Privacy Policy

Garner Chemist ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our pharmacy services, visit our premises, or interact with our website.

We are registered with the General Pharmaceutical Council (GPhC) under registration number 2068026 and comply with all applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our Superintendent Pharmacist, Poonam Pankhania, is responsible for ensuring compliance with pharmacy regulations and data protection requirements.

We may collect and process the following types of personal information:

We use your personal information for the following purposes:

• Dispensing prescriptions: To safely dispense NHS and private prescriptions
• Providing pharmacy services: Including NHS services (Pharmacy First, vaccinations, medicine reviews), private consultations, and health checks
• Patient safety: To check for drug interactions, allergies, and contraindications
• NHS requirements: To submit claims for NHS services and comply with NHS contractual obligations
• Communication: To notify you when prescriptions are ready, send appointment reminders, and provide health advice
• Legal obligations: To comply with GPhC regulations, NHS requirements, and other legal duties
• Service improvement: To improve our services and patient experience

We process your personal data under the following legal bases:

• Healthcare provision (Article 9(2)(h) UK GDPR): Processing is necessary for medical diagnosis, provision of health care, and management of healthcare systems
• Legal obligation (Article 6(1)(c)): To comply with pharmacy regulations, NHS contractual requirements, and other legal duties
• Vital interests (Article 6(1)(d)): In emergencies where processing is necessary to protect someone's life
• Public interest (Article 6(1)(e)): For public health purposes and NHS services
• Consent (Article 6(1)(a)): Where we have obtained your explicit consent for specific purposes

We may share your information with:

• NHS organisations: Including NHS England, Integrated Care Boards, and the NHS Business Services Authority for prescription processing and payment
• Your GP surgery: To update your medical records and coordinate care
• Other healthcare providers: When necessary for your ongoing care
• Regulatory bodies: Such as the GPhC and CQC when required
• Third-party service providers: Who assist us in operating our pharmacy (under strict data processing agreements)

We will never sell your personal information to third parties or use it for marketing purposes without your explicit consent.

We retain your personal information in accordance with NHS and GPhC requirements:

• Prescription records: Retained for a minimum of 2 years from the date of dispensing
• Patient medication records (PMRs): Retained for a minimum of 2 years after your last prescription
• Controlled drugs registers: Retained for 2 years from the date of the last entry
• Private prescription records: Retained for 2 years
• NHS service records: Retained as per NHS contractual requirements

After the retention period, records are securely destroyed in compliance with NHS guidelines.

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (subject to legal retention requirements)
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data to another provider
• Right to object: Object to certain types of processing
• Right to withdraw consent: Where processing is based on consent

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month.

We take the security of your personal information seriously and have implemented appropriate technical and organisational measures to protect it, including:

• Secure NHS N3/HSCN network connection for NHS systems
• Encrypted storage and transmission of electronic data
• Access controls and staff training on data protection
• Secure storage of paper records
• Regular security assessments and updates

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

For any questions about this Privacy Policy or to exercise your data protection rights, please contact us: