Privacy Policy

1. Who We Are

AB Pharmacy is a trading name of AB Care Group Ltd (Company No. 16514123). We are the data controller for personal data collected through this website and in connection with our pharmacy services. We are registered with the General Pharmaceutical Council (GPhC) as a distance selling pharmacy (Registration No. 9013289). We are also registered with the Information Commissioner's Office (ICO) as a data controller under registration number ZC221773.

Registered address: 20a Turner Road, Edgware, HA8 6AU.

2. What Data We Collect

We may collect the following categories of personal data:

• Contact information — name, email address, telephone number, and organisation name submitted via our enquiry form
• Patient data — name, date of birth, NHS number, and prescription details necessary to dispense medicines (collected as part of our pharmacy services, not via this website)
• Usage data — information about how you interact with our website, including which links and buttons you click, the page you were on, and your browser type. This data is collected only if you accept analytics cookies and is sent to GoDaddy (Airo) via their C2 analytics service.
• Communications — records of correspondence between you and AB Pharmacy

Our website enquiry form is intended for general service enquiries only. Please do not submit residents' names, prescription details, NHS numbers, or any other medical or clinical information through the contact form. Clinical and patient data is collected and processed separately through our pharmacy services under the appropriate legal safeguards.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries submitted through our contact form — we will use the contact details you provide to get in touch with you about your enquiry
• To provide and manage pharmacy services, including dispensing and MDS
• To comply with our legal and regulatory obligations as a GPhC-registered pharmacy
• To improve our website and services
• To communicate important service updates to care home partners

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Legitimate interests — responding to enquiries and improving our services
• Legal obligation — complying with GPhC regulations, NHS requirements, and other applicable law
• Contract performance — providing services under a care home service agreement
• Vital interests — processing patient data where necessary to protect health and safety
• Consent — loading optional analytics (GoDaddy C2 Signals) only after you explicitly accept via the cookie banner or 'Cookie settings' in the footer. You may withdraw consent at any time.

5. Special Category Data

As a pharmacy, we process health data (a special category under UK GDPR) in connection with dispensing services. This data is processed under Article 9(2)(h) of UK GDPR — for the purposes of preventive or occupational medicine, medical diagnosis, and the provision of health care — and is handled with the highest standards of confidentiality in accordance with our professional obligations.

We do not collect special category data through our website enquiry form. If any such information is inadvertently submitted, it will not be used for any purpose other than to contact you to clarify your enquiry, and will be securely deleted.

6. Data Sharing

We do not sell your personal data. We may share data with:

• NHS bodies and prescribers where necessary to fulfil prescriptions
• GPhC and other regulatory bodies as required by law
• IT service providers who support our operations, under strict data processing agreements
• Care homes with whom we have a service agreement, to the extent necessary to provide services to their residents

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Pharmacy and clinical records are retained for the periods required by applicable legislation, NHS requirements and professional guidance.

Website enquiry messages are kept in our website dashboard for up to 12 months. Copies sent to info@abpharmacy.co.uk are kept for up to 24 months from the last enquiry-related communication, unless the correspondence becomes part of an ongoing service relationship or must be kept for another documented reason.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Request erasure of your data (subject to legal obligations)
• Restrict or object to processing in certain circumstances
• Data portability where processing is based on consent or contract
• Withdraw consent at any time where processing is consent-based
• Withdraw consent to optional analytics at any time via the 'Cookie settings' button in the footer

To exercise any of these rights, please contact us at info@abpharmacy.co.uk. We will respond within one month.

9. Cookies, Browser Storage, and Analytics (PECR)

This website uses browser storage and, where you consent, an analytics tool, in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR. The following describes exactly what is used, who provides it, and when it is active.

• Consent preference storage (localStorage) — We store your Accept or Decline choice in your browser's localStorage under the key 'c2_analytics_consent'. This is essential to remember your decision and does not require consent under PECR. It expires after 12 months, after which you will be asked again.
• Analytics — GoDaddy (Airo) C2 Signals (img1.wsimg.com). If you click Accept, we load a script from GoDaddy's servers (scc-c2.min.js) that records how you interact with the site, including which links and buttons you click, the section of the page, the page title, and the destination URL. This data is sent to GoDaddy. It is per-session behavioural data and is not anonymous. This script is not loaded if you click Decline, and is not loaded on a fresh visit before you make a choice. Legal basis: consent (PECR Regulation 6 / UK GDPR Article 6(1)(a)).
• Hosting provider — This website is hosted by GoDaddy Inc. GoDaddy may process technical data such as server logs and IP addresses as part of delivering hosting services. This is outside our direct control and is governed by GoDaddy's privacy policy at godaddy.com/legal/agreements/privacy-policy.

No advertising, retargeting, or third-party marketing cookies or scripts are used on this website.

How to change your choice — You can withdraw your consent or change your preference at any time by clicking the 'Cookie settings' button in the footer of this website, or by clearing your browser's localStorage for this domain. You can also control cookies through your browser settings; visit www.aboutcookies.org for guidance.

For further information about PECR and your rights in relation to cookies, please visit the Information Commissioner's Office website at ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/cookies-and-similar-technologies/.

10. Website Hosting

This website is hosted by GoDaddy Inc., a third-party hosting provider. By using this website, you acknowledge that it is subject to GoDaddy's infrastructure and platform services. GoDaddy may process certain technical data (such as server logs and IP addresses) as part of providing hosting services.

GoDaddy's own privacy policy and terms of service apply to their platform and services. You can review these at godaddy.com/legal/agreements/privacy-policy and godaddy.com/legal/agreements/universal-terms-of-service-agreement. AB Pharmacy is not responsible for the content of GoDaddy's policies, which may be updated by GoDaddy from time to time.

We have ensured, to the best of our ability, that our use of GoDaddy's hosting services is consistent with our obligations under UK GDPR and the Data Protection Act 2018.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All staff with access to personal data are trained in data protection obligations.

12. Complaints

If you have concerns about how we handle your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO). AB Pharmacy is registered with the ICO as a data controller (Registration No. ZC221773). You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

13. Changes to This Policy

We may update this privacy policy from time to time. The date at the top of this page shows when it was last revised. We encourage you to review this policy periodically.