Home / GDPR

GDPR

Our commitment to protecting patient information, handling data responsibly, and supporting your rights under UK data protection law.

Data protection commitment

1. Our GDPR Commitment

Brookside Pharmacy is committed to processing personal information lawfully, fairly, transparently, and securely. We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant healthcare confidentiality requirements.

2. What Personal Data Means

Personal data is information that can identify you. In a pharmacy setting, this may include your name, contact details, date of birth, address, NHS number, prescription information, consultation notes, medical history, medication details, and service enquiry information.

Health information is special category data and is handled with extra care because it is sensitive.

3. How We Use Your Data

  • To dispense prescriptions and provide pharmacy services.
  • To assess suitability for NHS and private services.
  • To contact you about appointments, enquiries, medicines, or service follow-up.
  • To keep clinical records and meet legal, regulatory, and professional obligations.
  • To communicate with NHS services, GP practices, prescribers, or other healthcare professionals where appropriate.

4. Lawful Basis For Processing

Depending on the situation, we may process your information because it is necessary for healthcare provision, legal obligations, legitimate interests, contract-related services, or your consent. Where consent is required, you can withdraw it at any time.

5. Data Security

We use appropriate safeguards to protect personal information, including access controls, staff confidentiality, secure systems, and responsible record handling. We only allow access to personal information where it is needed for pharmacy work or legal/regulatory purposes.

6. Sharing Information

We may share relevant information with NHS bodies, GP practices, prescribers, hospitals, care providers, payment providers, IT system suppliers, regulators, or other organisations where required for healthcare, safety, legal compliance, or service delivery.

We do not sell patient information.

7. Your Data Rights

Under UK data protection law, you may have the right to:

  • Access a copy of your personal data.
  • Ask us to correct inaccurate information.
  • Ask for deletion where this is legally possible.
  • Restrict or object to certain processing.
  • Request data portability in certain circumstances.
  • Complain to the Information Commissioner's Office (ICO).

8. Retention

We keep records only for as long as needed for healthcare, legal, regulatory, insurance, and professional requirements. Pharmacy and clinical records may need to be retained for specific periods under NHS, legal, and professional guidance.

9. Contact About Data Protection

If you want to exercise your data rights or ask how your information is used, please contact Brookside Pharmacy using the details on this page.