Privacy Policy

Who We Are

Our website address is: www.ashcroftpharmacy.co.uk

Ashcroft Pharmacy is dedicated to the preservation of our visitors’ privacy and we recommend that you read this full privacy policy to understand how this is done.

What Personal Data We Collect And Why We Collect It

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

• When you visit our website, we automatically collect and save your IP address.
• Where you volunteer this information (i.e. by filling in an online form to use our services), we will also save your name, delivery address, email address, date of birth, telephone number, GP address, patient notes, consultation notes, payment records and details of the medicines you have ordered.

Your personal information is used for the following:

• To provide our services to you (namely, medical consultations for prescription medications).
• To send you details of our goods and services.
• By making a purchase on our website, you are opting in to receive marketing communications, including promotions, sales, and offers related to our products and services. You can opt out of these communications at any time by following the unsubscribe instructions in the email or by contacting us directly.

How we share your personal information:

• With other third parties where this is necessary to deliver the services.
• With other business entities within Ashcroft Pharmacy.
   

Data Control and Protection

Ashcroft Pharmacy, whose registered office is at 28a Barry Street, 1st Floor, Bradford, West Yorkshire, BD1 2AW is the data controller responsible for your personal data (collectively "Ashcroft Pharmacy", "we", "us" or "our" in this privacy policy).

Patient Confidentiality

As some of the information we collect is of medical nature, this information is treated with the utmost confidentiality. This will never be disclosed unless we are legally required or permitted to do so. This information will not be used for marketing purposes unless you give us direct permission.

Medical data, which may include your patient records, order history and any consultation notes, may be collected via the online forms and medical questionnaires you complete. This can also be collected through telephone conversations and secure messaging with us..

This medical data and order history is treated with the highest confidentiality, which means that our staff can only access it if they are a health professional. We do not disclose medical data without consent, unless there is a legal requirement for us to do so.

Information about our products and services will not be sent to you using your medical data, unless you have provided us with your permission to do so in this way.

Information We Collect

We collect and process the following data about you to aid in providing our services and to run our website. This is specific information that is volunteered by you and used in very specific ways.

Information provided when you communicate with us by telephone, post, email and submission of information online.

• The information provided when you register for information through the website.
• Information provided when completing forms and medical questionnaires on www.ashcroftpharmacy.co.uk - including details provided at the time of using our site, such as; consultations for treatments, posting material or requesting further services.
• This information may be personal in nature and consist of name, address, email address, date of birth, gender, telephone number, your GP's name and address, any medical history and medical information, consultation notes, payment records and details of previously ordered medicines.

Use of Information

To enable us to provide services, the information that we collect from you is used:

• To enable us to provide our health services to you.
• To enable us to comply with regulatory requirements.
• To communicate with you in the event that there is a query or problem with your order.
• To inform you of any changes to our website, services or goods and products.
• For record keeping purposes.
• To track and analyse activity on our website.
• To handle payments.
• Marketing purposes (when permission has been given to do so). 
• To offer information requested from us relating to products or services.
• To offer information to you relating to other products that interest you.
• Allowing Ashcroft Pharmacy to use your personal information and enabling them to provide you with information regarding unrelated goods and services, which we believe may interest you.
• You can withdraw your permission for us to contact you for marketing purposes at any time by emailing us at info@ashcroftpharmacy.co.uk. In instances where you have given us your permission in advance, we may also use your medical data to send you specialist information about products and services. These details would not be shared with third parties or enable them to send you details of their goods and services.

How Long We Retain Your Data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What Rights You Have Over Your Data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. To fulfil our obligations to the General Pharmaceutical Council, the Department of Health and Social Care, and other regulatory or similar bodies, health-related personal information may need to be retained for a period of time after you cease to be a customer.

We do our utmost to ensure that all reasonable steps are taken to make sure that your personal information is treated and stored securely and in accordance with this Privacy Policy.

Disclosing Your Information

As set out above, we may disclose your personal information to third parties, in accordance with this Privacy Policy, in the following circumstances:

• To enable us to provide our core services, for example providing address details with our suppliers and other third parties who will deliver the services.
• If you have agreed for us to keep your GP informed of the details provided.
• Where you have given permission to share your information with third parties for marketing purposes.
• If we are legally required or permitted by law to disclose your personal information, for example with National Health Service Providers or regulatory bodies.

In addition, we may disclose your personal information to third parties, in accordance with this Privacy Policy, to reduce the risk of fraud.

Your rights

Under the General Data Protection Regulation (GDPR), you, as a data subject have a number of rights which are detailed below:

Request access to your personal data that we hold about you (commonly known as a "data subject access request" or DSAR). This enables you to receive a copy of the personal data we hold about you or are otherwise processing.

Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected. We will need to verify the accuracy of the new data you provide to us.

Request erasure of your personal data that we hold about you. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third-party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transfer of your personal data to you or to a third-party. We will provide to you, or a third-party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

Third Party Links

On occasion we include links to third parties on this website. These links do not mean that we endorse the site's policy towards privacy and you should always review their privacy policy before offering any personal details.

Use of Cookies

“Cookies” are pieces of code that a website transfers to your hard drive to store and sometimes track information about you. Cookies are common and won’t do anything to harm your system – they simply store or gather information. They help our website function properly for you.

We may collect information about your computer including, where available, your IP address, operating system and browser type for system administration as part of our audit trail process. Most web browsers automatically accept cookies, but if you prefer, you can change your browser to prevent that. You are not obliged to accept cookies and you can adjust your browser’s setting to prevent it from accepting cookies on your computer – go to www.allaboutcookies.org for instructions on how to disable cookies. However, you may not be able to use our site fully.

Cookies are specific to the server that created them and cannot be accessed by other servers, which means they cannot be used to track your movements around the web. Although they can be used to store information which may identify a user’s computer, cookies do not personally identify users and passwords and credit card information are not stored in cookies.

Our Website uses Per-Session cookies. We only use these whilst you are visiting our website and they are deleted when you leave. They remember you as you move between pages, for example recording the items you add to an online shopping basket or your prescription list. They also help maintain security.

Our Website also uses Google Analytics cookies, to find out how people find our site, what content they look at and to gather customer journey information across our site to understand how people use the site and where we can improve it. We also use Google Analytics to collect aggregated statistics to describe traffic patterns, usage and other site information to prospective partners, suppliers, medical researchers, sponsors, investors and other reputable third parties and for other lawful purposes, but these statistics will include no personally identifying information.

Your right to complain

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. The ICO can be reached here. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Contacting Us

Please do not hesitate to contact us regarding any matter relating to this Privacy Policy at info@ashcroftpharmacy.co.uk.