Version 0.1 (draft) · Last updated [date]
Okus Pharmacy & Health Clinic ("we", "us") is the data controller. The Health Centre, Curie Avenue, Swindon, SN1 4GB. Telephone: 01793 265965. Email: okus@kmcaregroup.com. Our Superintendent Pharmacist is Tanvir Ali (MPharm), GPhC registration 2227431. Our Data Protection Officer / Information Governance contact is [name and email to be confirmed].
How we handle the information you give us when you sign up for our optional prescription reminder emails. Our general pharmacy privacy notice covers everything else.
Your first name and email address; the date you last ordered; your reminder schedule; and a record of your consent (what you agreed to, and when). We do not ask for your NHS number, date of birth or address for this service.
We use it only to send you reminder emails suggesting it may be time to request your next prescription. Because information about your medication is health information (special-category data), we rely on your consent — UK GDPR Article 6(1)(a) and Article 9(2)(a) (explicit consent). [Final lawful basis to be confirmed by our DPO.]
After you register, we email you to confirm your address; reminders start only once you confirm. We then email you about every 28 days based on the date you gave us. The emails are sent automatically. Reminder emails contain no medication name, NHS number, date of birth or address.
Only our authorised pharmacy team. We use trusted suppliers who process data on our behalf under contract: our database provider [provider to be confirmed], our email-sending provider [provider to be confirmed], and our bot-protection provider [provider to be confirmed]. We do not sell your data or use it for anything other than the reminder service (unless you separately opted in to marketing).
We store your data in the UK or European Economic Area [region and any transfer safeguards to be confirmed].
Encryption in transit and at rest, access controls, staff confidentiality, and supplier contracts. Reminder emails contain no NHS number, date of birth, address or (by default) medication name.
Up to 6 months, then we delete it automatically. We also stop and delete sooner if you withdraw, if reminders repeatedly fail, or if you ask us to. Deleted information may persist briefly in secure backups until those backups are overwritten (within [30] days).
You can: withdraw consent and stop reminders at any time (one click in any reminder email); ask for a copy of your data; ask us to correct or erase it; ask us to restrict or object to processing. To exercise any right, use the link in a reminder email or contact us using the details above. Because we rely on consent, you can withdraw at any time and we will stop.
Please contact us first. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or 0303 123 1113.
← Back to Okus Pharmacy