your convenience there are links to Third Party Websites operated by companies that are not affiliated with the Site and that do not have contracts to provide content or services through the Site. These links may be found in advertisements, referenced within content, or placed beside the names or logos of sponsors. We do not disclose your Personally Identifiable Information to these Third Party Websites without obtaining your consent. We do not endorse and are not responsible for the privacy practices of these sites. If you choose to link to one of these Third Party Websites, you should review the privacy policy posted on this other website to understand how that Third Party Website collects and uses your Personally Identifiable Information.

D. Disclosure of Aggregate Information

We may provide Aggregate Information to third parties. For example, we might inform third parties regarding the number of users of our Site and the activities conducted while on our Site. For example we might inform a pharmaceutical company (that may or may not be an advertiser on our site) that "xx% of our users live in England" or perhaps that "xx% of our users have tried alternative medicine". Depending on the circumstances, we may or may not charge third parties for this Aggregate Information. We require parties with whom we share Aggregate Information to agree that they will not attempt to make this information personally identifiable, such as by combining it with other databases.

Part 7: How We Handle Privacy and Security Internally

Here are some of the security procedures that we use to protect your privacy:

Despite our efforts to protect your Personally Identifiable Information and Personal Health Information, there is always some risk that an unauthorised third party may find a way around our security systems or that transmissions of your information over the Internet may be intercepted.

Part 8: Updating Your Information and Contacting Us

A. Updating Your Personally Identifiable Information

Interactive Tools on the Site that collect and store self-reported data allow you to correct, update or review information you have submitted by going back to the specific tool, logging-in and making the desired changes. We may store user submitted data (Personally Identifiable Information and/or Personal Health Information) in an active database for a period of six (6) months. After six (6) months, user submitted data, including Personally Identifiable Information and/or Personal Health Information will be held in an active database or on an inactive back-up medium for a period of not less than six (6) years or as long as the law requires.

B. Contacting Us

We regularly review our compliance with this Privacy Policy. If you have a complaint or problem, please use our Customer Support Form (Contact Us.) Our customer service department will forward your complaint to the appropriate internal department for a response or resolution. We try to answer every email within 2 business days, but may not always be able to do so.

If you do not receive adequate resolution of a privacy related problem, you may write to our Privacy Office at:

BootsWebMD Office of Privacy
1 Thane Road West
Nottingham
NG2 3AA
United Kingdom

When we receive formal written complaints at this address, we will contact the complaining user regarding his or her concerns.

C. Removing your Personal Information

If you want to delete your Personally Identifiable Information, please call Boots Customer Care on 0845 609 0055 or update the Personally Identifiable Information that you have provided to us by accessing the My Account page and selecting 'About Me'.

We will notify you within 30 days of receipt of your letter to confirm your personal identifiers have been removed.

D. Limitations on Removing or Changing Information

Upon your request, we will delete your Personally Identifiable or Personal Health Information from the active databases and where feasible from back-up media. You should be aware that it is not technologically possible to remove each and every record of the information you have provided to us from our Servers.

Part 9: Changes to this Privacy Policy

Personally Identifiable Information - We will inform you if a material change is made to the Privacy Policy, which means a change that expands the permissible uses or disclosures of Personally Identifiable Information allowed by the prior version of the Privacy Policy. Your continued use of the BootsWebMD website will indicate acceptance of the changes. You may of course choose to Opt-out of continuing to use the BootsWebMD website. Please exit the Site immediately if you do not agree to the terms of this Privacy Policy or any revised policy.

Personal Health Information - We will inform you if a material change in the Privacy Policy is made that involves the use of your Personal Health Information, and your express opt-in authorization will be requested. If you choose to not accept the new privacy policy, then the current privacy policy conditions will remain in effect, so long as we continue to make the functionality containing the Personal Health Information available. We reserve the right to discontinue or limit functionality in all our products.

