Newdays Pharmacy Limited (referred to as “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our website (https://newdayspharmacy.com/) and interact with us via email or in person at one of our pharmacy locations.

By using our services, ordering prescriptions and using our website, you confirm that you have read, understood, and agree to this privacy policy in its entirety. If you do not accept them, you should not use our services or website.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Who We Are

Newdays Pharmacy Limited operates community pharmacies in England, offering healthcare services and advice. We are a data controller, which means we determine the purposes and methods of processing your personal data.

Contact Details:

• Registered Address: 5 Gypsy Lane, Marlow, SL7 3JT
• Data Protection Officer (DPO): Alix Picard
• Email: alix.picard@staging-f14d-newdayspharmacy.wpcomstaging.com
• Phone: 01628 484445.

Personal Data We Collect

We use different methods to collect data from and about you, which may not always be collected directly from you. We collect and process the following categories of data:

Personal Identifiable Information

• Name
• Address
• Date of birth
• Email address
• Phone number
• Payment data
• Your image

Health Data (Special Category Data)

• Details of medical conditions
• Prescriptions and medications
• Other health-related information provided by you or healthcare professionals

Communications Data

• Emails, messages, or inquiries sent to us
• Your social media username

Technical Data

• IP address, login data
• Browser type and version
• Your browsing history prior to visiting our website
• Device information
• Cookies and tracking information

How We Collect Your Data

• Directly from You: When you register on our website, contact us via email, or provide information in person at one of our pharmacies.
• Through Our Website: Via online forms, cookies, and analytics tools.
• Through Social Media: if you interact with us via social media we may collect your social media username if you interact with us through those channels, to help us respond to your comments, questions, or feedback.
• From Third Parties: Such as healthcare providers, repeat prescription services or NHS services, as necessary for dispensing medications and providing care. This may also include data we are given about you by your family or professional carers who assist you.
• On CCTV: When in our pharmacies you may notice we use CCTV to detect and prevent crime and may capture your image on those cameras. We use CCTV to ensure the safety and security of our staff and customers. The images captured may be used to prevent and detect crime, and therefore may be shared with law enforcement.

How We Use Your Data

We process personal data for the following purposes:

• To Provide Pharmacy Services to you: Dispensing prescriptions, providing healthcare advice, and delivering related services.
• To Obtain Payment: We may process your payment card details to obtain payment from you. We do not store these details. We also need to supply your details in order to obtain payment for services we provide to you from the NHS or other payment provider.
• To Comply with Legal Obligations: Retaining records as required by the NHS or healthcare regulators.
• To Communicate with You: Responding to enquiries, sending reminders, and sharing updates.
• For Website Operations: Improving user experience, ensuring website security, and maintaining functionality.
• To Prevent or Investigate Crime: To act as a deterrent against crime and where a crime has been committed, to detect and investigate crime against us or our customers.

Legal Bases for Processing

• Consent: For marketing communications and providing you with healthcare services.
• Contractual Necessity: To provide services requested by you.
• Legal Obligations: To comply with healthcare regulations and data retention laws.
• Legitimate Interests: To improve services, protect our business operations and prevent crime.

How We Protect Your Data

We implement robust security measures, including:

• Encryption of data transmitted through the website.
• Secure storage systems and restricted access within our pharmacies.
• Password and authentication for all devices used by our business.
• Access control to ensure only those who need access to personal information for their role have access to personal information
• Regular staff training on data protection and confidentiality.
• Compliance with NHS and healthcare regulatory standards.

Sharing Your Data

We may share your personal data with:

• Healthcare Providers: To support your medical care.
• Regulatory and Enforcement Authorities: As required by law.
  Payment Providers: In order to receive payment for services we provide to you, we must share your data with the NHS Business Services Authority, others in the wider NHS, Local Authorities, private hospitals and private care home providers involved in your care.
• Infrastructure providers: who provide compliance, IT, and system administration services for IT support and website management.
• Service Providers: services providers supporting our pharmacies with the supply and/or taking of medicines by our patients, such as Healthera, a repeat prescription management application, available to our customers who have registered directly with Healthera for this service.
• Professional advisers: including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
• Third parties: to whom we may choose to sell, transfer, or merge parts of our business or our assets; alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy

We will never sell your personal data to third parties but we may share non identifiable aggregated data (statistics or demographic data) with the NHS and third parties to help improve the NHS or our service provisions.

By providing us with your personal data you agree that we may share personal data, on a confidential basis, with third-party individuals and organisations that assist us, including contractors, service providers, web hosts, and others as set out above in order to carry out our business.

Your Rights

Under the UK GDPR, you have the following rights:

• Right to Access: to request a copy of the personal data that we hold about you.
• Right to Rectification: to correct inaccuracies in your data.
• Right to Erasure: to request deletion of your data (subject to legal requirements).
• Right to Restriction: to limit how we process your data.
• Right to Data Portability: to receive your data in a structured, electronic format.
• Right to Object: to opt-out of certain processing activities.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

If you wish to exercise your rights, please contact us at alix.picard@staging-f14d-newdayspharmacy.wpcomstaging.com

You can also lodge a complaint with the Information Commissioner’s Office. They can be contacted using the information provided at: https://ico.org.uk/concerns/.

Data Retention

We will retain your personal data for as long as is necessary to provide you with our services and for a reasonable period thereafter to enable us to meet our contractual and legal obligations and to deal with complaints and claims ad out obligations to the NHS. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. At the end of the retention period, your personal data will be securely deleted or anonymised, for example by aggregation with other data, so that it can be used in a non-identifiable way for statistical analysis and business planning.

Cookies Policy

What Are Cookies?

Cookies are small files stored on your device to enhance website functionality and user experience.

Types of Cookies We Use

• Necessary Cookies: Essential for website functionality.
• Analytical Cookies: To track website usage and improve performance.
• Preference Cookies: To remember your preferences.

How to Manage Cookies

You can adjust your browser settings to reject cookies or delete existing cookies. Note that disabling cookies may affect website functionality.

Third-Party Links

Our website may include links to third-party websites. We are not responsible for the privacy practices of these websites.

Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be available on our website.

Last modified: 20 November 2024