Privacy Policy

1. Who we are

i-Prescribe is the trading name of I Prescribe Limited, Company Number 16207578.

Superintendent Pharmacist, Clinical Lead and Data Protection Lead:
Miss Humaira Hussain MPharm, IPresc, MSc ACP.

For the purposes of UK data protection legislation, I Prescribe Limited is the Data Controller responsible for your personal information.

2. Information we collect

Depending on the services you use, we may collect the following information.

Personal information

• Full name.
• Date of birth.
• Gender.
• Postal address.
• Email address.
• Telephone number.

Identity information

To help protect patients, prevent fraud and comply with our legal and professional obligations, we may request information to verify your identity before providing certain healthcare services or supplying prescription medicines.

• Government-issued photographic identification.
• Proof of address.
• Other information reasonably required to confirm your identity.

If we are unable to verify your identity where verification is required, we may be unable to provide treatment or supply medication.

Health information

As a healthcare provider, we collect information necessary to provide safe clinical care, including:

• Medical history.
• Current medical conditions.
• Current and previous medicines.
• Allergies.
• Pregnancy or breastfeeding status where relevant.
• Consultation responses.
• Height and weight where clinically required.
• Blood pressure or other health measurements where appropriate.
• Photographs submitted during consultations.
• Treatment outcomes and clinical notes.

Health information is considered special category personal data under UK GDPR and is handled with additional safeguards.

Technical information

When you visit our website, we may automatically collect:

• IP address.
• Browser type.
• Operating system.
• Device information.
• Pages visited.
• Referral source.
• Cookies and analytics information.

3. How we collect information

We collect information:

• When you create an account.
• When you complete an online consultation.
• When you place an order.
• When you contact us.
• When you communicate with us by email or telephone.
• Through cookies and website analytics.
• Through identity verification providers.
• Where appropriate, from your GP or another healthcare provider with your consent or where otherwise permitted by law.

4. How we use your information

We use your information to:

• Provide healthcare services.
• Assess your suitability for treatment.
• Verify your identity.
• Process prescriptions.
• Dispense medicines.
• Deliver orders.
• Communicate with you regarding your treatment.
• Respond to enquiries.
• Manage your account.
• Improve our services.
• Prevent fraud.
• Comply with legal, regulatory and professional obligations.

We will only use your personal information where we have a lawful basis for doing so.

5. Lawful basis for processing

Under UK GDPR, we process your personal information using one or more of the following lawful bases:

• Performance of a contract, where processing is necessary to provide services you have requested.
• Compliance with legal obligations, where we must process information to meet pharmacy, medicines, tax, accounting, regulatory or legal requirements.
• Legitimate interests, where processing is necessary for the safe, secure and effective operation of our services and your rights do not override those interests.
• Consent, where consent is required by law or where we choose to rely on consent for a specific purpose.

Health information is processed because it is necessary for the provision of healthcare, medical assessment, treatment, pharmacy services and the management of health services, in accordance with Article 9 of the UK GDPR and applicable UK data protection law.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal of consent will not affect processing already carried out lawfully before consent was withdrawn.

6. Who we share information with

We only share information where necessary, lawful and proportionate. This may include:

• Prescribing clinicians.
• Pharmacists.
• Members of our pharmacy team.
• Payment providers.
• Identity verification providers.
• Courier companies for medicine delivery.
• IT, hosting and website service providers.
• Regulatory authorities where legally required.
• Law enforcement agencies where required by law.
• Your GP or another healthcare professional involved in your care where clinically appropriate, with your consent or where otherwise permitted by law.

We never sell your personal information.

7. Marketing communications

We may contact you regarding:

• Important information about your treatment.
• Medicine safety updates.
• Service announcements.
• Account, order or consultation updates.

We will only send promotional emails or marketing communications where you have consented or where permitted by law. You may unsubscribe from marketing communications at any time.

8. Cookies

Our website uses cookies to improve your browsing experience and analyse website performance. Further information is available in our Cookie Policy.

You can control cookies through your browser settings or our cookie banner where available.

9. Keeping your information secure

We take the security of your information seriously. Appropriate technical and organisational measures are in place to protect your personal information against:

• Unauthorised access.
• Accidental loss.
• Misuse.
• Disclosure.
• Alteration.
• Destruction.

These measures include secure hosting, encryption where appropriate, password protection, access controls and regular security monitoring.

Although we take reasonable steps to protect your information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

10. How long we keep information

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy.

Healthcare and pharmacy records are retained in accordance with applicable legal, professional and regulatory requirements. When information is no longer required, it will be securely deleted or anonymised.

11. Your rights

Under UK GDPR, you have the right to:

• Access your personal information.
• Request correction of inaccurate information.
• Request erasure where applicable.
• Request restriction of processing.
• Object to certain processing.
• Request data portability where applicable.
• Withdraw consent where consent is relied upon.

Some rights may be limited where healthcare, pharmacy, legal or regulatory requirements require us to retain records or continue processing information.

12. Third-party websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites. We encourage you to read their privacy policies before submitting personal information.

13. Children's privacy

Our website is not intended for children under the age required to use our services. We do not knowingly collect personal information from children except where legally permitted and clinically appropriate.

14. Where your information is stored

Your personal information is stored securely within the United Kingdom. We do not routinely transfer your personal information outside the United Kingdom.

We take appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse or disclosure.

Should this position change in the future, we will update this Privacy Policy and ensure that any transfer of personal information complies with UK data protection legislation.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website.

16. Contact us

If you have any questions regarding this Privacy Policy or how your personal information is handled, please contact:

17. Complaints about data protection

If you are unhappy with how we have handled your personal information, we would appreciate the opportunity to resolve your concerns first.

You also have the right to lodge a complaint with the Information Commissioner's Office.

ICO website: https://ico.org.uk