We collect and use your information to process your order, manage your account and, if you agree, send you details of our other goods and services and those of our selected partners.
We also use information automatically collected from our website to personalize your repeat visits to the website and to improve our website.
Some of the information we collect is medical data. This information is always treated confidentially. We will never disclose medical data unless legally required or permitted. We will not use your medical data for marketing purposes.
Last updated: 25 May 2018
We update this policy from time to time, so please review it regularly. If we make changes, we will notify you by changing the date at the top of the policy. In some cases, we may provide you with additional notice (i.e. by sending you an email).
We collect information you provide directly to us. For example, if you use or register to use our services. The type of information we collect may include your name, address, data of birth, email address, phone number, details of the medicines youve ordered and other purchase/prescription history.
Some of this information will enable us to identify you and is known as personal data. As required by law, we will take particular care when dealing with your personal data.
Some of the information we collect is medical data (for example, details of the medicines you have ordered). This information is always treated confidentially which means that none of our staff can access it unless they are a health professional (or owe a similar duty of confidentiality). We will never disclose medical data unless legally required or permitted to do so. Your medical data will not be used for marketing purposes.
Why do we collect this information and what do we use it for?
As part of the provision of our services, we use the information that we collect from you:
Where you have agreed that we may do so, we may send you personalized marketing communications in order to keep you informed of our and our selected partners products and services, which we consider may be of interest to you.
Email marketing campaigns published by us may contain tracking facilities within the actual email. Your activity is tracked and stored in a database for future analysis and evaluation. Such tracked activity may include the opening of emails, forwarding of emails, the clicking of links within the email content, times, dates and frequency of activity. This information is used to refine future email campaigns and supply you with more relevant content based around your activity.
You can opt-out of receiving marketing communications at any time by emailing us at firstname.lastname@example.org. Details of how to opt-out will also be provided in each email or other marketing communication we send you.
We process your personal data, which includes information from your prescriptions and any other pharmacy and health care services we provide to you such as new medicines use reviews for the purposes of:
Your care – providing pharmacy services and care to you and, as appropriate, sharing your information with your GP and others in the wider NHS;
Our payments – sharing your information with the NHS Business Services Authority, others in the wider NHS, and sometimes Local Authorities, and only limited information to those external to the NHS who negotiate and check the accuracy of our payments; and,
Management – sharing only limited information with the NHS Business Services Authority and others in the wider NHS, and sometimes Local Authorities; as well as those external to the NHS who ensure we maintain appropriate professional and service standards and that your declarations and ours are accurate.
We use other trusted organisations who have provided GDPR compliance assurances to help us deliver our services and improve them, including:
Where we need to share information with our third party providers, we give them only the minimum amount they need to provide services to us and you. Those we share your information with, in these circumstances, are not allowed to use it to try to sell their own services to you.
As well as giving our service providers information to help us provide our products and services to you, we may give your personal information to others (third parties) in the following circumstances:
Cookies are small data files that a website can send to your browser, which may then store it on your computer.
Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our website.
The security of your information is very important to us, and we take all appropriate security measures (including physical, electronic and procedural measures) to help protect it from being seen or shared by people or organizations not authorized to receive it. When sending your personal information to a third party to provide goods or services, we will use reasonable ways of keeping your personal information secure.
Unfortunately the sending of information via the internet is not totally secure and on occasion such information can be intercepted. We cannot guarantee the security of information that you choose to send us electronically, sending such information is entirely at your own risk.
You have the right to confidentiality under the General Data Protection Regulation and [the Data Protection Act 2018] and the common law duty of confidence.
We also comply with the NHS Code of Practice on Confidential Information and pharmacists have a requirement under their professional standards to keep records about you confidential, secure and accurate.
All of our staff contracts of employment contain a requirement to keep patient information confidential.
You may choose to opt out of the NHS using your data for planning and research purposes – please ask for details.
Our guiding principle is that we process your records in strict confidence.
We hold your information for as long as advised by the NHS, you have the right to ask for a copy of all pharmacy records about you (generally in paper or electronic form).
Generally, there will be no charge for a printed copy of the information we hold about you. We are required to respond to your request within one month.
You will need to give adequate information in order for pharmacy staff to identify you (for example, full name, address and date of birth). You will be required to provide ID, for example a passport, full driving licence or credit/debit card before any information is released to you.
If you think any information we hold on you is inaccurate or incorrect, please let us know.
You may object to us holding your information.
You can exercise this right by emailing us at email@example.com
You may lodge a complaint with the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Our Data Protection Officer is Sarah Morgan, firstname.lastname@example.org