Pharmacy fair processing notice
Data processing
We process your personal data, which includes information from your prescriptions and any other pharmacy and healthcare services we provide to you (including the Patient Group Direction service, Over The Counter sales etc.) for the purposes of:
- Your care: Providing pharmacy services and care to you and sharing your information with your GP and others in the wider NHS, as appropriate;
- Our payments: Sharing your information with NHS Business Services Authority (NHS BSA), others in the wider NHS, and sometimes Local Authorities, and only relevant information to those external to the NHS who negotiate and check the accuracy of our payments; and,
- Management: Sharing only relevant information with NHS BSA and others in the wider NHS, and sometimes Local Authorities; as well as those external to the NHS who ensure we maintain appropriate professional and service standards and that your declarations and ours are accurate.
Data retention
We retain your personal data for the following periods:
- Clinic/PGD Data: Up to 8 years from the date of the last recorded activity or until the patient turns 25 years old if they were under 18 years old at the time of supply.
- Prescription and Pharmacy Services Data: For as long as advised by NHS regulations, generally for a minimum of 2 years from the date of the last recorded activity.
- OTC sales: for a minimum of 6 months from the last recorded activity.
Why we collect and retain data
Because we provide NHS and private healthcare services, we have a legal obligation to collect and use personal data to ensure that the service we provide is safe and effective, and that our record-keeping is in line with the law. If you do not provide this information, it may restrict which pharmacy services are available to you.
You have a right to a copy of the information we hold for you (in paper or electronic form) and generally without charge. You may seek to rectify any inaccurate information.
You may object to us holding your information. You may lodge a complaint with the Information Commissioner's Office (ICO).
Our Data Protection Officer is: