Privacy Policy | CureAll Pharmacy

CureAll Pharmacy ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal information when you use our website and pharmacy services.

1. Who We Are

CureAll Pharmacy is a GPhC-registered pharmacy located at AMBE House, Commerce Way, Edenbridge TN8 6ED. We are the data controller responsible for your personal information.

Contact our Data Protection Officer: seva@pdluk.com

2. Information We Collect

We collect the following types of personal data:

Identity data: name, date of birth, gender
Contact data: postal address, email address, telephone number
Health data: medical history relevant to prescriptions, conditions, allergies
Prescription data: prescribed medicines, prescriber information
Transaction data: payment details, order history
Technical data: IP address, browser type, device information, cookies
Usage data: how you use our website and services

3. How We Use Your Information

We use your personal data for the following purposes:

To dispense medicines and process prescriptions safely
To process your orders and deliver goods
To manage your patient record and medication history
To communicate with you about your orders and health queries
To comply with our legal and regulatory obligations as a registered pharmacy
To improve our website and services
To send you service-related communications (not marketing, unless you opt in)

4. Legal Basis for Processing

We process your data under the following legal bases:

Contract performance: to fulfil your orders
Legal obligation: to comply with pharmacy regulations and GPhC standards
Vital interests: where necessary for your health and safety
Consent: for optional communications, which you can withdraw at any time
Legitimate interests: to improve our services and prevent fraud

5. Special Category Data

Health data is a special category under GDPR. We process health data only where necessary to provide pharmacy services, under Article 9(2)(h) of GDPR (medical treatment and healthcare), and in accordance with our professional obligations as a registered pharmacy.

6. Data Sharing

We may share your data with:

Your GP or prescriber (to verify prescriptions or for clinical safety)
NHS systems where required
Our courier and delivery partners (name and address only)
Payment processors (securely, never stored by us)
Regulatory bodies (GPhC, MHRA) where required by law

We never sell your personal data to third parties.

7. Data Retention

We retain pharmacy records for a minimum of 8 years as required by NHS and regulatory guidelines. Financial records are kept for 6 years. We delete or anonymise other personal data when it is no longer needed.

8. Your Rights

Under GDPR, you have the right to:

Access: request a copy of your personal data
Rectification: correct inaccurate data
Erasure: request deletion (subject to legal retention obligations)
Restriction: limit how we process your data
Portability: receive your data in a machine-readable format
Object: to certain types of processing
Withdraw consent: at any time for consent-based processing

To exercise any of these rights, contact us at seva@pdluk.com. We will respond within 30 days.

9. Cookies

Our website uses essential cookies to function properly. We also use analytics cookies to understand how visitors use our site. You can control cookies through your browser settings. For details, please see our cookie banner when you first visit the site.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including SSL encryption, secure servers, and access controls. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

11. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113

12. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with a revised date. We encourage you to review this policy periodically.

Data Controller: CureAll Pharmacy, AMBE House, Commerce Way, Edenbridge TN8 6ED | seva@pdluk.com