The EU General Data Protection Regulation (GDPR) includes rules on giving privacy information to anyone using our online services. Further information about your rights under GDPR can be found at www.ico.org.uk
This site is provided and supported by Medicinechest Ltd for Dudley Taylor Pharmacies Ltd.
You can contact our DPO by wiriting to Medicinechest Ltd, St. Mary's Court, The Broadway, Amersham, Buckinghamshire. HP7 0UT
- Dudley Taylor Pharmacies Ltd, Medicinechest Ltd and HI Weldrick Ltd take your privacy and data protection very seriously.
- Registration on this site is only requested if either online shopping or online nhs repeat prescription ordering is enabled on the site and used by you.
Medicinechest Ltd is your Data Processor for the purposes of providing the services available on this site - nhs online repeat prescription ordering and online appointment booking, the registered user information database.
- Where enabled our online retail sales are processed and filled on our behalf by HI Weldrick Ltd
- HI Weldrick Ltd is your Data Controller for the purposes of processing your online retail orders where shopping is available on website.
- Medcinechest Ltd and HI Weldrick Ltd privacy policies are available here and here.
- Your personal information is stored encrypted on servers in the UK and the EEA. Medicinechest Ltd may at times process or transfer your personal information outside the UK (and possibly to places outside the European Economic Area) to deliver site and app services, for example to process email and push notification updates. Medicinechest Ltd shall take reasonable steps to ensure that any transfer of your personal information to a country or territory outside the European Economic Area, whose laws may provide for a lesser standard of protection for your personal information than that provided under European law, shall have adequate protection (such as model contractual arrangements as approved by the EU).
- We will otherwise never pass, sell or share your personally identifiable data to third parties except when legally required to do so or when you have specifically given us consent to do so.
You may review, edit, or soft delete your information at any time. ( Dudley Taylor Pharmacies Ltd and HI Weldrick Ltd are obliged to keep some data for certain periods of time for the purposes of patient safety, professional pharmacy regulations and NHS record keep and business processing and Medicinechest Ltd may also have to retain your data for those purposes only.)
- If you use the online shopping facility you will receive email updates on your order.
- If you use the online nhs repeat prescription facility on this site you will receive email updates on your prescription request and automated email reminders if you request them. If you use the MyPrescriptions mobile app for Android or IOS, in addition to email updates and reminders, you will receive push notification updates on your request and push notification re-order reminders.
- Every effort has been made to make sure our databases are secure. Your information can only be accessed by Dudley Taylor Pharmacies Ltd and trusted HI Weldrick Ltd and Medicinechest Ltd staff and IT contractors. Occasionally, information may be viewed by trusted third parties such as Doctors and IT personnel for the purpose of improving this site.
- The site and app, our servers and third party service providers wherever they are based, have appropriate technical and organisational measures in place to protect against unauthorised or unlawful use of your personal information as well as the accidental loss, destruction or damage of your personal information whilst under our control.
- However, no data transmission over the internet can ever be guaranteed to be 100% secure and whilst we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us and you do so at your own risk.
- Your Community Pharmacist may use the information you supply to help in improving your wellbeing by informing your health decisions through advice, diagnostic testing and the management of chronic conditions. The information you supply here is important and will help Dudley Taylor Pharmacies Ltd, HI Weldrick Ltd and Medicinechest Ltd understand your health needs better and improve the service given to you.With your permission only, Dudley Taylor Pharmacies Ltd, Medicinechest Ltd and HI Weldrick Ltd may in future use this information to:
- Update you with information on services relevant to you provided by Dudley Taylor Pharmacies Ltd and the NHS.
- Update you with relevant pharmacy and general health, diet and wellbeing retail offers
- Update you with any public health alerts, drug recalls and changes in treatment advice and also information relevant to your condition(s)
- Medicinechest Ltd and Dudley Taylor Pharmacies Ltd may disclose depersonalised data (such as aggregated statistics) in order to describe sales, prescription demand, customers, traffic patterns and other site information to prospective partners, suppliers, medical researchers, sponsors, investors and other reputable third parties and for other lawful purposes, but these statistics will include no personally identifying information.
- Medicinechest Ltd may disclose depersonalised aggregated data to third parties in the event that we sell or buy any business or assets.
- Medicinechest Ltd may disclose your personal data if all or substantially all of our assets are acquired by a third party, in which case personal data held by us about our customers may be one of the transferred assets.
- Under certain circumstances we may occasionally be required by law, court order or governmental authority to disclose certain types of personal information and we reserve the right to comply with any such legally binding request. Examples of the type of situation where this would occur would be:
- the administration of justice
- where we have to defend ourselves legally
- complying with the mandatory requirements of a government department collecting information
- to protect or defend the rights or property of Medicinechest Ltd or users of our services.
