Privacy Policy for All Pharmacy Customers and Website Users
Crofton Pharmacy Limited T/A Crofton Pharmacy, 1 Place Farm Ave, Orpington BR6 8DG
Our pharmacists and their staff are members of your local healthcare team. They aim to provide you with the highest quality of healthcare. To do this we need to keep records about you, your health and the care we have provided or plan to provide to you.
We know that you value your privacy and the security of personal information held about you.
Information Recorded
As part of providing a professional, safe and efficient service, there is certain information that we record. This includes details of drugs and appliances dispensed against NHS prescriptions as well as significant advice given and referrals made to other health professionals and any other relevant information.
The information recorded may include:
- Basic details about you, such as address, date of birth, next of kin
- Contact details such as name, email address, mailing address, phone number.
- Information that you provide by filling in the forms on this website.
- Information you provide when you report a problem or query.
- Records of medicines you have been prescribed by your doctor or another qualified prescriber, and which have been supplied by this pharmacy
- Details of medicines purchased from the pharmacy without a prescription (“over the counter medicines”)
- Other details and notes about your health and medical treatment
- Information relevant to your continued care from other people who care for you and know you well, such as other health professionals and relatives.
- Any other services we provide to you, for example, a flu vaccination
Processing Information
Information from your prescriptions and any other pharmacy and health care services we provide to you (including medicines use reviews, flu vaccinations etc.) for the purposes of:
- your care – providing pharmacy services and care to you and, as appropriate, sharing your information with your GP and others in the wider NHS
- our payments – sharing your information with the NHS Business Services Authority, others in the wider NHS, and sometimes Local Authorities, and only limited information to those external to the NHS who negotiate and check the accuracy of our payments
- management – sharing only limited information with the NHS Business Services Authority and others in the wider NHS, and sometimes Local Authorities; as well as those external to the NHS who ensure we maintain appropriate professional and service standards and that your declarations and ours are accurate.
- To process your EPS nominations and repeat prescription requests. This will involve sending your request to your GP surgery with your personal details.
- Send you alerts about booked services such as vaccinations, medication review and other private services
- Respond to requests, questions and concerns.
- Create and maintain your account
- To process your booking
Why do we collect, process and store your Information?
We need to collect, process and store your data to enable efficient and legally compliant delivery of services and products to you (all users).
Legal bases for processing Information
We rely on the following legal bases to process your information in line with legal requirements.
- Consent: When you register on our website, you agree and give us consent to process your data for the delivery of products and services to you by us.
- Legitimate interests: To enable us to conduct our necessary business but not when our interests are overridden by your interests or rights.
- Allowing us to fulfil a contract: We are required to process your personal information in order to provide you with one of our products or services.
- Vital interests: When processing your personal data it is vital to protect you or someone else’s life.
- Legal obligation: When we are required by law to process your personal information. We will always try to contact you unless we are restricted by law.
How long do we hold your information?
We may hold your data for as long as it’s legally required and to enable us to maintain your account. The user can request to delete their personal data from our system by contacting at pharmacy.
Your Rights
You have the right to confidentiality under the General Data Protection Regulation and [the Data Protection Act 2018] and the common law duty of confidence.
We also comply with the NHS Code of Practice on Confidential Information and pharmacists have a requirement under their professional standards to keep records about you confidential, secure and accurate.
All of our staff contracts of employment contain a requirement to keep patient information confidential.
You may choose to opt out of the NHS using your data for planning and research purposes – please ask for details.
Our guiding principle is that we process your records in strict confidence.
Your right to view your health record
You have the right to ask for a copy of all pharmacy records about you (generally in paper or electronic form).
Generally, there will be no charge for a printed copy of the information we hold about you. We are required to respond to your request within one month.
You will need to give adequate information in order for pharmacy staff to identify you (for example, full name, address and date of birth). You will be required to provide ID, for example a passport, full driving licence or credit/debit card before any information is released to you.
If you think any information, we hold on you is inaccurate, please let us know.
You may object to us holding your information.
You may complain with the Information Commissioner’s Office.
Our pharmacist Naimishkumar Patel is responsible for overseeing all the data protection. He can be contacted at the pharmacy or by email at crofton.pharmacy@gmail.com
Limitations of internet-based systems
Every effort has been made to make sure our databases are secure. Your information can only be accessed by Crofton Pharamcy Limited and trusted IT contractors. Occasionally, information may be viewed by trusted third parties such as Doctors and IT personnel to improve this site.
The site, our servers and third-party service providers wherever they are based, have appropriate technical and organisational measures in place to protect against the unauthorised or unlawful use of your personal information as well as the accidental loss, destruction or damage of your personal information whilst under our control.
However, no data transmission over the internet can ever be guaranteed to be 100% secure and whilst we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us and you do so at your own risk.
Commercial sale of your Information?
Under no circumstances will we make your data personal available to a third party company for sale. Your data is used to provide products and services to you.
Links to other websites
Our website may contain hyperlinks to websites owned and operated by third parties. This Privacy Policy does not apply to those other websites. We encourage you to read the privacy statements on the other websites you visit, as they will govern the use of any personal data you provide when visiting those websites. We do not accept any responsibility or liability for the privacy practices of such third party websites and your use of such websites is at your own risk.
Social media widgets
This website includes social media widgets and buttons which are linked to our accounts on the respective social media platforms. These platforms are governed by their own set of privacy policies and terms of use, please check before using any of these platforms.
Testimonials
We ask our customers to provide us with feedback in the form of rating and a comment about their experience. This information will be displayed on our website, with the customer first name, in the form of a testimonial. If you wish to update or delete your testimonial, you can request this by emailing us.
Changes to this Privacy Policy
This Privacy Policy was last updated on 24 February 2023.This Privacy Policy may be updated from time to time, so you may want to check it each time you provide personal data to us.
