Privacy Policy
How we collect, use, and protect your personal information
1. Introduction
Muhammad's Pharmacy ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our pharmacy at 829 Romford Road, Manor Park, London E12 6EA, use our services, or visit our website at muhammadspharmacy.com.
We are registered with the General Pharmaceutical Council (GPhC) and comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable healthcare data protection requirements.
Data Controller: Muhammad's Pharmacy, 829 Romford Road, Manor Park, London E12 6EA. Phone: 020 8911 7030.
2. Information We Collect
Personal Information
We may collect the following types of personal information:
- Identity Data: Name, title, date of birth, gender
- Contact Data: Address, email address, telephone numbers
- Health Data: Medical history, prescriptions, allergies, current medications, health conditions (this is special category data under UK GDPR)
- Transaction Data: Details of products and services you have purchased from us
- NHS Data: NHS number, GP details, exemption status
How We Collect Your Information
- Directly from you when you visit our pharmacy, request services, or contact us
- From your GP surgery via the Electronic Prescription Service (EPS)
- From the NHS Spine and other NHS systems
- From other healthcare providers involved in your care
- Automatically through cookies when you visit our website (see our Cookie Policy)
3. How We Use Your Information
We use your personal information for the following purposes:
- To dispense prescriptions and provide pharmaceutical services
- To provide NHS services including Pharmacy First, vaccinations, and medicine reviews
- To ensure safe and appropriate use of medicines through clinical checks
- To maintain accurate records as required by law and professional standards
- To communicate with you about your prescriptions, services, and health
- To manage our delivery service and ensure you receive your medications
- To comply with legal obligations including NHS requirements and GPhC standards
- To improve our services through anonymised data analysis
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract: To fulfil our contract with you to provide pharmacy services
- Legal Obligation: To comply with healthcare regulations, NHS requirements, and pharmacy law
- Vital Interests: To protect your health in emergencies
- Legitimate Interests: To run our business effectively and improve our services
- Consent: For marketing communications (where applicable)
For special category health data, we rely on the following additional conditions:
- Processing is necessary for health or social care purposes
- Processing is necessary for reasons of public health
- You have given explicit consent
5. Who We Share Your Information With
We may share your personal information with:
- NHS organisations: Including your GP, NHS England, and clinical commissioning groups
- Other healthcare providers: When relevant to your care (e.g., hospitals, specialists)
- Regulatory bodies: GPhC, NHS Counter Fraud Authority, CQC when required
- Service providers: IT support, delivery services (limited to necessary data)
- Legal authorities: When required by law or court order
We do not sell your personal information to third parties. We do not share your health information for marketing purposes without your explicit consent.
6. Data Retention
We retain your personal information in accordance with legal and professional requirements:
- Prescription records: Minimum 2 years (or longer if clinically relevant)
- Controlled drugs records: Minimum 2 years
- Private prescription records: Minimum 2 years
- Patient medication records: Duration of care plus 8 years (or 25 years from birth for children)
- Website analytics: 26 months
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (subject to legal retention requirements)
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at 020 8911 7030 or visit us at 829 Romford Road, Manor Park, London E12 6EA.
Please note that some rights may be limited where we have legal obligations to retain information (for example, prescription records).
8. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including:
- Secure NHS N3/HSCN network connections
- Encrypted electronic systems
- Password-protected computer systems
- Restricted access to personal data on a need-to-know basis
- Staff training on data protection and confidentiality
- Secure storage of paper records
- Regular security reviews and updates
9. Cookies
Our website uses cookies to improve your browsing experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
10. Children's Privacy
We provide pharmacy services to patients of all ages. For children under 16, we will typically obtain consent from a parent or guardian, unless the young person is deemed competent to consent (Gillick competent). We take extra care to protect the privacy of children's health information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
12. Complaints
If you have concerns about how we handle your personal data, please contact us first so we can try to resolve your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Muhammad's Pharmacy
829 Romford Road
Manor Park
London E12 6EA
Phone: 020 8911 7030
