Legal

Privacy Policy

How we collect, use, and protect your personal information.

Last updated: January 2025

This Privacy Policy explains how WGA UK LTD trading as Prescriptions Pharmacy collects, uses, and protects personal information when you visit our website or use our services. We are committed to protecting your privacy and handling your data in an open and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1 Who We Are

The data controller responsible for your personal information is:

  • Company: WGA UK LTD (trading as Prescriptions Pharmacy)
  • Address: The Kiosk, South Avenue, Manchester Road, Prescot, Merseyside, L34 1LT
  • GPhC Registration: 1109127
  • Email: prescriptionspharmacy@gmail.com
  • Telephone: 01514262958

If you have any questions about how we handle your data, please contact us using the details above.

2 Information We May Collect

We may collect the following categories of personal information:

  • Identity data: first name, last name, date of birth, gender.
  • Contact data: email address, telephone number, postal address.
  • Health data: medical information you provide when booking a pharmacy service or completing a health questionnaire (this is special category data under UK GDPR).
  • Technical data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and other technology on the devices you use to access our website.
  • Usage data: information about how you use our website and services.
  • Communication data: messages you send us via our contact form or by email.

We do not collect any information about criminal convictions or offences.

3 How We Use Your Information

We use your personal information for the following purposes:

  • To register you as a new patient or customer.
  • To process and manage your appointment bookings and pharmacy service requests.
  • To provide you with pharmacy services, including dispensing medicines, clinical consultations, and health reviews.
  • To communicate with you regarding your appointments, prescriptions, or service queries.
  • To send you service-related notifications and reminders.
  • To improve our website, services, and customer experience.
  • To comply with our legal and regulatory obligations as a registered pharmacy.
  • To respond to your enquiries submitted via our contact form.

We will only use your personal information for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason compatible with the original purpose.

4 Lawful Basis for Processing

We rely on the following lawful bases for processing your personal data:

  • Contract: processing necessary to fulfil a service you have requested or to take steps before entering into a contract.
  • Legal obligation: processing necessary to comply with our obligations as a GPhC-registered pharmacy, including NHS requirements.
  • Vital interests: where processing is necessary to protect someone's life.
  • Legitimate interests: for improving our services and communicating with you about your care, provided these interests are not overridden by your rights.
  • Consent: where you have given explicit consent, particularly for special category health data used in optional services.

For special category health data, we rely on Article 9(2)(h) UK GDPR — processing for the purposes of preventive or occupational medicine and the provision of health or social care.

5 Booking Forms & Health Questionnaires

When you complete a booking form or health questionnaire on our website or through our booking system, we collect the personal and health data you provide. This information is used solely to:

  • Confirm and manage your appointment.
  • Ensure our pharmacists can provide you with safe and appropriate care.
  • Meet our clinical and regulatory documentation requirements.

Health information provided in booking forms is treated as confidential and accessed only by authorised clinical staff involved in your care.

6 Sharing Your Information

We may share your personal information with:

  • NHS bodies and healthcare providers: where required to provide NHS services or refer you for further care.
  • Technology and software providers: who supply our booking, dispensing, or clinical systems and act as data processors on our behalf.
  • Regulatory bodies: such as the GPhC, NHS England, or ICO, where required by law.
  • Other healthcare professionals: your GP or another clinician involved in your care, with your knowledge.

We do not sell, rent, or trade your personal information with third parties for marketing purposes. We require all third parties to respect the security of your personal data and to treat it in accordance with applicable data protection law.

7 Data Security

We have implemented appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

  • Encrypted data transmission (SSL/TLS) on our website.
  • Access controls limiting data access to authorised personnel only.
  • Regular review of our data handling and security procedures.
  • Staff training on data protection and patient confidentiality.

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security. If you suspect a data breach, please contact us immediately at prescriptionspharmacy@gmail.com.

8 Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, or reporting requirements.

  • Patient health records: retained for a minimum of 8 years from the date of last entry (or until age 25 for children's records), in line with NHS and GPhC guidance.
  • Booking and appointment data: retained for 2 years from the date of your appointment.
  • Contact form enquiries: retained for 12 months.
  • Website analytics data: retained in anonymised form.

At the end of the applicable retention period, your data will be securely deleted or anonymised.

9 Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: to request a copy of your personal data (Subject Access Request).
  • Right to rectification: to request correction of inaccurate or incomplete data.
  • Right to erasure: to request deletion of your data where there is no compelling reason for its continued processing.
  • Right to restrict processing: to request that we limit how we use your data in certain circumstances.
  • Right to data portability: to receive your data in a structured, machine-readable format.
  • Right to object: to object to processing based on legitimate interests or for direct marketing.
  • Rights related to automated decision-making: not to be subject to solely automated decisions that significantly affect you.

To exercise any of these rights, please contact us at prescriptionspharmacy@gmail.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10 Cookies

Our website uses cookies to distinguish you from other users and to improve your browsing experience. Cookies are small text files placed on your device by your web browser.

We use the following types of cookies:

  • Strictly necessary cookies: essential for the website to function properly.
  • Analytical/performance cookies: help us understand how visitors interact with our website so we can improve it.
  • Functionality cookies: remember your preferences to personalise your experience.

You can control and delete cookies through your browser settings. Disabling cookies may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies.

11 Third-Party Links

Our website may contain links to third-party websites, plug-ins, or applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy notice of every website you visit.

12 Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental or guardian consent. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will take steps to delete that information.

Where we provide services to children, we require consent from a parent or legal guardian and apply additional safeguards to the handling of their health data.

13 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically. Significant changes will be communicated to you directly where required.

14 Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

  • Email: prescriptionspharmacy@gmail.com
  • Post: WGA UK LTD, The Kiosk, South Avenue, Manchester Road, Prescot, Merseyside, L34 1LT
  • Telephone: 01514262958

You may also contact our booking system provider's data protection team if your query relates specifically to data held in our online booking platform.