Privacy policy

1. Who we are

Muirend Pharmacy is a trading name of Muirend Pharmacy Ltd [CONFIRM: company number], registered in Scotland. Our pharmacy is located at 521–523 Clarkston Road, Muirend, Glasgow, G44 3PN.

We are registered with the General Pharmaceutical Council (GPhC) [CONFIRM: GPhC registration number]. Our Superintendent Pharmacist is James McKeever (GPhC 1042294).

For data protection purposes, Muirend Pharmacy Ltd is the data controller. Queries about your data should be addressed to the Superintendent Pharmacist at hello@muirendpharmacy.co.uk [CONFIRM email] or 0141 637 2014.

2. Data we collect

Depending on how you use our services, we may collect:

• Identity data: name, date of birth
• Contact data: address, phone number, email address
• Health data: medical history, medication details, prescriptions, clinical consultation records
• GP data: name and address of your GP practice
• Transaction data: records of services provided and any charges
• Technical data: IP address, browser type, and pages visited (if analytics are enabled)
• Communications data: enquiries, form submissions, and correspondence

3. Legal basis for processing

We process personal data under the following legal bases (UK GDPR):

• Consent (Article 6(1)(a) / Article 9(2)(a)): for web forms, newsletter, and non-clinical data
• Contract (Article 6(1)(b)): where we are fulfilling a service you have requested
• Legal obligation (Article 6(1)(c)): clinical records, GPhC requirements, NHS obligations
• Vital interests (Article 6(1)(d)): in rare clinical emergencies
• Legitimate interests (Article 6(1)(f)): for operational communications and security
• Health care provision (Article 9(2)(h)): for processing clinical/health data

4. How we use your data

• Providing NHS and private clinical consultations
• Dispensing and managing prescriptions
• Contacting your GP on your behalf (with your authorisation)
• Sending SMS notifications when prescriptions are ready
• Processing online forms and enquiries
• Meeting GPhC, NHS, and legal obligations

5. Sharing your data

We share data with:

• Your GP practice, when requesting or processing prescriptions
• NHS systems (e.g. Pharmacy Care Record, EPS) as required by NHS contract
• Our IT/software providers, under appropriate data processing agreements
• Formspark, which processes web form submissions — see Formspark privacy policy

We do not sell, rent, or share personal data with advertising platforms, marketing companies, or social media networks. Health data is never used for advertising purposes.

6. Retention

• Clinical records: retained in line with GPhC guidance and NHS Scotland requirements (minimum 8 years for adults)
• Web form submissions: 30 days from receipt, or as required to fulfil the service
• Marketing communications: until you unsubscribe [CONFIRM: if applicable]

7. Your rights

Under UK GDPR, you have the right to:

• Access your personal data (Subject Access Request)
• Correct inaccurate data
• Request deletion (where no legal obligation to retain applies)
• Restrict processing in certain circumstances
• Data portability (for data processed by consent or contract)
• Object to processing based on legitimate interests

To exercise any right, contact us at hello@muirendpharmacy.co.uk [CONFIRM]. We will respond within 30 days.

If you are not satisfied with our response, you may complain to the Information Commissioner's Office (ICO): ico.org.uk or 0303 123 1113.

8. Cookies

See our Cookie Policy for details of what cookies we use and how to manage them.

9. Changes to this policy

We may update this policy as our services or legal requirements change. The current version is always on this page with the date of last update.