Privacy notice

PRX Pharmacy Ltd runs PRX Pharmacy in Herne Bay, Whitstable and Canterbury, and this website. We are the “controller” of your personal information, which means we decide how it's used and are responsible for protecting it.

For anything about your information, contact us at admin@prxpharmacy.co.uk, call any of our branches, or write to PRX Pharmacy, 161A Station Road, Herne Bay, Kent, CT6 5NE.

• Using our website, including contact and booking forms.
• The weight management “Check your eligibility” form and the consultation you book with it.
• Your PRX Pharmacy patient account, if our pharmacist invites you to one.
• Services you receive in our branches.

• Your details: name, date of birth, contact details, address, and your GP practice.
• Health information: your answers to our health questions, height, weight, medical conditions, medicines, how you're getting on with treatment, and notes our pharmacists make.
• Your family background (ethnicity): only for weight management, because health guidance uses different weight thresholds for some backgrounds. You can choose “Prefer not to say”.
• Photo ID check: we look at your ID at your consultation and record that it was checked and which type it was. We don't keep a copy.
• Progress photos: only if you choose to add them in your account.
• Orders and payments: what we supplied and when. If you pay by card online, our payment provider handles your card details; we never see or store them.
• Technical information: when you sign in, and the internet address you use, to keep your account secure.

Health information and ethnicity are “special category” information under data protection law, and we give them extra protection.

• To provide your care: to check whether a service is suitable, consult with you, prescribe and supply medicines safely, and follow up. Our legal reasons are that you've asked us to provide a service (UK GDPR article 6(1)(b)) and that it's needed for health care by health professionals who have a duty of confidentiality (article 9(2)(h)).
• To meet our legal and professional duties: pharmacy and prescribing records we must keep, and responding to our regulators (article 6(1)(c)).
• To keep the service safe: for example spotting the same person sending the eligibility form more than once with different answers, and keeping a record of who looked at a patient's record (article 6(1)(f), our legitimate interests in safe, honest prescribing).
• Reminder emails about your treatment, only if you turn them on. You can turn them off at any time.

We don't use your health information for marketing, we don't sell it, and we don't make automatic decisions about your treatment: a pharmacist always decides.

• Your GP, with your permission, so your medical records stay complete and safe. If you don't give permission, our pharmacist will decide whether it's still safe to treat you.
• Other health professionals if it's needed for your care, or in an emergency.
• Companies that help us run our services, under contract and only on our instructions: our website and database host (servers in the United Kingdom), our email provider, and our card payment provider.
• Regulators, the police or courts, only where the law requires it, or to protect someone from serious harm.

• Eligibility forms that don't lead to treatment: deleted 12 months after your last contact with us.
• Patient records (consultations, prescribing and supplies): kept for 8 years after your last treatment, in line with NHS records guidance for adults, then securely deleted.
• Progress photos: until you delete them, or your record is deleted.
• Website contact and booking messages: for as long as needed to deal with your enquiry.

Your account is protected by your password, and our pharmacists use two-step sign-in. Information is sent over encrypted connections, stored on servers in the United Kingdom, and progress photos are encrypted. Only our pharmacy team can see health information, and every time a team member opens a patient record it is logged.

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that's wrong;
• ask us to delete your information (we may need to keep clinical records for the time above, and will tell you if so);
• ask us to limit or stop using your information in some circumstances, and object to how we use it;
• ask for information you gave us in a format you can take elsewhere;
• withdraw permission, such as for sharing with your GP or reminder emails, at any time.

To use any of these rights, contact us using the details above. We'll reply within one month. If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Our patient account uses a cookie to keep you signed in. It's essential for the account to work. For other cookies on this website, see our cookie policy.

We'll update this notice when how we use information changes, and change the date at the top.