Introduction
PHARMKG LTD trading as Pharmacy + Me (“Pharmacy + Me”, “we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Notice explains:
- What information we collect
- Why we collect it
- How we use your information
- How we protect your information
- Your rights regarding your personal data
- How we may access NHS information for direct patient care purposes
- How long we retain information
- Who to contact regarding privacy matters
By using our services, you acknowledge that your information may be processed in accordance with this Privacy Notice.
About Us
Pharmacy + Me is an online healthcare and pharmacy service operated by PHARMKG LTD. We provide healthcare consultations, prescribing services, pharmacy services and associated healthcare support.
We process personal information in accordance with UK data protection legislation and healthcare regulatory requirements.
ODS Code
B1M9Z
Legal Basis for Processing Personal Data
We process your personal information under the UK GDPR and the Data Protection Act 2018.
Lawful bases under Article 6 (general personal data)
- Article 6(1)(c) — Legal obligation
- Article 6(1)(e) — Public task
- Article 6(1)(f) — Legitimate interests
Lawful bases under Article 9 (special category health information)
- Article 9(2)(h) — Provision of health or social care
- Article 9(2)(i) — Public interest in public health
Information We Collect
We may collect the following categories of information:
Personal information
- Name
- Date of birth
- Address
- Telephone number
- Email address
- Gender
- GP details
- Emergency contact details where required
Health information
- Medical history
- Symptoms
- Current medication
- Allergies
- Treatment history
- Consultation records
- Prescribing information
- Clinical notes
- Images and uploaded information provided during consultations
Identity verification information
Where necessary, we may collect information required to verify identity in accordance with our regulatory obligations.
Website usage information
- IP address
- Browser information
- Device information
- Website usage patterns
- Cookie information
Summary Care Records (SCR) and NHS Information
Pharmacy + Me may access NHS information systems, including Summary Care Records (SCR), only with your consent where permitted under NHS agreements and relevant legislation.
Access to NHS information will occur only:
- For direct patient care purposes
- To support prescribing decisions
- To support clinical assessment
- To support patient safety
- To support safe treatment decisions
- Where a legitimate clinical relationship exists with the patient
- Where access is necessary and proportionate
Access to NHS information is strictly limited to authorised healthcare professionals and authorised personnel with a legitimate need to access such information.
All access to NHS systems is monitored, logged and subject to audit.
Caldicott Principles
Pharmacy + Me follows the Caldicott Principles governing the use of confidential patient information. This includes:
- Justifying the purpose of information use
- Using information only when necessary
- Using the minimum necessary information
- Restricting access on a need-to-know basis
- Ensuring staff understand their responsibilities
- Complying with legal obligations
- Maintaining patient confidentiality and security
How We Use Your Information
We use information to:
Provide healthcare services
- Conduct consultations
- Review questionnaires
- Assess suitability for treatment
- Prescribe medication
- Dispense medications
- Monitor treatment outcomes
Patient safety
- Prevent medication errors
- Assess risks and contraindications
- Review drug interactions
- Support continuity of care
Regulatory requirements
- Meet legal obligations
- Meet pharmacy regulations
- Meet NHS obligations
- Meet healthcare governance requirements
Service improvement
- Improve website performance
- Improve healthcare services
- Monitor quality and safety
Clinical Communications
We may contact you regarding:
- Consultation outcomes
- Treatment updates
- Appointment information
- Medication reminders
- Safety communications
- Delivery information related to healthcare services
These communications form part of providing healthcare services and are not marketing communications.
Marketing Communications
Marketing communications are handled separately from healthcare communications.
Marketing communications will only be sent where appropriate consent has been provided. You may withdraw consent at any time.
Data Sharing
We do not sell personal information.
Information may be shared only where necessary with:
- Healthcare professionals involved in your care
- NHS organisations where appropriate
- Regulators where legally required
- Law enforcement agencies where legally required
Information sharing occurs only where there is an appropriate lawful basis.
How We Protect Your Information
We implement security measures including:
Technical measures
- Encryption of data in transit and at rest
- Multi-factor authentication
- Secure NHS-compliant systems
- Secure server infrastructure
- Firewalls
- Monitoring systems
Administrative measures
- Role-based access controls
- Confidentiality agreements
- Staff training
- Information governance training
- Regular security reviews
Operational measures
- Audit logging
- Access monitoring
- Incident management procedures
- Regular security assessments
Data Retention
Information is retained only for as long as necessary and in accordance with:
- NHS Records Management Code of Practice
- Data Protection Act requirements
- Pharmacy regulatory requirements
- Legal obligations
Clinical records may be retained in line with applicable healthcare retention schedules.
Your Rights
You may have the right to:
- Access your personal information
- Request correction of inaccurate information
- Request restriction of processing
- Request erasure where applicable
- Object to certain processing activities
- Withdraw consent where consent is relied upon
- Lodge a complaint with the Information Commissioner’s Office (ICO)
Cookies
Our website uses cookies and similar technologies to improve website functionality and user experience.
Cookie settings can be adjusted through your browser preferences.
Changes to this Privacy Notice
We may update this Privacy Notice periodically.
Updated versions will be published on our website with revised effective dates.
Contact Us
For privacy enquiries, please contact us using the details below.
support@pharmacyme.co.uk
Telephone
01992 329953
Registered Address
261 High Street
Waltham Cross
Hertfordshire
EN8 7BE
For data protection concerns please contact:
Data Protection Lead
Konstantin Gkioka
SIRO
Konstantin Gkioka
Caldicott Guardian
Neal Sukhadia