1. Who we are
Medway Pharmacy (“we”, “us”, “our”) is the data controller for personal data collected through this website. We are registered with the General Pharmaceutical Council (GPhC) under registration number 1121209.
Registered address: 465 Canterbury Street, Gillingham, Kent, ME7 5LJ
Email: medwaypharmacy.gillingham@gmail.com
2. What data we collect
We collect personal data only when you actively provide it:
- Contact enquiries — your name, email address, phone number, and any message you send to us by email, phone, or other contact routes shown on the website.
- EPS nomination requests — your full name, date of birth, NHS number (if provided), GP surgery, phone number, email address (if provided), and confirmation that you consent to us processing the request.
- Appointment bookings — when you book an appointment via our online booking system (SimplyBook.it), that service collects your booking details directly and is subject to SimplyBook.it’s privacy policy.
Nomination details can include information connected to your healthcare administration. We use those details only to handle your EPS nomination request. Clinical information you share with us in-pharmacy is handled under separate NHS and GPhC data governance obligations.
3. Lawful basis for processing
We process your personal data on the following lawful bases under UK GDPR:
- Legitimate interests (Article 6(1)(f)) — responding to enquiries you send us.
- Consent (Article 6(1)(a)) — processing EPS nomination requests you submit through the website form.
- Contract (Article 6(1)(b)) — processing your appointment booking details to fulfil the service you have requested.
4. How we use your data
- To respond to your messages or enquiries.
- To confirm and manage your appointment bookings.
- To process EPS nomination requests you submit for yourself.
We will never sell, rent, or share your personal data with third parties for marketing purposes.
5. Data retention
We retain enquiry and website EPS nomination request data for up to 12 months unless a longer period is required to resolve a query, complete the request, or meet a legal obligation. Appointment data held by SimplyBook.it is subject to their retention policy.
6. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate personal data.
- Erase your personal data where no overriding legitimate interest applies.
- Restrict or object to processing.
- Data portability (where processing is automated and consent- or contract-based).
- Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
To exercise any of these rights, email us at medwaypharmacy.gillingham@gmail.com. We will respond within one calendar month.
7. Cookies
This website uses essential cookies and analytics technologies. See our Cookies Policy for full details.
8. Third-party services
- SimplyBook.it — online appointment booking.
- Resend — transactional email delivery for form submissions.
- Vercel Web Analytics — anonymous website usage analytics.
- Google Analytics — website analytics, if enabled in production.
9. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes.