Privacy Policy

Introduction

This Privacy Policy explains how Healthcare Pharmacy collects, uses, stores, and protects your personal data when you visit or use our website at www.myhealthcarepharmacy.co.uk, or engage with any of our NHS or private pharmacy services.

We are registered with the General Pharmaceutical Council (GPhC Registration Number: 2218985) and operate as a limited company (Company Registration No: 14669990). Our Superintendent Pharmacist is Harnish Shah.

We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using this website and our services, you acknowledge the practices described in this policy. Please read it carefully before providing us with any personal information.

Who We Are (Data Controller)

Business Name: Healthcare Pharmacy

Address: 2 Tadworth Parade, Hornchurch RM12 5AS, United Kingdom

Telephone: +44 1708 451459

Email: healthcarepharmacy.elmpark@gmail.com

GPhC Registration: 2218985

Company Registration: 14669990

Superintendent Pharmacist: Harnish Shah

For any data protection enquiries, please contact us using the details above.

What Information We Collect

Information You Provide Directly

• Full name, date of birth, and contact details (address, telephone, email)
• NHS number, GP details, and medical or medication history (for prescription and clinical services)
• Health information provided when booking or using services such as NHS Pharmacy First, Travel Clinic and vaccinations, Ear Wax Removal, Weight Loss Clinic, NHS Blood Pressure checks, or NHS Stop Smoking support
• Communications you send us, including queries, feedback, or complaints
• Information provided when requesting EPS Nomination, Repeat NHS Prescriptions, or our Prescription Collection and Delivery service

Information Collected Automatically

• IP address, browser type, device type, and operating system
• Pages visited, time spent on pages, and referring website
• Cookie data (please refer to our Cookie Policy for full details)

Special Category (Sensitive) Data

Some of our services require us to process special category data under UK GDPR Article 9, including health and medical information. This data is treated with the highest level of care and confidentiality, and is only processed where a lawful basis and appropriate safeguards are in place — for example, to provide healthcare services, to comply with a legal obligation, or where you have given explicit consent.

How We May Use Your Information

• To provide, manage, and deliver our pharmacy services, including dispensing, consultations, vaccinations, and clinical assessments
• To process EPS nominations and forward repeat prescription requests to your registered GP surgery
• To fulfil appointments booked via our website, including for Pharmacy First, Travel Clinic, Weight Loss Clinic, and other private services
• To send appointment reminders and relevant service communications
• To respond to enquiries, complaints, or feedback
• To comply with our legal and regulatory obligations as a GPhC-registered pharmacy
• To detect, prevent, and investigate fraud or other unlawful activity
• To help maintain and improve the quality and safety of our services
• To send marketing communications, but only where you have given explicit consent (you may withdraw this at any time)

Legal Bases for Processing Your Data

We process your personal data under the following legal bases:

• Contract performance — processing necessary to provide the services you have requested
• Legal obligation — where we are required by law or by regulatory bodies (including the GPhC, NHS England, and the MHRA) to process certain data
• Legitimate interests — to operate and improve our services, provided this does not override your rights and interests
• Vital interests — in rare circumstances where processing is necessary to protect someone’s life
• Explicit consent — for special category health data, marketing communications, and other purposes where consent is required by law

Where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of any processing carried out before your withdrawal.

Sharing Your Data

We do not sell your personal data. We may share it, only where necessary and with appropriate safeguards, with:

• Your registered GP surgery (for EPS nominations, repeat prescription requests, and clinical referrals)
• NHS England and other NHS bodies (for delivery of commissioned NHS services such as Pharmacy First and vaccination programmes)
• The GPhC and other regulators, where we are legally required to disclose information
• Third-party booking or clinical service providers used on our website (for example, appointment booking or online consultation systems). These providers act as data processors under our instruction and are bound by appropriate data processing agreements
• Our IT infrastructure and hosting providers, based in the United Kingdom or European Economic Area

We will never make your personal data available to third parties for commercial or advertising purposes.

Data Retention

We keep your personal data for as long as necessary to fulfil the purpose for which it was collected, including to meet our legal and regulatory obligations. For pharmacy and healthcare records, retention periods are set in line with NHS and GPhC guidance and may be up to eight years, or longer for certain categories of record. You can ask us to delete your data, subject to our legal retention obligations.

Data Security

• Data is stored on secure, encrypted servers based in the United Kingdom
• We use SSL/TLS encryption for data transmitted through our website
• Access to personal data is limited to authorised pharmacy staff and service providers on a need-to-know basis
• We take regular backups and maintain industry-standard security measures

No method of electronic transmission or storage is completely secure. While we take every reasonable step to protect your data, we cannot guarantee absolute security.

Your Rights Under UK GDPR

You have the right to:

• Be informed about how your data is used (as set out in this policy)
• Access a copy of the personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure of your data, where there is no overriding legal basis for us to keep it
• Restrict processing in certain circumstances
• Data portability receive your data in a structured, commonly used format
• Object to processing based on legitimate interests or for direct marketing
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at healthcarepharmacy.elmpark@gmail.com or write to us at the pharmacy address above. We aim to respond within one month.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices and recommend you review their policies before providing any personal information.

Children’s Privacy

Our website and online services are not directed at children under the age of 16, and we do not knowingly collect personal data from children. Certain services are restricted to those aged 18 and over. Where we provide pharmacy services involving a child, we require parental or guardian consent and deal with the responsible adult accordingly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. We encourage you to check back periodically.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: healthcarepharmacy.elmpark@gmail.com

Telephone: +44 1708 451459

Address: Healthcare Pharmacy, 2 Tadworth Parade, Hornchurch RM12 5AS, United Kingdom