Pharmacyspace (Aylesbury) Limited trading as Pharmacyspace and Lynam Pharma Limited is committed to protecting and respecting your privacy.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
For the purpose of the Data Protection Act 2018 (the Act) and forthcoming General Data Protection Regulation (GDPR) the data controller is Shailesh Patel of 4 and 5, Bessemer crescent, Rabans Lane Industrial Area, Aylesbury HP19 8TF
Information we may collect about you.
We may collect and process the following data about you:
IP addresses and cookies
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration. This is statistical data about our users' browsing actions and patterns, and does not identify any individual. For the same reason, we may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer's hard drive. They help us to improve our site and to deliver a better and more personalised service. They enable us:
Where we store personal data
All information you provide to us is stored on our secure servers in the United Kingdom. Any payment transactions will be encrypted [using SSL technology].] Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Athough we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Use made of the information
We use the information held about you in the following ways:
If you are an existing customer, we will only contact you by electronic means e-mail, telephone or SMS with information about goods and services similar to those which were the subject of a previous sale to you.
If you do not want us to use your data in this way, please tick the relevant box situated on the form on which we collect your data.
The information held about you will not be shared for any reason, unless:
You have the right to confidentiality under the General Data Protection Regulation and the Data Protection Act 2018 and the common law duty of confidence. We also comply with the NHS Code of Practice on Confidential Information and pharmacists have a requirement under their professional standards to keep records about you confidential, secure and accurate.
All of our staff contracts of employment contain a requirement to keep patient information confidential.
You have the right to access and update your personal information we hold about you. You can choose when and how we communicate with you and can opt out of marketing messaging at any time
You can ask us not to process your personal data for marketing purposes at any time. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes.
You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at Pharmacyspace, 5 Bessemer Crescent, Rabans Lane Industrial Area, Aylesbury, Buckinghamhsire. HP19 8TF, or email@example.com
We comply with the NHS Code of Practice on Confidentiality and pharmacists have a requirement under their professional Code of Ethics to keep records about you confidential, secure and accurate. All of our staff contracts of employment contain a requirement to keep patient information confidential. Our guiding principle is that we hold your records in strict confidence.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Access to information.
You have the right to ask for a copy of all records held about you (generally in paper or electronic form).
Generally, there will be no charge for a printed copy of the information we hold about you. We are required to respond to your request within one month.
You will need to give adequate information in order for our staff to identify you (for example, full name, address and date of birth). You will be required to provide ID, for example a passport, full driving licence or credit/debit card before any information is released to you.
If you think any information we hold on you is inaccurate or incorrect, please let us know.
You may object to us holding your information.
You may lodge a complaint with the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Name of data controller: Shailesh Patel
Data subjects and personal data
Personal data such as patient name, address, contact details, medicines and relevant health data.
Care of the patient.
Lawful basis for processing personal data
Article 6(1)(e) of the GDPR. Necessary for the performance of a task in the public interest.
Special category of personal data
Yes, data concerning health (this could include information on a disability). The data may also be another special category of personal data.
Basis for processing special category of data
Article 9(2)(h) of the GDPR (including the Data Protection Act). ‘The provision of health care or treatment’ or ‘the management of health care systems or services or social care systems or services’ or ‘necessary for reasons of public health in the area of public health’.
How is data collected?
The patient, or the patient’s representative, a prescription, another healthcare professional, or the SCR record, as appropriate.
How is data stored?
Primarily the PMR system, but also e-mail or equivalent, POM, CD or Specials registers, as relevant and necessary. Also, hard copy prescription.
To whom do you provide the data (recipients)? (including processors)
As appropriate: NHS Business Services Authority (only controlled drug prescriptions for schedule 2 and 3 drugs for information, not payment) and relevant information to others in the NHS (e.g. as appropriate, GP practice, hospital on admission); relevant information to others such as the GPhC for compliance and enforcement purposes.