Privacy Policy - Broadstone Village Pharmacy

Effective Date: 25th November 2025

Broadstone Village Pharmacy is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, and protect the information you provide to us through our website.

Broadstone Village Pharmacy is the data controller for the personal data collected via this website.

1. Information We Collect

We only collect information that is necessary to provide you with the services you request. When you use our website, specifically the Contact Page, we may collect the following personal data:

  • Identity Data: Your full name.
  • Contact Data: Your email address and telephone number.
  • Communication Data: Any personal information or health-related information you choose to provide to us within the message box.

2. How We Use Your Information (Purposes and Legal Basis)

We process your data based on the following legal grounds under the UK General Data Protection Regulation (UK GDPR).

A. To respond to your enquiry and provide customer service.

  • Data Used: Identity, Contact, Communication.
  • Legal Basis: Legitimate Interests, to run our business, respond to user queries, and provide general services.

B. To communicate with you about your request, prescription, or pharmacy service.

  • Data Used: Identity, Contact, Communication (including any health data).
  • Legal Basis: Consent, where you have explicitly provided information for us to act upon (e.g., asked a specific health-related question). OR Legal Obligation/Public Interest (if the data relates to a specific NHS service).

C. To improve our website and services.

  • Data Used: Non-personal data (e.g., website usage statistics - see Section 5).
  • Legal Basis: Legitimate Interests, to define types of customers for our services and keep our website updated and relevant.

3. Sharing Your Personal Data

We do not sell, rent, or trade your personal data with third parties for marketing purposes.

We may share your data with trusted third parties in the following limited circumstances:

  • Service Providers: We may share data with IT and system administration service providers who host or maintain our website, solely for the purpose of keeping our services running securely.
  • Regulatory/Legal Requirements: We will disclose your personal data where required to do so by law, to a government body, or to comply with a court order.
  • NHS Services: If your enquiry relates to an NHS service or prescription, we may be required to share relevant information with NHS bodies (e.g., your GP surgery, NHS England).

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Access to your personal data is limited to employees, agents, contractors, and other third parties who have a business need to know.

5. Cookies and Analytics

Our website may use necessary cookies to function correctly. We may also use non-essential cookies (such as Google Analytics) to collect standard internet log information and details of visitor behaviour patterns. This information is processed in a way that does not directly identify anyone and helps us analyse and improve our website performance. You will be asked for your consent before any non-essential cookies are placed on your device.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Contact Enquiries: Typically, we will retain contact enquiry data for [Insert timeframe - e.g., 6 months to 1 year] after the last communication, or longer if a service relationship is established.
  • Health Information: Information relating to your health or prescriptions is subject to specific professional and NHS record keeping requirements and will be retained according to those guidelines.

7. Your Legal Rights (UK GDPR)

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

  • Request access to your personal data (commonly known as a "data subject access request").
  • Request correction of the personal data that we hold about you.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request the transfer of your personal data to you or a third party.
  • Withdraw consent at any time (where consent is the legal basis for processing).

If you wish to exercise any of the rights set out above, please contact us using the details below.

8. Contact Details and Complaints

Broadstone Village Pharmacy is committed to resolving any complaints about our collection or use of your personal data.

  • Contact Person: The Data Protection Lead
  • Address: Broadstone Village Pharmacy, 192c Lower Blandford Rd, Broadstone, Poole,
    Broadstone BH18 8DP
  • Phone: 01202 776239

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

‍