This policy explains how Medora Pharmacy ("we", "us") collects, uses and protects your personal information. We are committed to handling your data in line with UK GDPR and the Data Protection Act 2018.
Who we are
Medora is an NHS distance selling pharmacy registered with the General Pharmaceutical Council (premises number 12345678). We are the data controller for the information you share with us.
Information we collect
- Your name, address, date of birth, phone number and email address.
- Your NHS number and the prescriptions sent to us by your GP.
- Information you share with our pharmacists during consultations.
- Messages and feedback you send us through this website.
How we use your information
- To dispense and deliver your NHS prescriptions.
- To provide NHS services such as Pharmacy First.
- To contact you about your medicines or deliveries.
- To respond to your feedback and enquiries.
- To meet our legal and NHS contractual obligations.
Sharing your information
We only share your information where needed to provide your care — for example with your GP, the NHS, NHS Business Services Authority, and our delivery partners. We never sell your data.
Keeping your data safe
Your information is stored securely and only accessed by staff who need it. We keep records for as long as required by NHS and legal retention rules.
Your rights
You have the right to access, correct or request deletion of your personal information, and to object to or restrict how we use it. To make a request, email us at hello@medorahealth.co.uk.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.