Privacy Policy

  1. Home
  2. Privacy Policy

COLLECTION OF YOUR INFORMATION

We may collect information about you in a variety of ways. The information we may collect through the Site includes:

Personal Data

We may collect personal information that you voluntarily provide to us when you create an account, complete a consultation, place an order, contact us, book an appointment or otherwise interact with our website.

This information may include:

  • Full name
  • Postal address
  • Email address
  • Telephone number
  • Date of birth
  • GP surgery details
  • NHS information (where applicable)
  • Identification documents or other information used to verify your identity
  • Marketing preferences and consent choices

Special Category (Health) Data

As a provider of healthcare services, we also collect and process special category personal data where necessary. This may include:

  • Medical history
  • Medical consultation details
  • Health information you provide during assessments
  • Information relating to medications, allergies and treatments
  • Clinical notes relating to your consultation or order

We only collect and process this information where it is necessary to provide healthcare services and make appropriate clinical decisions regarding your treatment.

Derivative Data

Our servers automatically collect certain information when you access the Site, including your IP address, browser type, operating system, access times and pages viewed before and after visiting the Site.

Financial Data

Where you purchase products or services through our website, payment information is processed securely by our payment providers. We do not store your full payment card details on our systems.

USE OF YOUR INFORMATION

Having accurate information about you enables us to provide safe, effective and efficient healthcare services.

We may use your personal information to:

  • Assess your suitability for treatment.
  • Make clinical decisions regarding your consultations and orders.
  • Provide healthcare services and dispense medicines where appropriate.
  • Process and fulfil your orders.
  • Manage your account.
  • Arrange appointments and consultations.
  • Respond to enquiries and customer service requests.
  • Communicate important information regarding your treatment or orders.
  • Comply with legal, regulatory and professional obligations.
  • Improve our website and services.
  • Prevent fraud and protect the security of our systems.
  • Send marketing communications where you have provided your consent.

LEGAL BASIS FOR PROCESSING

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR).

Depending on the purpose of processing, we rely upon one or more of the following lawful bases:

  • Article 6(1)(b) – Performance of a Contract – Processing is necessary to provide consultations, assess your suitability for treatment, process your orders and provide healthcare services.
  • Article 6(1)(c) – Legal Obligation – Processing is necessary to comply with our legal obligations, including pharmacy, medicines and healthcare regulations.
  • Article 6(1)(f) – Legitimate Interests – Processing is necessary for our legitimate business interests, including improving our services, preventing fraud, ensuring website security, investigating complaints and defending legal claims.
  • Article 6(1)(a) – Consent – Where required, we rely upon your consent, for example when sending marketing communications. You may withdraw your consent at any time.

Special Category Personal Data

Where we process health information and other special category personal data, we rely upon Article 9(2)(h) UK GDPR, which permits processing necessary for:

  • Medical diagnosis;
  • The provision of healthcare;
  • The provision of treatment; and
  • The management of healthcare services.

All health information is processed by, or under the responsibility of, healthcare professionals who are subject to a duty of confidentiality.

DISCLOSURE OF YOUR INFORMATION

We only share your personal information where necessary to provide our services, comply with our legal obligations or operate our website.

Your information may be shared with:

Digital Pharm Ltd t/a Pharmacy Mentor

Our website development, hosting and technical support provider.

Bookly

Where you book an appointment or consultation through our online booking system.

Contact Form 7

Where you submit an enquiry through one of our online contact forms.

Complianz

To manage your cookie consent preferences and assist with our compliance under the UK GDPR.

Google Analytics

To help us understand how visitors use our website so that we can improve our services. Information shared through Google Analytics is generally aggregated or pseudonymised and is not used to identify you directly.

We only share the minimum amount of personal information necessary for each provider to perform their services. Not all of your personal information is shared with every provider.

We may also disclose your information where required by law or where necessary to protect our legal rights.

TRACKING TECHNOLOGIES

Cookies and Similar Technologies

We use cookies, web beacons, tracking pixels and similar technologies to improve your experience, understand how our website is used and ensure it functions correctly.

For full details of the cookies we use and how you can manage your preferences, please refer to our Cookie Policy.

INTERNATIONAL TRANSFERS

We do not routinely transfer your personal data outside the United Kingdom.

Our third-party service providers primarily store and process personal data within the United Kingdom. Where a third-party provider processes personal data outside the UK, we will ensure appropriate safeguards are in place in accordance with the UK GDPR, including an adequacy decision, the International Data Transfer Agreement (IDTA), or another lawful transfer mechanism where required.

SECURITY OF YOUR INFORMATION

We implement appropriate technical and organisational security measures designed to protect your personal information against accidental loss, unauthorised access, alteration, disclosure or destruction.

Although we take reasonable steps to protect your information, no internet transmission or electronic storage system can ever be guaranteed to be completely secure.

DATA RETENTION

We retain your personal information for as long as you remain a customer and thereafter only for as long as necessary to fulfil the purposes for which it was collected.

We may retain certain information for longer where required to comply with legal, regulatory, accounting or professional obligations.

Where you request that your personal information be deleted, we will do so where we are legally permitted. In some circumstances, particularly in relation to healthcare records, we may be required by law or regulatory requirements to retain certain information before it can be securely deleted.

YOUR RIGHTS UNDER THE UK GDPR

Under the UK GDPR, you have the following rights in relation to your personal data:

  • The right to access the personal information we hold about you.
  • The right to request correction of inaccurate or incomplete information.
  • The right to request deletion of your personal data where there is no legal reason for us to continue processing it.
  • The right to request restriction of processing in certain circumstances.
  • The right to receive your personal data in a structured, commonly used and machine-readable format where applicable.
  • The right to object to processing where we rely upon legitimate interests.
  • The right to withdraw your consent at any time where processing is based upon consent, including marketing communications.

To exercise any of these rights, please contact us using the details below.

PRIVACY ENQUIRIES AND COMPLAINTS

If you have any questions about this Privacy Policy, wish to exercise your rights under the UK GDPR, or have concerns about how we process your personal information, please contact us:

My Health & Wellness
Address: 4 Woodside Industrial Park, Works Road, Letchworth Garden City, SG6 1LA
Email: hello@myhealthandwellness.co.uk
Telephone: 03300435581

We will investigate your enquiry and aim to respond as quickly as possible and within the timescales required by the UK GDPR.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

Making a complaint to the ICO does not affect any other legal rights or remedies that may be available to you.