Non-Significant Changes - We may make non-significant changes to the Privacy Policy that do not affect Personally Identifiable Information or Personal Health Information. For these instances, we may not notify you of such non-significant changes.

If we decide to change our privacy policy, we will post those changes to this privacy statement, the home page, and other places appropriate throughout our Site so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.

We reserve the right to modify this privacy statement at any time, so please review it frequently. If we make material changes to this policy, we will notify you here, by email, and by means of a notice on our home page.

Part 10: Glossary

Aggregate Information or data:As a website gathers individual pieces of Non-Personal Information (see definition below) from its users, it may combine similar data from many or all the users of the website into one big "batch". For example, the site may add up the total number of people in Liverpool, England, (but not their names) who are seeking information about weight loss and compare that to the number of people in Fife, Scotland seeking the same information.

This sort of statistical information is called aggregate data because it reflects the habits and characteristics of a large group of anonymous people. Websites may use aggregate data or share it with their business partners so that the information and services they provide best meet the needs of the users. Aggregate data also helps advertisers and sponsors on the Web know how effectively they are reaching and meeting the needs of their target audience.

Browser: Short for web browser, a browser is a software application used to locate and display web (Internet) pages. The most popular browsers are FireFox, Microsoft Internet Explorer and Safari. In addition, most modern browsers can present multimedia information, including sound and video, though they require plug-ins for some formats.

cache (also called cache memory): Once your Web browser accesses a web page, it references that page and the graphics on it within your computer's "cache" (or more simply, your computer takes a "snapshot" of every page you visit and stores it in the "cache".) The next time you visit that same page, your download time will be quicker as the images and much of the page is already available on your computer for your browser to reference instantly instead of waiting for the page and images to download again.

Channel Partner Website:A third party Web site to whom we provide content and services for that web site's health channel.

Click Stream Information: A record of all the pages you have visited during your visit to a particular Web site or the services you accessed from the site or from an email. Click Stream Information is associated with your browser and not with you personally. It records the archives of your browser.

Cookie: A small data file that is stored on the hard drive of the computer you use to view a Web site. Cookies are placed by that site or by a third party with a presence on the site, such as an advertiser using a Web Beacon (see definition below) and are accessible only by the party or site that placed the cookie (i.e. a cookie placed on your computer by us isn't accessed by any other site you visit but a cookie placed on your computer by an advertiser may be accessed by any site on which that same advertiser has a presence). Cookies can contain pieces of Personally Identifiable Information). We encrypt any Personally Identifiable Information we store in cookies. These cookies often are used to make the site easier to use. For example, if you check a box to ask that we store your user name on your computer so that you don't have to enter it each time you visit the site, it's stored in a cookie on your computer.

Encryption: The translation of data into a secret code. Encryption is the most effective way to achieve data security. To read an encrypted file, you must have access to a secret key or password that enables you to decrypt it. This is typically done by secure computer systems.

Firewall: A system designed to prevent unauthorized access to or from a public or private network. Firewalls can be implemented in both hardware and software, or a combination of both. Firewalls are frequently used to prevent unauthorised internet users from accessing private portions of public networks. All messages entering or leaving the network pass through the firewall, which examines each message and blocks those that do not meet the specified security criteria.

Nickname: As part of your registration on the Site, you will be required to provide a nickname in addition to a Username (log-in name) and a password. The nickname is the name that will appear on any of your public forum postings. This public nickname should be different from the Username that you use when you log on to the Site. NOTE: Once you establish a nickname on the Site, you cannot change it without registering with a new account.

Non-Personal Information: Information that is not traceable back to any individual and cannot be used to identify an individual. For example, Click Stream Information is Non-Personal Information, as is information such as gender, age, city and state when not linked with other Personally Identifiable Information.

Opt-In: Means you are actively indicating your preference to participate in a program, email, feature, tool, or enhancement on a Web site. Typically, if you "Opt-in" you must provide certain information, usually Personally Identifiable Information, to the Web site or otherwise actively indicate your choice or preference to participate in the Web site program. For example, if you wish to receive a diabetes newsletter by email from us, you must enter your email address and choose the type of newsletter by checking a box next to a statement such as: "Yes, I'd like to receive a free subscription to "Diabetes Newsletter."

