Privacy Policy

At Pharmarx Ltd, we are committed to protecting your privacy and ensuring your personal data is handled securely and responsibly. This policy explains how we collect, use, and protect your information when you use our services or visit www.cloudpharmacy.co.uk

By using our website and services, you agree to the practices described in this policy.

1. Who We Are

Pharmarx Ltd is a company registered in Scotland (Company No. SC561117).

Registered office: 3 Houston Interchange Business Park, Livingston, EH54 5DW, United Kingdom.

For the purposes of UK data protection law, Pharmarx Ltd is the data controller responsible for your personal data.

If you have any questions about this policy, you can contact our Privacy Officer:

Nazmul Kadir

Email: support@cloudpharmacy.zendesk.com

(Subject: FAO ICO Privacy Officer)

2. Our Lawful Bases for Processing Your Data

We are required under the UK GDPR to process your personal data lawfully, fairly, and transparently. This means we only process your data when we have a valid legal basis. We may rely on one or more of the following lawful bases:

• Consent – where you have given us clear permission to process your data (e.g., for marketing or sharing medical data with your GP).
• Contract – where processing is necessary to provide the services you have requested or to take steps at your request before entering into a contract.
• Legal Obligation – where we are required to comply with legal or regulatory requirements (e.g., pharmacy and prescribing regulations).
• Legitimate Interests – where processing is necessary for our legitimate business purposes, provided these do not override your rights and freedoms.
• Public Interest – on rare occasions, where processing is required for tasks carried out in the public interest.
• Vital Interests – in extremely rare cases, where processing is necessary to protect your life or the life of another person.

Special Category Data

When processing special category data (such as health information, biometric data, or information revealing racial or ethnic origin), we will only do so with an additional lawful basis, such as your explicit consent or where it is necessary for healthcare purposes.

Legitimate Interests Explained

When we rely on our legitimate interests (or those of a third party), we balance these interests against your privacy rights. Our legitimate interests typically include:

• Operating, providing, and improving our services, including our website.
• Communicating with you and responding to your enquiries.
• Enhancing and developing our services, including marketing activities (where legally permitted).
• Detecting, preventing, or investigating illegal activities such as fraud.
• Maintaining the security of our systems, staff, customers, and business operations.

We will always ensure that any reliance on legitimate interests is reasonable, proportionate, and does not materially affect your rights and freedoms.

3. What Information We Collect

We may collect and process the following information about you:

• Automatically collected data: IP address, browser type, and information about how you use our website.

Information you provide:

• Personal details (name, date of birth, address, telephone number, email).
• Medical information (consultation notes, patient notes, doctor’s details, prescription and treatment history).
• Payment information and order history.
• ID verification documents.

4. How We Use Your Information

 We use your data to:

• Provide pharmacy and medical services.
• Process your orders and payments.
• Verify your identity and prevent fraud.
• Maintain accurate patient records.
• Meet legal and regulatory obligations.
• Communicate with you about your treatment or our services (with your consent).
• We may engage a partner pharmacy and, for that purpose, disclose certain personal information including your name, prescription details, and delivery address. You may opt out of such disclosures at any time by contacting us at support@cloudpharmacy.zendesk.com 
• Information regarding our partner pharmacy is provided below:
  Mediva Pharmacy, Unit 54 Tanners Drive, Blakelands, Milton Keynes, Buckinghamshire, MK14 5BN, GPhC No: 9012803. Superintendent Pharmacist is Nayan Shah (GPhC No: 2060682).

We will never use your medical data for marketing without your explicit consent.

5. Sharing Your Information

We only share your personal data when necessary:

• With trusted third-party service providers (e.g., LexisNexis for ID verification).
• With regulators or governing bodies if legally required.
• To prevent or detect crime, fraud, or potential harm.

We will not share your treatment details with your GP unless you give us permission, although we strongly recommend doing so for continuity of care.

6. Patient Confidentiality

Your medical information is treated with strict confidentiality. It will only be accessed by our pharmacy and prescribing team.

We will not disclose your medical data unless:

• Required by law.
• Directed by a regulator.
• Necessary to prevent harm or crime.

7. ID Verification

All patients must complete ID verification to prevent fraud and ensure safe prescribing.

• We use LexisNexis, a credit reference agency, to perform identity checks.
• If you fail the automatic check, we may request photographic ID before processing your order.
• If you cannot provide suitable ID, your order will be cancelled and refunded.

8. Cookies

We use cookies to improve your experience on our website and to collect anonymised statistical data.

• Cookies do not identify you personally.
• You can disable cookies in your browser settings, but this may affect website functionality.

9. Access to Information

Under the UK GDPR and Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you.
  Please note that there will be a £10 fee in order to cover the costs incurred by us providing this information.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (where legally permitted).
• Restrict or object to processing of your data.
• Withdraw consent (where processing is based on consent).

To exercise your rights, please contact us at support@cloudpharmacy.zendesk.com.

10. Data Security & Retention

We take appropriate technical and organisational measures to safeguard your data against loss, misuse, or unauthorised access.

We only keep your personal data for as long as necessary to fulfil our services and comply with legal, accounting, or regulatory requirements.

11. Governing Law

This Privacy Policy is governed by the laws of the United Kingdom. Any disputes will be subject to the exclusive jurisdiction of the UK courts.