Our Privacy Notice explains the sorts of personal data we gather and process and for what purposes.
This document covers:
- Who we are
- Why we collect information, and the types of information we collect about you
- Who we might share this information with
- How long we will keep your information
- Automated processing
- How your data is stored and kept secure
- Your rights to your information and making a complaint
Who we are
We take your privacy seriously and Dudley Taylor Pharmacies Limited is committed to ensuring the security and protection of the personal information that we process and are dedicated to developing a data protection regime that is effective and meets the demands of the General data Protection Regulations (GDPR) and the new Data Protection Act 2018. (Further information about your rights under GDPR can be found at www.ico.org.uk)
Our data Protection officer (DPO) provides help and advice on our data protection obligations, to ensure we have in place the best processes for protecting your personal information.You can contact our Data Protection Officer by:
Email: firstname.lastname@example.org or, by writing to:
C/O Data Protection Officer
Dudley Taylor Pharmacies Ltd
Telephone: 01926 410 220 (Ext 105)
Why we collect information, and the types of information we collect about you
We process your personal data, which includes information from your prescriptions, such as your name, address, date of birth, contact details and details of your doctor / surgery.We may gather some information from written and verbal communications with you; for example if you fill out a consent form to receive a Pharmacy service from us.
Who we might share this information withand for what purpose:
Your care – providing pharmacy services and care to you and sharing your information with your GP and others in the wider NHS, as appropriate;
Our payments – sharing your information with the NHS Business Services Authority, others in the wider NHS, and sometimes Local Authorities, and only relevant information to those external to the NHS who negotiate and check the accuracy of our payments; and, our payment processors who handle card payments on our behalf.
Management– sharing only relevant information with the NHS Business Services Authority and others in the wider NHS, and sometimes Local Authorities; as well as those external to the NHS who ensure we maintain appropriate professional and service standards and that your declarations and ours are accurate.
Our legal basis for using your personal information
We only use your personal information where it is permitted by the laws that protect your privacy rights. We only use personal information where:
- We have your explicit consent (if consent is needed);
- We need to use the information to perform a task carried out in the public interest, to provide health care or treatment or it is necessary for reasons of public health;
- We need to use the information to comply with our legal obligations;
- We need to use the information to perform a contract with you; or
- It is fair to use the personal information where there is no disadvantage to you – this can include where it is in our interests to inform you about a service that may be appropriate to you (such a Medicines Use Review or the New medicines Service).
Where we have your consent, you have the right to withdraw it. We will let you know how to do that at the time we get your consent
How long we will keep your information
We hold your information for as long as we have a legal reason to do so.
To fulfil our obligations to NHS, regulatory or similar bodies, health related personal information may need to be retained for a period of time after you cease to be a Dudley Taylor Pharmacies patient. We will always store it securely and not use it for any other purpose.
We do not use automated decision making, including profiling.
How your data is stored and kept secure
We take the security of personal information seriously. We employ security technology, including firewalls, and Secure Socket Layers (SSL) to safeguard information and have procedures in place to ensure that our paper and computer systems and databases are protected against unauthorised disclosure, use, loss and damage.
All information kept by us is stored on our secure servers and any backup’s stored offsite are encrypted.
Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Your Rights to your Information and how to make a Complaint
- Right to object
You can object to our processing of your personal information by providing details of your objection to us.
- Access to your personal information
You have a right to a copy of the information we hold for you (in paper or electronic form) and generally without charge.
You may ask for the information we hold about you to be rectified if it is inaccurate or incomplete.
You can ask us to delete your personal information when it is no longer necessary for us to use it, you have withdrawn consent, or where we have no lawful basis for keeping it.
However, we do have the right to refuse to comply with a request for erasure where the personal data is processed for one of the following reasons:
- we need to use the information to perform a task carried out in the public interest, to provide healthcare or treatment or it is necessary for the reasons of public health in the public health arena;
- we need to use the information to comply with our legal obligations;
- archiving purposes in the public interest, scientific research, historical research or statistical purposes; or
- the exercise or defence of legal claims.
You can ask us to provide you or a third party with some of the personal information that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred.
You can ask us to restrict the personal information we use about you where you have asked for it to be erased or where you have objected to our use of it.
Should you have any issues, concerns or problems in relation to your data, or wish to notify us of data which is inaccurate, please let us know by contacting us using the contact details above.
In the event that you are not satisfied with our processing of your personal data, you have the right to lodge a complaint with the relevant supervisory authority, which is the Information Commissioner’s Office (ICO) in the UK, at any time.
The ICO’s contact details are available here: https://ico.org.uk/concerns/
You may write to: the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
This Privacy Notice provides up to date information about how we use your personal information.