Privacy Policy

Last Updated: March 2026

Anston Pharmacy (located at 13 Sheffield Rd, South Anston, Sheffield S25 5DT) is committed to safeguarding the privacy of our patients, website users, and service clients. This Privacy Policy details what information we collect, how it is processed under UK GDPR, and your legal rights.

1. Information We Collect

We may collect personal and special category health data including:

• Contact & Profile Information: Full name, email address, postal address, telephone number, and date of birth.
• Clinical & Medical Data: Medical history, current medications, GP surgery details, NHS number, consultation notes, and vaccination records.
• Transactional Data: Payment card confirmation, purchase history, prescription nominations, and order details.
• Technical Data: IP address, device identifiers, and website usage statistics collected via functional cookies.

2. How We Use Your Data

• To dispense NHS and private prescriptions and coordinate Electronic Prescription Service (EPS) nominations with your GP.
• To perform clinical consultations, administer vaccinations, and manage appointment bookings.
• To send appointment reminders, prescription status updates, and critical health notifications.
• To securely process payments for private services and products.
• To comply with statutory legal, regulatory, and GPhC auditing obligations.

3. Legal Bases for Processing (UK GDPR)

• Consent: When you register or submit consultation forms for specific healthcare services.
• Contractual Obligation: To fulfill healthcare services or products ordered by you.
• Vital Interests: When processing is essential to protect your health or safety in medical emergencies.
• Legal Duty: Compliance with healthcare regulations, pharmacy laws, and NHS requirements.

4. Data Sharing & Third Parties

We strictly protect your medical data. Information is only shared with authorized healthcare partners where essential:

• Your registered NHS GP Surgery for prescription and care continuity.
• NHS England and healthcare regulators where legally mandated.
• Approved logistics partners (e.g. Royal Mail, DPD) strictly for order delivery.

We never sell or rent your personal data to third-party marketing companies.

5. Your Data Protection Rights

Under UK Data Protection law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete medical or contact records.
• Erasure: Request deletion of data where legal retention periods have expired.
• Restriction & Objection: Request restriction of processing under specific circumstances.

6. Contacting Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection lead: