Privacy policy.
At PillTime, we are committed to safeguarding and preserving the privacy of our visitors. We collect and use data fairly and under the requirements of the General Data Protection Regulations (GDPR). Our privacy policy sets out how we process
information on our website visitors and customers. Our address is Unit 7 & 8 Cribbs Causeway Centre, Cribbs Causeway, Bristol BS10 7TT. Our company number is 10381083. We are what is known as the ‘controller’ of personal information when we say ‘we’ or ‘us’ in this Privacy Policy, we mean PillTime Limited. We update this policy from time to time, so please review it regularly. If we make changes, we will notify you by changing the date at the top of the policy. In some cases, we may provide you with additional notice by sending you an email.
Key Points
These key points summarize some of the more important provisions in our Privacy Policy:
We collect and use your information to process your order, manage your account and, if you agree, send you details of our other goods and services and those of our selected partners.
We also use information automatically collected from our website to personalize your repeat visits to the website and to improve our website. If you wish to change or withdraw your consent, you can do so in the “Use of cookies” section of this document.
Some of the information we collect is medical data. This information is always treated confidentially. We will never disclose medical data unless legally required or permitted. We will not use your medical data for marketing purposes.
We also recommend that you read our full Privacy Policy.
Collection of information
We collect the information you provide directly to us when registering with our service. The information we collect includes your name, address, date of birth and email address. We also obtain your phone number, details of the medicines you’ve ordered and other purchase/prescription history.
In the interest of providing your medication and improving our service for you, we may also collect information from other NHS bodies, such as your GP/surgery or hospital. If we have your consent to do so, we will also access information such as your NHS number from viewing your Summary Care Record.
We may also collect information provided by other people on your behalf if they have your consent to discuss this information.
We also may obtain some personal information by monitoring and recording calls. We record or monitor phone calls with you for training and monitoring purposes and to help improve the experience for our customers.
We automatically collect information about your use of our site, although this will not be used to identify you. We discuss this further under the ‘Use of Cookies’ section.
Some of the information we collect is medical data (for example, details of the medicines you have ordered). This information is always treated confidential, which means that none of our staff can access it unless they are a health
professional (or owe a similar duty of confidentiality). We will never disclose medical data unless legally required or permitted to do so. We will never use your medical data for marketing purposes.
Why do we collect this information and what do we use it for?
As part of the provision of our services, we use the information that we collect from you:
To enable us to provide our health services to you.
To assist you in answering any questions or queries you may have submitted.
To enable us to comply with regulatory requirements.
To communicate with you in the event that there is a query or problem with your order.
To inform you of any changes to our website, services or goods and products.
For record keeping purposes.
To track and analyse activity on our website.
To respond to queries and comments, to collaborate with others to improve our products and services and to provide you with the best possible level of customer service.
To contact you about appointments you have booked or to send you reminders (e.g. about repeat prescriptions or notification that your prescriptions are on their way to you).
Marketing
If you provide consent, we may send you personalised marketing communications. These keep you informed of our, and our selected partner’s products and services, which we consider may be of interest to you.
Email marketing campaigns published by us may contain tracking facilities within the actual email. Your activity will be tracked and stored in a database for future analysis and evaluation. Such tracked activity may include the opening of emails,
forwarding of emails, the clicking of links within the email content, times, dates and frequency of activity. This information is used to refine future email campaigns and supply you with more relevant content based on your activity.
You can opt-out of receiving marketing communications at any time by emailing us at dpo@pilltime.co.uk.
Details of how to opt-out will also be provided in each email or other marketing communication we send you.
Sharing your information
We process your personal data, which includes information from your prescriptions and any other pharmacy and health care services we provide to you such as new medicines use reviews for the purposes of:
Your care providing pharmacy services and care to you and, as appropriate, sharing your information with your GP and others in the wider NHS;
Our payments sharing your information with the NHS Business Services Authority, others in the wider NHS, and sometimes Local Authorities, and only limited information to those external to the NHS who negotiate and check the accuracy of our payments; and,
Management sharing only limited information with the NHS Business Services Authority and others in the wider NHS, and sometimes Local Authorities; as well as those external to the NHS who ensure we maintain appropriate professional and service standards and that your declarations and ours are accurate.
We use other trusted organisations who have provided GDPR compliance assurances to help us deliver our services and improve them, including:
delivering your orders and providing emails or texts so you can track your order.
sending letters and marketing material.
carrying out market research.
Where we need to share information with our third party providers, we give them only the minimum amount they need to provide services to us and you. Those we share your information with, in these circumstances, are not allowed to use it to try to sell their own services to you. These companies may include our IT suppliers, couriers, mailing houses, manufacturers and suppliers.
As well as giving our service providers information to help us provide our products and services to you, we may give your personal information to others (third parties) in the following circumstances:
If we are selling or buying any business or assets, in which case we may give your personal information to the prospective seller or buyer of such business or asset.
