Privacy Policy

1. Who We Are

AB Pharmacy is a trading name of AB Care Group Ltd (Company No. 16514123). We are the data controller for personal data collected through this website and in connection with our pharmacy services. We are registered with the General Pharmaceutical Council (GPhC) as a distance selling pharmacy (Registration No. 9013289). We are also registered with the Information Commissioner's Office (ICO) as a data controller under registration number ZC221773.

Registered address: 20a Turner Road, Edgware, HA8 6AU.

2. What Data We Collect

We may collect the following categories of personal data:

• Contact information — name, email address, telephone number, and organisation name submitted via our enquiry form
• Patient data — name, date of birth, NHS number, and prescription details necessary to dispense medicines (collected as part of our pharmacy services, not via this website)
• Usage data — IP address, browser type, pages visited, and time spent on our website (collected via cookies and analytics tools)
• Communications — records of correspondence between you and AB Pharmacy

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries submitted through our contact form
• To provide and manage pharmacy services, including dispensing and MDS
• To comply with our legal and regulatory obligations as a GPhC-registered pharmacy
• To improve our website and services
• To communicate important service updates to care home partners

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Legitimate interests — responding to enquiries and improving our services
• Legal obligation — complying with GPhC regulations, NHS requirements, and other applicable law
• Contract performance — providing services under a care home service agreement
• Vital interests — processing patient data where necessary to protect health and safety

5. Special Category Data

As a pharmacy, we process health data (a special category under UK GDPR) in connection with dispensing services. This data is processed under Article 9(2)(h) of UK GDPR — for the purposes of preventive or occupational medicine, medical diagnosis, and the provision of health care — and is handled with the highest standards of confidentiality in accordance with our professional obligations.

6. Data Sharing

We do not sell your personal data. We may share data with:

• NHS bodies and prescribers where necessary to fulfil prescriptions
• GPhC and other regulatory bodies as required by law
• IT service providers who support our operations, under strict data processing agreements
• Care homes with whom we have a service agreement, to the extent necessary to provide services to their residents

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Pharmacy and clinical records are retained for the periods required by applicable legislation, NHS requirements and professional guidance. Enquiry data is retained for up to two years unless a service relationship is established.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Request erasure of your data (subject to legal obligations)
• Restrict or object to processing in certain circumstances
• Data portability where processing is based on consent or contract
• Withdraw consent at any time where processing is consent-based

To exercise any of these rights, please contact us at [email protected]. We will respond within one month.

9. Cookies and the Privacy and Electronic Communications Regulations (PECR)

This website uses cookies in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR. Cookies are small text files placed on your device when you visit a website. We only set cookies that are strictly necessary for the operation of this website. We do not currently use advertising, tracking, or third-party marketing cookies.

The cookies we use fall into the following categories:

Strictly necessary cookies — These cookies are essential for the website to function and cannot be switched off. They are set in response to actions you take, such as submitting an enquiry form. They do not store any personally identifiable information. No consent is required for strictly necessary cookies under PECR.

Functional cookies — These cookies allow the website to remember choices you make (such as your preferred language or region) and provide enhanced, more personal features. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies, some or all of these services may not function properly.

Analytics cookies — We may use analytics tools to understand how visitors interact with our website. These cookies collect information in an aggregated, anonymous form and help us improve the site. Where analytics cookies are used, they are only set with your prior consent in accordance with PECR Regulation 6.

Cookies set by our hosting provider — This website is hosted by GoDaddy Inc. GoDaddy may set technical cookies as part of delivering hosting and infrastructure services. These are strictly necessary for the delivery of the website and are governed by GoDaddy's own privacy policy, available at godaddy.com/legal/agreements/privacy-policy.

How to control cookies — You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling cookies may affect the functionality of some parts of this website. For guidance on managing cookies in your browser, visit www.aboutcookies.org or www.allaboutcookies.org.

For further information about PECR and your rights in relation to cookies, please visit the Information Commissioner's Office website at ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/cookies-and-similar-technologies/.

10. Website Hosting

This website is hosted by GoDaddy Inc., a third-party hosting provider. By using this website, you acknowledge that it is subject to GoDaddy's infrastructure and platform services. GoDaddy may process certain technical data (such as server logs and IP addresses) as part of providing hosting services.

GoDaddy's own privacy policy and terms of service apply to their platform and services. You can review these at godaddy.com/legal/agreements/privacy-policy and godaddy.com/legal/agreements/universal-terms-of-service-agreement. AB Pharmacy is not responsible for the content of GoDaddy's policies, which may be updated by GoDaddy from time to time.

We have ensured, to the best of our ability, that our use of GoDaddy's hosting services is consistent with our obligations under UK GDPR and the Data Protection Act 2018.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All staff with access to personal data are trained in data protection obligations.

12. Complaints

If you have concerns about how we handle your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO). AB Pharmacy is registered with the ICO as a data controller (Registration No. ZC221773). You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

13. Changes to This Policy

We may update this privacy policy from time to time. The date at the top of this page shows when it was last revised. We encourage you to review this policy periodically.