Privacy Policy

Last updated: November 2025

Company Name: Press Pharmacy Ltd
Company No: 16081134
VAT No: 482502008
Registered Office: 29 St Marys Central, Norwood Green, UB2 4LT, United Kingdom
Website: www.presspharmacy.co.uk
Data Controller: Press Pharmacy Ltd
Data Protection Officer (DPO): Anand Sharma MRPharmS (GPhC No. 2080251) — info@presspharmacy.co.uk

1. Overview

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit or use www.presspharmacy.co.uk and our online pharmacy services. We comply with the UK GDPR, the Data Protection Act 2018, PECR, and relevant GPhC and NHS Digital confidentiality standards.

2. Data We Collect

Identity & contact data: name, date of birth, address, email, phone.
Health data: medical history, symptoms, medicines, clinical notes, consultation answers.
Transaction data: orders, billing details (we do not store full payment card data).
Technical data: IP address, device/browser info, cookies, analytics.
Communication data: messages, calls, feedback, complaints.

3. How We Use Your Information

Dispense prescriptions and supply medicines/healthcare products.
Conduct clinical assessments and online consultations.
Manage accounts, orders, payments, deliveries and customer support.
Meet regulatory and safety obligations (GPhC, MHRA, NHS) and maintain pharmacy records.
Prevent fraud and ensure the security of our services.
Send service messages about your order or account. Marketing is opt-in only.

4. Lawful Bases

Legal obligation – to comply with healthcare and pharmacy law and record-keeping.
Contract – to provide the products/services you request.
Consent – for optional marketing or where required for special category data; you may withdraw consent at any time.
Legitimate interests – service improvement, safeguarding, and fraud prevention (balanced against your rights).
Vital interests / public task – where necessary for patient safety or public health reporting.

5. Sharing Your Data

We share data only when necessary and with safeguards in place:

With licensed healthcare professionals/independent prescribers for clinical review.
With NHS systems, MHRA (e.g., Yellow Card reporting), or regulators where required by law.
With trusted processors (payments, IT hosting, couriers, analytics) under written data-processing agreements.
With law enforcement or authorities where legally required.

We never sell your personal data.

6. International Transfers

If any processing involves transfer outside the UK, we use appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations to protect your information.

7. Retention

We retain pharmacy and clinical records for the periods required by healthcare regulation (typically up to 10 years, depending on record type). After that, data is securely deleted or anonymised.

8. Security

We use layered security including encryption, access controls, staff training, and secure hosting. Clinical information is stored on secure systems aligned with recognised standards (e.g., ISO 27001). We regularly review and test our controls.

9. Your Rights

Access your data (Subject Access Request) and receive a copy.
Rectify inaccurate or incomplete data.
Erase data (where applicable) or restrict processing.
Object to processing based on legitimate interests or to direct marketing.
Data portability (where applicable).
Withdraw consent at any time (for activities relying on consent).

To exercise your rights, contact our DPO at info@presspharmacy.co.uk. You may also complain to the ICO: www.ico.org.uk.

10. Cookies

We use essential cookies for site functionality and limited analytics to improve performance. You can manage cookies via your browser settings. See our Cookie Notice (if provided) for details.

11. Children

Our services may be used for children’s prescriptions where clinically appropriate and with the necessary parental/guardian information. We do not knowingly market to children.

12. Changes to this Policy

We may update this Privacy Policy to reflect legal or service changes. The “Last updated” date will be revised and, where appropriate, you will be notified.