Opt-Out: Means that if you do not take some action you are indicating your preference to participate in a program, email, feature, tool or enhancement on a Web site. Typically, if you "Opt-out" you must uncheck a box next to a stated preference or otherwise take some indicate action to indicate your preference not to participate in a program. For example, if you do not wish to receive promotional emails from us or our sponsors, you must uncheck the box in your email preference centre that states: "Please send me special offers and communications from WebMD and Boots and/or its partners that would interest me."

Password:A secret series of characters, typically alphanumeric (meaning it consists of both letters and numbers) that enables you to access a file, computer, or program. You must enter your password before the computer or system will respond to commands. The password helps ensure that unauthorized users do not access the system. In addition, data files and programs may require a password.

Ideally, the password should be something that nobody could guess. In practice, many people choose a password that is easy to remember, such as their name or their initials. This is one reason it is relatively easy to break into many computer systems.

Personal Health Information: When your Personally Identifiable Information is combined with known health characteristics. For example, if you indicated that you have a certain disease or condition, when that information is combined with your Personally Identifiable Information , it becomes Personal Health Information. It may be that Personal Health Information will constitute "sensitive personal data" under the U.K. Data Protection Act 1998.

Personally Identifiable Information: (also called Personal Information): Information that can be traced back to an individual (contrast with Non-Personal Information and Aggregate Information). Personally Identifiable Information may constitute "personal data" under the U.K. Data Protection Act 1998. Examples of Personally Identifiable Information include your name, home address, telephone number, email address, and National Insurance number.

If other pieces of information are linked to Personally Identifiable Information, they also become Personally Identifiable Information . For example, if you use a nickname to chat online and give out your real name while chatting, your nickname becomes PII when linked with other PII.

Server: A computer that provides services to other computers. A "web server" stores web site files and "serves" them to people who request them.

SSL (Secure Sockets Layer): A security protocol developed by Netscape for transmitting private information via the Internet. SSL works by using a private key to encrypt data that's transferred over the SSL connection. Both Microsoft Internet Explorer (http://www.webopedia.com/TERM/S/Internet_Explorer.htm) and Netscape Navigator (http://www.webopedia.com/TERM/S/Navigator.htm) support SSL, and many Web sites use the protocol to obtain confidential user information, such as credit card numbers. By convention, URLs that utilize an SSL connection start with https: instead of http.

Username: A name used to gain access to a computer system or program. Usernames, and often passwords, are required in shared systems, such as the Internet. In most such systems, users can choose their own usernames and passwords (see Nickname above for additional information.)

Usernames are also required to post a reply on message boards, use certain Interactive Tools and online services.

Virus: A program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes. Viruses can also "replicate" themselves by copying their code to other computers. All computer viruses are manmade. A simple virus that can make a copy of itself over and over again is relatively easy to produce. Even such a simple virus is dangerous because it will quickly use all available memory and bring the system to a halt. An even more dangerous type of virus is one capable of transmitting itself across networks and bypassing security systems. There are numerous virus protection programs available. See the "How You Can Protect Yourself" section.

Web Beacons (also often referenced as "clear GIFs", "web bugs", "1-by-1 GIFs", "Single-Pixel GIFs", "1 x 1 Pixels", or "clear Pixels"): "): Tiny graphic image files, imbedded in a web page in GIF, jpeg or HTML format, typically used to monitor activity on a web page and send back to its home server (which can belong to the host site, a network advertiser or some other third party) information from your browser, such as the IP address, the URL of the page on which the beacon is located, the type browser that is accessing the site and the ID number of any cookies on your computer previously placed by that server. Web Beacons can also be used to place a cookie on your computer.



Effective: September 2011

©WebMD UK Limited and Boots UK Limited. All rights reserved.