Privacy Policy – Church Pharmacy UK

1. Introduction

Welcome to Church Pharmacy UK. We respect your privacy and are committed to handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us or use our services.

We aim to handle personal information in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website, you acknowledge that you have had the opportunity to read this policy. Where consent is legally required, we will request it separately.

2. Information We May Collect

Depending on how you use our website and services, we may collect the following types of information:

Personal and contact information

  • Name
  • Email address
  • Telephone number
  • Billing and delivery address

Order and transaction information

  • Order reference and purchase history
  • Delivery preferences and order status
  • Payment confirmation and transaction records

We do not intend to collect or store full payment card details unless our payment arrangements specifically require this and appropriate safeguards are in place.

Health-related information

If our pharmacy services require it, we may process relevant health information, prescription details or information needed for a clinical assessment. Such information is treated with particular care and processed only where an appropriate legal basis and applicable special-category condition exist.

Technical information

When you browse our website, we may collect technical information such as your IP address, browser type, device information, pages visited and website usage data through server logs, security tools and permitted analytics technologies.

3. How We Use Your Information

We may use personal information to:

  • Process and manage orders and customer enquiries.
  • Arrange delivery and provide order updates.
  • Verify information where necessary for fraud prevention or legal compliance.
  • Support appropriate pharmacy and clinical processes, where applicable.
  • Maintain website security and prevent unauthorised activity.
  • Improve website functionality and user experience.
  • Meet accounting, regulatory and other legal obligations.
  • Send marketing communications where we have a valid legal basis and any required consent.

We do not use personal information for purposes that are incompatible with the purposes explained in this policy unless permitted by law.

4. Our Legal Grounds for Processing

We process personal information only when an appropriate legal basis applies. Depending on the circumstances, this may include:

  • Contract: To fulfil an order or take steps requested before entering into a contract.
  • Legal obligation: To comply with applicable laws and regulatory requirements.
  • Legitimate interests: To protect our website, prevent fraud and manage our business, provided these interests do not override your rights.
  • Consent: Where you have given consent for a specific purpose and consent is the appropriate legal basis.
  • Health information: Where relevant, an additional condition under UK data protection law permits the processing of special-category data.

We do not rely on a single legal basis for every type of information or activity.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential functions, remember preferences, measure website performance and understand visitor activity.

Where required by law, we will request consent before placing non-essential cookies on your device.

You can manage available cookie preferences through our website’s cookie settings. You may also adjust your browser settings, although disabling certain cookies may affect website functionality.

6. Sharing Your Information

We may share relevant information with trusted third parties where necessary to provide our services or meet legal obligations. These may include:

  • Payment service providers
  • Delivery and courier companies
  • Website hosting and technical support providers
  • Security and fraud prevention services
  • Professional advisers and auditors
  • Regulators, law enforcement agencies or other authorities where legally required

Where third parties process personal information on our behalf, we take appropriate steps to require suitable confidentiality and data protection safeguards.

We do not sell personal information to third parties.

7. How We Protect Your Information

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, secure connections, restricted staff access and appropriate security monitoring.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

If a personal data breach occurs, we will take appropriate action and notify affected individuals or the relevant authority where required by law.

8. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, maintaining records, resolving disputes and meeting legal or regulatory obligations.

Retention periods depend on the type of information and the applicable requirements. Health, prescription and pharmacy records may be subject to specific retention rules.

When information is no longer required, we will take appropriate steps to delete it or anonymise it securely, where practicable and legally permitted.

9. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you the right to:

  • Request access to your personal information.
  • Request correction of inaccurate or incomplete information.
  • Request erasure of certain information.
  • Request restriction of processing.
  • Object to certain processing activities.
  • Request transfer of eligible information to another provider.
  • Withdraw consent where processing relies on consent.
  • Complain to the Information Commissioner’s Office (ICO).

These rights are subject to applicable legal conditions and exemptions. We may need to verify your identity before responding to a request.

To exercise your rights, contact us using the details provided below.

10. International Data Transfers

Some of our service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take the steps required by applicable UK data protection law, which may include relying on an adequacy regulation or implementing appropriate safeguards.

11. Children’s Privacy

Our website and services are not intended to encourage children to provide personal information unnecessarily.

Where a service involves information about a child, we will handle that information in accordance with applicable legal requirements and appropriate safeguards.

12. Links to Other Websites

Our website may contain links to external websites or third-party services. We are not responsible for the privacy practices of websites we do not operate.

We recommend reviewing the privacy policy of any external website before submitting personal information.

13. Changes to This Privacy Policy

We may update this policy when our services, data processing practices or legal obligations change.

Any updates will be published on this page with a revised date. We encourage visitors to review this policy periodically.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us using the verified details below.