The EU General Data Protection Regulation (GDPR) includes rules on giving privacy information to anyone using our online services. Further information about your rights under GDPR can be found at www.ico.org.uk
This document covers:
- Who we are
- Why we collect information
- The types of information we collect about you
- How we collect and use it
- Who we might share this information with
- How long we will keep your information
- Your rights to your information and making a complaint
- Automated processing
Who we are
Weldricks Pharmacy is the trading name of H I Weldrick Ltd.
You can contact our DPO by:
Email: customerservices@weldricks.co.uk
By writing to:
C/O Data Protection Officer
Unit 3B White Rose Park
Ten Pound Walk
Doncaster
South Yorkshire
DN4 5FB
Why we collect information
We process your personal data, which includes information from your prescriptions, health questionnaires relevant to the products you purchase, telephone conversations, e-mails, live chat, and written and verbal communications for the purposes of:
Your care – providing pharmacy services and care to you and sharing your information with your GP and others in the wider NHS, as appropriate;
Our payments – sharing your information with the NHS Business Services Authority, others in the wider NHS, and sometimes Local Authorities, and only relevant information to those external to the NHS who negotiate and check the accuracy of our payments; and, our payment processors who handle card payments on our behalf.
Marketing – we will only use your personal information for marketing purposes where you explicitly give consent for us to use your personal information for this purpose. We will never pass your information to a third party for marketing purposes unless you consent to this.
Management – sharing only relevant information with the NHS Business Services Authority and others in the wider NHS, and sometimes Local Authorities; as well as those external to the NHS who ensure we maintain appropriate professional and service standards and that your declarations and ours are accurate.
Fulfilling your order – sharing only relevant information third-party organisations to deliver the service you have asked for, for example, with payment processors and risk management agencies for fraud prevention purposes, delivery details with our courier partners, e-mail services and communication providers to communicate updates to your order and to answer any queries you send to us or to gather further information to allow our pharmacy team to safely process your order. We share the minimum amount of information for the relevant purpose
Cookies - We use cookies to distinguish you from other users of the website. This helps us to provide you with a good experience when you use our Site and also allows us to improve our Site. For detailed information on the cookies we use and the purposes for which we use them, see our cookie policy.
We hold your information for as long as advised by the NHS. You have a right to a copy of the information we hold for you (in paper or electronic form) and generally without charge. You may seek to rectify any inaccurate information.
You also have the right to complain about our use of your personal data. You can contact the Information Commissioner's Office via their website: https://ico.org.uk/concerns/ or by calling 0303 123 1113.
The types of information we collect about you
When you create an account we will collect information including, for example, your name, address, email address, phone number and date of birth.
In addition to this, we will collect information that is relevant to the service(s) in which you are interested or products you have purchased or intended to purchase. This will include information relating to your health including medical information to allow us to ensure the product(s) you wish to buy are safe, effective and appropriate
We will store that information to allow us to support your ongoing care and/or give you our customer support service.
How we collect and use it
In order to provide you with the services you request, HI Weldrick Ltd will collect and use personal information about you from our website, app, telephone conversations, e-mails, live chat, and written and verbal communications.
Who we might share this information with
Some of the companies we use to provide you with the service you request may transfer your data outside the EU. We only use companies that adhere to EU-US Privacy Shield Certification rules and/or Model Contractual Clauses. Further details about the companies we work with and the information they process can be found here.
How long we will keep your information
We process your personal data in the performance of a task in the public interest, for the provision of healthcare and treatment and the management of healthcare systems. A pharmacist is responsible for the confidentiality of your information.
We hold your information for as long as advised by the NHS. You have a right to a copy of the information we hold for you (in paper or electronic form) and generally without charge. You may seek to rectify any inaccurate information.
For Non-NHS services we will keep your information for as long as you remain an active customer with us to assist you in placing future orders and to allow you to download, for example, VAT receipts should they be required. If your account becomes dormant we will delete your data after a period of 7 years.
Our payment handling partners & identity check partners will keep your information for as long as they are legally required to do so for Fraud detection and Anti Money Laundering purposes as determined by the fourth schedule of the anti-money laundering directive.
You may object to us or any third party we have passed your information to, holding your information. You may lodge a complaint with the Information Commissioner’s Office.
Your rights to your information and making a complaint
You may object to us or any third party we have passed your information to, holding your information. You may lodge a complaint with the Information Commissioner’s Office. To make an objection or to request details of the information we hold or request a deletion please contact our Data Protection Officer as above.
Automated processing
We do not use automated decision making, including profiling.
We may supplement the information that you provide with other information that we obtain from our dealings with you or which we receive from other organisations.
Updated July 2020