Data Controller
North Yate Pharmacy operates as the Data Controller for the personal data processed through our website and pharmacy premises:
- Address: 182 Wellington Road, Yate, Bristol, BS37 5SU
- By Email: info@northyatepharmacy.com
- Phone: 01454 313827
Information We Collect
- Identity & Contact Data: Name, date of birth, address, email address, telephone number.
- Special Category (Health) Data: Prescription history, medical conditions, medication details, vaccination records, and clinical notes gathered during private or NHS consultations.
- Technical & Usage Data: IP address, browser type, device information, and website interaction metrics collected via cookies.
How We Use Your Data & Legal Basis
- Provision of Pharmacy & NHS Healthcare Services: To dispense prescriptions, manage clinical consultations (e.g., Pharmacy First, vaccinations, weight management), and maintain accurate pharmacy records under UK GDPR Article 6(1)(e) and Article 9(2)(h) (Health & Social Care).
- Communication & Appointment Bookings: To send booking confirmations, prescription collection reminders, and respond to enquiries under Article 6(1)(b) (Performance of a contract / Direct request).
- NHS Reporting & Legal Obligations: Sharing mandatory dispensing and clinical service data with the NHS Business Services Authority (NHSBSA) and local Integrated Care Boards (ICBs) to meet statutory pharmacy regulatory requirements.
Data Sharing & Confidentiality
We will never sell or rent your information. We only share personal data with:
- Your registered NHS GP practice and relevant NHS healthcare providers involved in your direct care.
- NHSBSA for NHS dispensing claims and audit purposes.
- Trusted third-party software providers (e.g., secure clinical booking platforms and pharmacy management systems) under strict data processing agreements.
Data Retention
We retain health and prescription records in accordance with NHS record retention schedules (typically a minimum of 8 years for standard clinical records, or until age 25 for children). Website contact form submissions are retained only as long as necessary to resolve your request.
Your Rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you (Subject Access Request).
- Request correction of inaccurate information.
- Request erasure or restriction of processing, subject to mandatory NHS statutory record retention laws.
- Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.