Privacy Policy

Last updated: May 2026

Coxheath Pharmacy is committed to protecting your privacy and handling your personal data transparently, securely, and in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, www.coxheathpharmacy.co.uk, or engage with our services.

Table of Contents

1. Who We Are

Coxheath Pharmacy
Website: https://www.coxheathpharmacy.co.uk
Telephone: 01622 745567
Email: pharmacy.fml35@nhs.net

Coxheath Pharmacy is a registered UK pharmacy and a trading name of Nihal Healthcare Limited.

For the purposes of UK data protection law, we are the Data Controller of your personal data.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

  • Identity information: name, title, date of birth
  • Contact information: email address, telephone number, postal address
  • Account information: login details and preferences (where applicable)
  • Order & transaction data: details of products or services purchased
  • Health-related information: information provided through clinical questionnaires or consultations (where required for treatment)
  • Technical data: IP address, browser type, device information, cookies, and usage data
  • Communications: emails, messages, feedback, or complaints sent to us

Health data is treated as special category data and processed only where lawful and necessary for the provision of pharmacy services.

3. How We Use Your Information

We use your personal data to:

  • Provide pharmacy, prescribing, and healthcare services
  • Process orders, payments, and deliveries
  • Conduct clinical assessments and approvals
  • Communicate with you regarding your treatment or orders
  • Manage accounts and customer support enquiries
  • Improve our website, services, and user experience
  • Comply with legal, regulatory, and professional obligations

We will only use your data where we have a lawful basis to do so.

4. Lawful Bases for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

  • Performance of a contract – to supply products and services you request
  • Legal obligation – to comply with pharmacy, NHS, and regulatory requirements
  • Vital interests – to protect patient health and safety
  • Public interest / healthcare provision – for medical and pharmaceutical care
  • Legitimate interests – for service improvement and fraud prevention
  • Consent – where explicitly required (e.g. marketing communications)

5. Cookies & Website Tracking

Our website uses cookies to ensure it functions correctly and to improve user experience.

Cookies may be used to:

  • Remember user preferences
  • Enable secure login sessions
  • Analyse website usage and performance

You can manage or disable cookies through your browser settings. For more information, please refer to our Cookie Policy.

6. Embedded & Third-Party Content

Some pages may include embedded content (such as videos or maps) from third-party websites. Embedded content behaves as if you have visited the third-party website directly.

These third parties may collect data about you, use cookies, or track your interaction according to their own privacy policies. We are not responsible for third-party privacy practices.

7. Who We Share Your Data With

We only share your data where necessary and lawful, including with:

  • Registered pharmacists and prescribers involved in your care
  • Delivery and logistics providers (e.g. Royal Mail)
  • Payment service providers
  • IT and website service providers
  • Regulators or authorities where legally required

All third parties are required to process your data securely and in compliance with data protection law.

We do not sell your personal data.

8. How Long We Retain Your Data

We retain personal data only for as long as necessary:

  • Pharmacy and clinical records are retained in line with NHS and regulatory retention requirements
  • Account and transactional data is retained for legal, accounting, and audit purposes
  • Website comments or feedback may be retained to manage ongoing interactions

When data is no longer required, it is securely deleted or anonymised.

9. Your Data Protection Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request erasure of your data (where legally permitted)
  • Restrict or object to certain types of processing
  • Request data portability
  • Withdraw consent at any time (where processing is based on consent)

Requests can be made by contacting us using the details below.

10. Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure.

Payment information is encrypted and processed securely by approved payment providers.

11. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can address your concerns.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulation, or our services. The latest version will always be available on our website.

13. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us:

Email: pharmacy.fml35@nhs.net
Telephone: 01622 745567
Website: https://www.coxheathpharmacy.co.uk

This Privacy Policy forms part of our commitment to patient confidentiality, transparency, and trust in line with UK pharmacy and data protection standards.