Privacy Policy
Razi Meds Pharmacy – Privacy Policy
Last Updated: Dec 4, 2025
1. Introduction
Razi Meds Pharmacy is the Data Controller for all personal data processed in connection with NHS and private prescriptions, pharmacy services, deliveries, care-home services, cosmetic/OTC orders, and website use. We comply with UK GDPR, the Data Protection Act 2018, GPhC standards, and NHS Terms of Service.
2. Types of Data We Collect
We may collect:
• Identifiers: name, date of birth, address, phone, email.
• Health and prescription data needed to provide pharmacy services.
• Care-home data: resident medication records, MAR information.
• Order/payment data for OTC/cosmetic medicines.
• Technical data: IP address, cookies, browser/device information.
• Communication records: enquiries, complaints, clinical notes.
3. How We Use Your Data
We use personal and health data to:
• Dispense NHS and private prescriptions.
• Provide pharmacy advice, vaccinations, and care-home services.
• Prepare and deliver medicines safely.
• Maintain legally required pharmacy records.
• Manage accounts and fulfil orders.
• Improve services and ensure patient safety.
• Meet regulatory and legal obligations.
4. Lawful Basis for Processing (Article 6)
• 6(1)(b) – Contract (order fulfilment and deliveries).
• 6(1)(c) – Legal obligation (NHS regulations, Human Medicines Regulations).
• 6(1)(f) – Legitimate interests (safety, fraud prevention, service improvement).
• 6(1)(a) – Consent (optional marketing).
5. Special Category Data (Article 9)
Health data is processed under:
• 9(2)(h) – Provision of health or social care.
• 9(2)(g) – Substantial public interest (medication safety).
• 9(2)(a) – Explicit consent (where required).
6. Data Sharing
We may share data with:
• GP surgeries, NHS services, hospitals.
• Delivery partners (e.g., Royal Mail).
• Pharmacy IT, EPS and PMR system providers.
• Regulators (GPhC, MHRA, NHS England).
• Payment processors for OTC/cosmetic orders.
• Law enforcement where legally required.
We never sell personal data.
7. International Transfers
If data is transferred outside the UK, we use approved safeguards such as adequacy regulations or standard contractual clauses.
8. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
9. Your Rights
You may:
• Access your data.
• Correct inaccurate data.
• Request restriction or object to processing.
• Withdraw consent for marketing.
• Request deletion (not applicable to mandatory pharmacy records).
10. Automated Decision-Making
We do not use automated decision-making that produces legal or significant effects.
11. Cookies
We use essential and optional cookies to operate and improve our website. You can adjust preferences through our cookie banner.
12. Data Security
We implement secure systems, encryption, access controls, and NHS DSP Toolkit–aligned measures to protect your information.
13. Contact Details
Email: info@razi.uk
14. Complaints
You may contact the ICO:
Information Commissioner’s Office
www.ico.org.uk
15. Updates
We may update this policy and will publish any changes on our website.