Privacy Policy

Introduction

This Privacy Policy explains how Exwick Pharmacy collects, uses, stores, and protects your personal data when you visit or use our website at www.exwickpharmacy.co.uk or engage with any of our pharmacy services.

We are registered with the General Pharmaceutical Council (GPhC Registration Number: 2211565) and operate as a limited company (Company Registration No: 9101478). Our Superintendent Pharmacist is Swapnkumar Mukeshbhai Patel (GPhC Reg: 2211565).

We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using this website and our services, you acknowledge the practices described in this policy. Please read this policy carefully before providing us with any personal information.

Who We Are (Data Controller)

Business Name: Exwick Pharmacy

Address: New Valley Road, Exwick, Exeter, Devon, EX4 2AD

Telephone: +44 1392 221272

Email: exwickpharmacy@gmail.com

GPhC Registration: 2211565

Company Registration: 9101478

Superintendent Pharmacist: Swapnkumar Mukeshbhai Patel

For data protection enquiries, please contact us using the details above.

What Information We Collect

Information You Provide Directly

• Full name, date of birth, and contact details (address, telephone, email)
• NHS number, GP details, and medical or medication history (for prescription and clinical services)
• Health information provided when booking appointments or using services such as Pharmacy First, Vaccinations,  Morning-After Pill, or Blood Pressure checks
• Communications you send us, including queries, feedback, or complaints
• Information provided when requesting EPS Nomination, Repeat NHS Prescriptions, or Prescription Collection and Delivery services

Information Collected Automatically

• IP address, browser type, device type, and operating system
• Pages visited, time spent on pages, and referring website
• Cookie data (please refer to our Cookie Policy for full details)

Special Category (Sensitive) Data

Some services we provide require us to process special category data under UK GDPR Article 9. This includes health and medical information, which is treated with the highest level of care and confidentiality. We only process such data where there is a lawful basis and appropriate safeguards in place, including for the provision of healthcare services, compliance with legal obligations, and where you have provided explicit consent.

How We May Use Your Information

• To provide, manage, and deliver pharmacy services, including dispensing, consultations, vaccinations, and clinical assessments
• To process your EPS nominations and forward repeat prescription requests to your registered GP surgery
• To fulfil appointments booked via our website, including Travel Clinic, Pharmacy First, and private services
• To send appointment reminders and relevant service communications
• To respond to enquiries, complaints, or feedback
• To comply with our legal and regulatory obligations as a GPhC-registered pharmacy
• To detect, prevent, and investigate fraud or other unlawful activity
• To improve the quality and safety of our services
• To send marketing communications, where you have given explicit consent (you may withdraw consent at any time)

Legal Bases for Processing Your Data

We process your personal data on the following legal bases under UK GDPR:

• Contract performance: processing is necessary to provide you with our services
• Legal obligation: we are required by law or regulatory bodies (including GPhC, NHS England, and the MHRA) to process certain data
• Legitimate interests: to operate and improve our services, provided your rights and interests are not overridden
• Vital interests: in rare circumstances where processing is necessary to protect life
• Explicit consent: for special category health data, marketing communications, and where otherwise required

Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

Sharing Your Data

We do not sell your personal data. We may share your data with the following parties, only where necessary and with appropriate safeguards:

• Your registered GP surgery (for EPS nominations, repeat prescription requests, and clinical referrals)
• NHS England and other NHS bodies (for the delivery of commissioned NHS services, including Pharmacy First and vaccination programmes)
• The GPhC and other regulatory authorities where we are legally required to disclose information
• Third-party booking or clinical service providers hosted on our website (such as vaccination appointment systems or online consultation tools). Where third parties process your data, they do so as data processors under our instruction and are subject to appropriate data processing agreements
• Our IT infrastructure and hosting providers, located within the United Kingdom or the European Economic Area

We will never make your personal data available to third parties for commercial or advertising purposes.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory obligations. For pharmacy and healthcare records, retention periods are guided by NHS and GPhC guidance and may be up to 8 years (or longer for certain categories of record). You may request deletion of your data subject to our legal retention obligations.

Data Security

• All data is stored on secure, encrypted servers based in the United Kingdom
• We use Secure Socket Layer (SSL/TLS) encryption for all data transmissions on our website
• Access to personal data is restricted to authorised pharmacy staff and service providers on a need-to-know basis
• We take regular data backups and maintain industry-standard security measures

Please note that no method of electronic transmission or storage is completely secure. Whilst we take every reasonable step to protect your data, we cannot guarantee absolute security.

Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right to be informed: to know how your data is used (as set out in this policy)
• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your data, where there is no overriding legal basis for retention
• Right to restrict processing: to request that we limit how we use your data in certain circumstances
• Right to data portability: to receive your data in a structured, commonly used format
• Right to object: to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: where processing is based on consent, you may withdraw at any time

To exercise any of these rights, please contact us at: exwickpharmacy@gmail.com or in writing to our pharmacy address above. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend that you review their privacy policies before providing any personal information.

Children’s Privacy

Our website and online services are not directed at children under the age of 16. We do not knowingly collect personal data from children. Certain services we provide are restricted to individuals aged 18 and over. For pharmacy services involving children, we require parental or guardian consent and deal with the responsible adult accordingly.

Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Email: exwickpharmacy@gmail.com

Telephone: +44 1392 221272

Address: Exwick Pharmacy, New Valley Road, Exwick, Exeter, Devon, EX4 2AD