Privacy policy
Last updated
This explains what personal information we collect when you use this website or order from us, why we need it, who we share it with and the choices you have. Your consultation answers are health information, and we treat them as a confidential clinical record.
Who we are
Hightown Pharmacy (Merseyside) Limited is the data controller for the personal information described here. We are a company registered in England and Wales, number 05087703, with our registered office at Office 1, 1st Floor 41-43 Liverpool Road, Cadishead, Manchester, M44 5BQ. We trade as Hightown Pharmacy from 2 Alt Road, Hightown, Liverpool, L38 0BF.
We are registered with the Information Commissioner's Office, registration number Z9505818. Our GPhC premises registration number is 1089535 and our superintendent pharmacist is Daniel Higham, GPhC registration number 2215554.
What we collect
- Your details: your name, date of birth, home and delivery addresses, email address and telephone number.
- Health information: your consultation answers, the medicines you order, and any notes or messages about your treatment. Where needed, your GP's details.
- Orders and payments: what you ordered, when, the delivery method and payment status. Card payments are handled by our payment provider; we do not store your full card number.
- Your account: your sign-in details, order history, plans and messages with the pharmacy.
- Website use: technical information such as your IP address and browser, and, only if you allow it, analytics and advertising cookies. The cookie policy lists every cookie.
How we use it and why we are allowed to
- To assess, prescribe, dispense and deliver your medicines. We rely on our contract with you. For health information we rely on the provision of health care by health professionals who owe you a duty of confidentiality.
- To check your identity against your home address before supplying pharmacy or prescription medicines, and to prevent fraud and misuse. We do this to meet our professional and legal obligations as a registered pharmacy.
- To keep pharmacy and prescription records that the law and our regulator require us to keep.
- To answer your questions, handle complaints and keep you updated about your order. We rely on our contract with you and our legitimate interest in running the pharmacy properly.
- To keep the website secure and working. We rely on our legitimate interest in protecting our customers and systems.
- To measure how the website is used and how our advertising performs, only when you allow analytics or advertising cookies. You can change that choice at any time on the cookie policy page.
We only send you marketing if you have agreed to receive it, and every marketing message tells you how to stop. Prescription decisions are made by a prescriber, not by an automated system.
Who sees your information
Your consultation is only seen by the pharmacy team and the prescriber reviewing your order. It is never passed to advertisers or used to target you. We share only what each organisation needs:
- Priorly provides the systems behind this website, your account, consultations and orders, and processes information on our instructions.
- Our payment provider processes card payments.
- Identity verification services help us confirm your identity against your home address.
- Royal Mail receives your name and delivery address so it can deliver your parcel.
- Cloudflare helps protect the website from attacks and misuse.
- Google provides analytics and advertising measurement, only if you allow those cookies.
- Your GP or other health professionals, when it is needed for your safe care. We will normally ask for your permission first, unless the law allows or requires us to share without it.
- Regulators, the police or courts, when the law requires us to.
Some of these providers may process information outside the UK. When they do, the transfer is protected by UK adequacy regulations or by contract terms approved for international transfers.
How long we keep it
Consultations, prescriptions and pharmacy records are clinical records. We keep them for as long as the law and professional guidance for pharmacies require, then delete them securely. Order and payment records are kept for as long as tax and accounting rules require. Cookie lifetimes are listed on the cookie policy page.
Keeping it safe
Access to your records is limited to the people who need it to look after you and your order. The website uses encrypted connections, and our providers are bound by contracts that require them to protect your information.
Your rights
You can ask for a copy of the information we hold about you, and ask us to correct it, delete it, limit how we use it, or send it to you or someone else in a portable format. You can also object to how we use it, and withdraw consent you have given at any time.
Some rights have limits. For example, we cannot delete clinical records that the law requires us to keep. We will explain if a limit applies. There is no charge, and we will normally reply within one month.
You must be 18 or over to use our services.
Contact us or complain
To use your rights or ask about your data, email [email protected], call 0151 929 3130, or write to Hightown Pharmacy, 2 Alt Road, Hightown, Liverpool, L38 0BF.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
We may update this policy. The date at the top shows when it last changed.