Odd email from makers of Ovesse after online Boots order

[LearnSomeSocialSkills]

re posting in chat as no responses in menopause topic, just looking for advice on whether to respond. Also worried I won’t be able to order again!

This is very weird but I have received the email I’ve attached in the photo.
I ordered Ovesse online from Boots after an initial purchase in store.
I did try to write a review of Ovesse on the Boots site, there are only a handful on there and I thought it would be helpful to women considering it, however, it was never published.
I’ve now received this. I’ve googled the sender, and it’s confirmed on LinkedIn that that is her role, there is another name Cc into the email address and it’s a Dr who also works for the company.
I haven’t reported any adverse reactions and I’m not using it ‘off label’ as far as I’m aware. I went through surgical menopause several years ago and this stuff has been life changing.
I can’t decide if I should ignore or email back saying I haven’t reported it, I’m not using off label and asking where they got my email address from. I just wondered if anyone had any thought/suggestions? I just don’t understand who would have reported me using it, why they think I’ve had an adverse reaction and why they have passed my email address on.
TIA
(second pic just shows bottom of the email has the logo & company links etc)

Can you contact this Quality Officer to ask what it is about? Also ask how she had got your email address. I would be concerned about GDPR compliance on the part of Boots.

Was there anything in your Boots review that could be considered a reportable side effect? Did you mention it gave you a rash or constipation or anything?

@OvernightBloats that was my first thought, to ask how they got my email address and question GDPR but I’m prone to over thinking and wasn’t sure if that was an overreaction or if I should just ignore it.

@NaranjaDreams nothing on the review, it was just saying I didn’t realise I needed this but now that I’m using it I realise I was suffering in lots of small ways and this has made a huge difference sort of review.

I guess I will have to bite the bullet and respond, it just seems really odd.

I wouldn't response to this email, but I'd be contacting Boots to find out what they have done with the content of your review and your email address. Someone at Boots has passed that on to the company that makes this medication, which has triggered this email to you. I'd want to know from Boots if this is a reasonable use of customer data, if they have made clear to customers that this might happen if you write a review online for a medication, and what exactly they passed on to this company.

Was your email address alongside your review?

Blast @SilenceInside thats the sensible route. I’d already responded to the company though!

@losssohard email addresses aren’t public and my review wasn’t published anyway, but they do ask for your email address when posting a review.

I will email boots and await a response.

I would look up who the designated Data Protection Officer is with both organisations (Boots and the drug company) and copy them into all your communications. I work in clinical research and I think this is really dodgy from a GDPR/data protection standpoint. I wouldn’t leave it to the organisations to report themselves for a misuse of personal data.

Thanks @mindutopia thats really helpful. The only way I could see to contact Boots was an awful online form with a word limit. I will await a response from an actual person then get someone from Data Protection involved.