Your privacy and health data

This policy explains how Kingsclere Pharmacy, operated by Summit Pharma Ltd, collects, uses and protects your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Last updated: July 2026

Who we are

Data controller: Summit Pharma Ltd (Company No. 15792385), trading as Kingsclere Pharmacy & Clinic.

Superintendent Pharmacist: Amit Shah (2084292) · GPhC Registration 1028949.

Address: Swan Street, Kingsclere, Nr Newbury, Berkshire RG20 5PP.

Contact: 01635 298419 · kingsclerepharmacy@hotmail.com

Information we collect

Identity & contact details — name, address, date of birth, phone number, email.
Health information — prescriptions, medication history, allergies, and details relevant to the services or treatments you request (special category data).
Appointment & order data — bookings, uploaded prescriptions, and order history.
Account data — login credentials managed via our identity provider (we never see your password).
Technical data — basic usage/analytics data to keep the site secure and working.

Our lawful basis for using your data

Under UK GDPR we rely on the following bases: consent and performance of a contract (Article 6) for general services, and — because pharmacy data is special category health data — Article 9(2)(h) (provision of health and social care and treatment) and Article 9(2)(i) (public health), processed by or under the responsibility of a health professional bound by a duty of confidentiality.

We also process data to meet legal obligations placed on pharmacies (for example NHS and medicines regulations).

Who we share it with

We only share your information where necessary and lawful, which may include:

The NHS, your GP, and other healthcare providers involved in your care.
NHS England and the NHS Business Services Authority for NHS-funded services.
Regulators such as the General Pharmaceutical Council (GPhC) where required.
Trusted service providers (e.g. secure hosting) under written data-processing agreements.

We never sell your personal data.

How long we keep it

We keep pharmacy and health records in line with NHS Records Management Code of Practice retention schedules and applicable law. Uploaded prescription files are held only as long as needed to fulfil your order and meet our legal duties, then securely deleted.

Your rights

Access — request a copy of the personal data we hold about you.

Rectification — ask us to correct inaccurate or incomplete data.

Erasure — ask us to delete your data (subject to legal retention duties for health records).

Restriction — ask us to limit how we use your data.

Portability — request your data in a portable format.

Object — object to certain processing.

Withdraw consent — where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, contact us using the details above. We will respond within one month.

Cookies & analytics

We use only essential cookies and privacy-friendly analytics to keep the site secure and understand basic usage. We do not use advertising trackers.

Security

Your data is protected with encryption in transit and at rest, access controls, and secure authentication. Prescription files are stored in access-restricted storage.

Complaints to the regulator

You have the right to complain to the Information Commissioner's Office (ICO) if you're concerned about how we handle your data.

ico.org.uk · Helpline 0303 123 1113