If we must provide or share your personal information to meet any legal obligation or a request from a court or the police, enforce or apply our terms of use and other agreements or protect the rights, property, or safety of us, our customers or others. This may involve sharing information for the purposes of preventing fraud and contacting prescribers when our pharmacist becomes aware of significant medical issues arising with a repeat prescription.
Cookies
Cookies are small text files that can be used by websites to make a user’s experience more efficient. We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information
about your use of our site with our advertising and analytics partners. They combine it with other information that you’ve provided to them or that they’ve collected from your use of their services. You consent to our cookies if you continue to use our website. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages. You can, at any time, change or withdraw your consent from the Cookie Declaration on our website.
Your consent applies to the following domains: pilltime.co.uk. help.pilltime.co.uk, signup.pilltime.o.uk
Security and the storage of your data
General storage principles for all visitor information
The security of your information is very important to us, and we take all appropriate security measures (including physical, electronic and procedural measures) to help protect it from being seen or shared by people or organizations not authorized to receive it. When sending your personal information to a third party to provide goods or services, we will use reasonable ways of keeping your personal information secure.
In operating our website it may become necessary to transfer personal data that we collect from you to locations outside of the European Union for processing and storing. By providing your information to us, you agree to this transfer, storing or processing. We do our upmost to ensure that all reasonable steps are taken to make sure that your personal information is treated and stored securely and in accordance with this Privacy Policy.
Unfortunately the sending of information via the internet is not totally secure and on occasion such information can be intercepted. We cannot guarantee the security of information that you choose to send us electronically, sending such information is entirely at your own risk.
Special protection of personal information
Special protection is given to certain kinds of personal information that is particularly sensitive. This is information about your health status, medication, racial or ethnic origin, religious or similar beliefs, and sex life or sexual orientation. We will only use this kind of personal information where:
required to deliver pharmacy and healthcare products and services to you;
we have a legal obligation to do so (for example to protect vulnerable people);
it is necessary for us to do so to protect your vital interests (for example if you have a severe and immediate medical need whilst on our premises);
it is in the substantial public interest; or
you have specifically given us explicit consent to use the information.
Duration of storing your information
We need your personal information for as long as we have a legal or business reason to do so, which generally means as long as you remain a customer of PillTime Ltd. or as requested to meet our legal obligations, resolve disputes or enforce our agreements. To fulfill our obligations to NHS, regulatory or similar bodies, health related personal information may need to be retained for a period of time after you cease to be a PillTime Ltd. customer. We will always store it securely and not use it for any other purpose.
Access to information and your rights
You have the right to object to how we use your personal information. You also have the right to see what personal information we hold about you, to ask us to correct any inaccuracies and to ask for some of your personal information to be provided to someone else. In addition, when permitted by law, you can ask us to delete or restrict personal information we hold about you.
You can exercise this right by emailing us at dpo@pilltime.co.uk
Your right to access your information
You can request access to a copy of your personal information that we hold, along with information on what personal information we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making.
We hold your information for as long as advised by the NHS, you have the right to ask for a copy of all pharmacy records about you (generally in paper or electronic form).
Generally, there will be no charge for a printed copy of the information we hold about you. We are required to respond to your request within one month.
You will need to give adequate information in order for pharmacy staff to identify you (for example, full name, address and date of birth). You will be required to provide ID, for example a passport, full driving licence or credit/debit card before any information is released to you.
You can exercise this right by emailing us at dpo@pilltime.co.uk
Your right to request we destroy your information
You can ask us to delete your personal information where it is no longer necessary for us to use it, you have withdrawn consent, or where we have no lawful basis for keeping it.
We have the right to refuse to comply with a request for erasure where the personal data is processed for one of the following reasons:
we need to use the information to perform a task carried out in the public interest, to provide healthcare or treatment or it is necessary for the reasons of public health in the public health arena;
we need to use the information to comply with our legal obligations;
archiving purposes in the public interest, scientific research, historical
research or statistical purposes; or
the exercise or defence of legal claims.
You can ask us to restrict the personal information we use about you where you have asked for it to be erased or where you have objected to our use of it.
You may lodge a complaint with the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
You can exercise this right by emailing us at dpo@pilltime.co.uk
Your right to request information is changed, where inaccurate
If you think any information we hold on you is inaccurate or incorrect, please let us know. You can exercise this right by emailing us at: dpo@pilltime.co.uk
Your right to confidentiality
You have the right to confidentiality under the General Data Protection Regulation and [the Data Protection Act 2018] and the common law duty of confidence.
We also comply with the NHS Code of Practice on Confidential Information and pharmacists have a requirement under their professional standards to keep records about you confidential, secure and accurate.
All of our staff contracts of employment contain a requirement to keep patient information confidential.
The NHS may use your data for planning and research purposes. For further details or to opt out of this, please get in touch.
PillTime’s Data Protection Officer
Our Data Protection Officer (DPO) provides help and guidance to make sure we apply the best standards to protecting your personal information. You can contact PillTime’s DPO via dpo@pilltime.co.uk. You may wish to contact PillTime’s DPO to make changes to your contact preferences, request to view your personal information or request your information to be destroyed.