We currently have Rabies vaccine available. Please book online.

Facebook-f
book now

Prescription Care Services – Privacy Policy & Patient Privacy Notice

Prescription Care Services
1C Packington Hayes, Tamworth Road, Lichfield, WS14 9PN
Website: www.prescriptioncareservices.co.uk

1. Introduction

At Prescription Care Services (referred to as "we", "us", or "our" in this policy), we are committed to protecting your privacy and ensuring that your personal information and health data are handled securely.

This Privacy Policy applies to personal data collected through our website (www.prescriptioncareservices.co.uk) and through our in-person and clinical pharmacy services. Together with our Terms & Conditions, it forms the basis on which your data is collected, stored, and processed in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and NHS confidentiality rules.

2. Healthcare & Pharmacy Services Covered

We collect and process data to provide a range of NHS and private healthcare services, including:

  • NHS prescription dispensing and Electronic Prescription Service (EPS) nominations
  • NHS-commissioned pharmacy services and Pharmacy First consultations
  • Blood testing and phlebotomy
  • Travel health consultations, private vaccinations, and NHS vaccinations
  • Weight management services
  • Ear wax removal
  • Cryotherapy
  • Vitamin B12 injections
  • Independent prescribing services
  • Other private clinical and healthcare services

3. Information We Collect

We may collect and process the following types of information:

  • Contact & Account Details: Name, email address, mailing address, telephone number, account login details, product wish lists, order history, and marketing preferences.
  • Health & Clinical Data (Special Category Data): Medical history, medication history, gender, NHS number, date of birth, GP details, consultation notes, and diagnostic test results.
  • Payment & Financial Data: Transaction records and payment details (processed securely via third parties).
  • Website & Interaction Data: Data submitted via online forms, queries, customer reviews, testimonials, problem reports, and website interaction cookies.

4. How We Use Your Data

We process your data for the following operational and clinical reasons:

  • To Provide Healthcare & Clinical Care: Dispensing medicines safely, conducting clinical consultations, delivering private services, and keeping accurate healthcare records.
  • Service & Order Administration: Processing website orders, bookings for vaccinations/medication reviews, creating and maintaining your user account, and communicating with you regarding your service appointments.
  • NHS & Continuity of Care: Processing EPS nominations and repeat prescription requests, which involves sending details to your GP practice, NHS England, NHS Business Services Authority, or other authorized healthcare providers.
  • Private Care Delivery: Sharing relevant information with external prescribers, diagnostic laboratories, or pathology providers where necessary for safe treatment.
  • Payments & Audits: Processing payments, managing claims, performing financial auditing, and assisting in fraud prevention and detection.
  • Service Enhancement: Reviewing feedback and improving the quality of our clinical services and digital platforms.

5. Lawful Bases for Processing

Under the UK GDPR, we rely on the following legal bases to process your information:

  1. Consent: Explicit agreement provided during account registration, newsletter subscription, or specific clinical forms.
  2. Performance of a Contract: Necessary to fulfill orders or provide requested products and healthcare services.
  3. Provision of Health and Social Care / Public Interest: Necessary for the management of healthcare systems, clinical consultations, and delivery of safe healthcare (covering special category health data).
  4. Legal Obligation: To comply with statutory requirements, NHS contractual requirements, and regulatory standards.
  5. Vital Interests: Where processing is required to protect your life or someone else’s life in a medical emergency.
  6. Legitimate Interests: To conduct necessary business operations and fraud prevention, provided these do not override your fundamental rights.

6. Where Data Is Stored and Who Has Access

  • Data Storage: User data is hosted on secure dedicated servers located in the United Kingdom.
  • IT & Technical Support: Information may be accessed by our internal team and our trusted IT development partners (Tech Developer Ltd) inside and outside the European Economic Area (EEA) solely to ensure website maintenance, security, and administrative tasks.
  • Third-Party Healthcare Partners: If you access services supplied by embedded third parties (e.g., online doctor providers or booking widgets), your data will be shared with them to deliver those specific services.
  • Regulatory & Legal Sharing: Limited information may be shared with regulatory bodies, professional advisers, or auditors to demonstrate compliance with healthcare standards.
  • No Commercial Sale: Under no circumstances will we sell or rent your personal data to third-party companies for marketing purposes.

7. Data Security and Retention

Data Protection Standards

  • Encryption: Sensitive data transmitted via our website is protected using Secure Socket Layer (SSL) encryption technology.
  • Payment Security: We do not store credit or debit card details. Payments are processed via third-party providers compliant with Level 1 PCI-DSS (Payment Card Industry Data Security Standards).
  • Backups: System backups are performed at least monthly and stored on UK-based dedicated servers.
  • Clinical Access: Access to patient health records is restricted strictly to authorized clinical and administrative staff who require it to carry out their professional duties.

Note on Internet Transmissions: While we follow industry-accepted standards to secure electronic data, no digital transmission over the Internet or storage system can be guaranteed as 100% secure.

Data Retention

Personal and medical information is retained in accordance with the NHS Records Management Code of Practice and relevant statutory deadlines. Information is held only for as long as necessary to fulfill the operational purpose or meet legal obligations.

8. Your Rights (User Access and Choices)

Under the UK GDPR, you hold the following rights regarding your personal data:

  • Right to Be Informed: To receive clear information about how your data is processed (as set out in this notice).
  • Right of Access: To request a copy of the personal and healthcare data we hold about you.
  • Right to Rectification: To request correction of inaccurate or incomplete data.
  • Right to Erasure (Right to be Forgotten): To request deletion of your data where it does not conflict with legal requirements or obligations to retain medical records.
  • Right to Restrict Processing: To request restrictions on how we process your personal data.
  • Right to Data Portability: To receive your personal data in a structured, commonly used format where processing is based on consent or contract.
  • Right to Object: To object to the processing of your data under specific conditions.
  • Right to Withdraw Consent: To withdraw consent for optional processing (e.g., direct marketing) at any time.

Please note: Certain rights may be limited where we are legally required to retain healthcare records or maintain data for ongoing medical treatment.

9. Newsletters, Testimonials, & Website Tracking

  • Marketing & Newsletters: You can subscribe to our newsletter at registration. You may opt out at any time by following the unsubscribe instructions or emailing us directly.
  • Testimonials: If you provide feedback or ratings, we may display them on our website along with your first name. You can request the removal or modification of your testimonial at any time.
  • Cookies: Our website uses cookies to personalize your browsing experience and analyze site performance. For comprehensive information, please view our Cookie Policy.
  • Third-Party Links & Social Media Widgets: Our website may contain social media widgets or links to third-party websites. These platforms operate under their own privacy policies, which you should review before submitting personal data.

10. Policy Changes & Updates

We reserve the right to modify this privacy notice at any time to reflect updates in our clinical practices, regulatory obligations, or technological enhancements.

  • Document Version: 1.0
  • Last Reviewed: July 2026
  • Next Scheduled Review: July 2027

11. Contact Details & Data Protection Lead

If you have questions, concerns, or wish to exercise any of your data protection rights, please contact our Data Protection Lead:

Data Protection Lead: Jasvir S. Riat
Address:
Prescription Care Services
1C Packington Hayes
Tamworth Road
Lichfield, WS14 9PN

  • Email: hello@prescriptioncare.co.uk
  • Telephone: 01543432434

Information Commissioner's Office (ICO)

If you remain unsatisfied with how your data or privacy query has been handled, you have the right to lodge a complaint with the UK data regulator:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk