Lynam Pharma Limited is committed to protecting and respecting your privacy.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
For the purpose of the Data Protection Act 2018 (the Act) and forthcoming General Data Protection Regulation (GDPR) the data controller is Shailesh Patel of 4 Bessemer crescent, Rabans Lane Industrial Area, Aylesbury HP19 8TF
Information we may collect about you.
We may collect and process the following data about you:
- Information that you provide by filling in forms on our site www.lynampharma.co.uk (our site). This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services. We may also ask you for information when you report a problem with our site.
- Basic details about you; name, age, date of birth, email address, your telephone number, address, professional qualifications and numbers
- Records of medicines that have been prescribed by a doctor or another qualified prescriber, and which have been supplied by this pharmacy;
- Details of medicines purchased from the pharmacy without a prescription (“over the counter medicines”);
- If you contact us, we may keep a record of that correspondence.
- Information for identification and verification purposes, for example a passport or full driving licence.
- Information to process payments such as debit and credit card numbers.
- Lynampharma may also ask you to complete surveys that we use to evaluate the effectiveness of the services we provide, although you do not have to respond to them.
- Details of transactions you carry out through our site and of the fulfilment of your orders.
- Details of your visits to our site [including, but not limited to, traffic data, location data, web logs and other communication data, whether this is required for our own invoicing purposes or otherwise] and the resources that you access.
- As part of providing a professional, safe and efficient service, there is certain information that we record. This includes details of drugs and appliances purchased or dispensed against private prescriptions as well as significant advice given and referrals made to other health professionals. This information won’t be shared with anyone else except under the circumstances described below in ‘Sharing Information’.
IP addresses and cookies
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration. This is statistical data about our users' browsing actions and patterns, and does not identify any individual. For the same reason, we may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer's hard drive. They help us to improve our site and to deliver a better and more personalised service. They enable us:
- To estimate our audience size and usage pattern.
- To store information about your preferences, and so allow us to customise our site according to your individual interests.
- To speed up your searches.
- To recognise you when you return to our site.
Where we store personal data
All information you provide to us is stored on our secure servers in the United Kingdom. Any payment transactions will be encrypted [using SSL technology].] Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Use made of the information
We use the information held about you in the following ways:
- To ensure that content from our site is presented in the most effective manner for you and for your computer.
- To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
- To carry out our obligations arising from any contracts entered into between you and us.
- To allow you to participate in interactive features of our service, when you choose to do so.
- To notify you about changes to our service.
- We may also use your data, to provide you with information about goods and services which may be of interest to you and we may contact you about these by post, email or telephone.
If you are an existing customer, we will only contact you by electronic means e-mail, telephone or SMS with information about goods and services similar to those which were the subject of a previous sale to you.
If you do not want us to use your data in this way, please tick the relevant box situated on the form on which we collect your data.
The information held about you will not be shared for any reason, unless:
- You ask us to do so;
- We ask and you give us specific permission;
- If you have a query that we cannot deal with we may ask with your permission to contact other organisations, such as Cosmetic Courses to help us deal with your query in the most effective manner.
- We are required by law, for example prescribers must be notified where a patient presents a prescription and the pharmacist becomes aware of clinically significant issues arising in connection with that prescription;
- We are permitted by law, for example where public interest overrides the need to keep the information confidential.
- The types of people we may ask you for permission to share information with include your doctors (GP and hospital) and other health professionals such as nurses.
- Anyone who receives information from us also has a legal duty to keep this information confidential, subject to recognised exceptions of the types listed above.
You have the right to confidentiality under the General Data Protection Regulation and the Data Protection Act 2018 and the common law duty of confidence. We also comply with the NHS Code of Practice on Confidential Information and pharmacists have a requirement under their professional standards to keep records about you confidential, secure and accurate.
All of our staff contracts of employment contain a requirement to keep patient information confidential.
You have the right to access and update your personal information we hold about you. You can choose when and how we communicate with you and can opt out of marketing messaging at any time
You can ask us not to process your personal data for marketing purposes at any time. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes.
You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at Lynam Pharma, 4 Bessemer Crescent, Rabans Lane Industrial Area, Aylesbury, Buckinghamhsire. HP19 8TF, or e-mail firstname.lastname@example.org
We comply with the NHS Code of Practice on Confidentiality and pharmacists have a requirement under their professional Code of Ethics to keep records about you confidential, secure and accurate. All of our staff contracts of employment contain a requirement to keep patient information confidential. Our guiding principle is that we hold your records in strict confidence.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Access to information.
You have the right to ask for a copy of all records held about you (generally in paper or electronic form).
Generally, there will be no charge for a printed copy of the information we hold about you. We are required to respond to your request within one month.
You will need to give adequate information in order for our staff to identify you (for example, full name, address and date of birth). You will be required to provide ID, for example a passport, full driving licence or credit/debit card before any information is released to you.
If you think any information we hold on you is inaccurate or incorrect, please let us know.
You may object to us holding your information.
You may lodge a complaint with the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Activity: Private Prescriptions
|Pharmacy status||Data Controller|
|Data subjects and personal data||Personal data such as patient name, address, contact details, medicines and relevant health data.|
|Purpose||Care of the patient.|
|Lawful basis for processing personal data||Article 6(1)(e) of the GDPR. Necessary for the performance of a task in the public interest.|
|Special category of personal data||Yes, data concerning health (this could include information on a disability). The data may also be another special category of personal data.|
|Basis for processing special category of data||Article 9(2)(h) of the GDPR (including the Data Protection Act). ‘The provision of health care or treatment’ or ‘the management of health care systems or services or social care systems or services’ or ‘necessary for reasons of public health in the area of public health’.|
|How is data collected?||The patient, or the patient’s representative, a prescription, another healthcare professional, or the SCR record, as appropriate.|
|How is data stored?||Primarily the PMR system, but also e-mail or equivalent, POM, CD or Specials registers, as relevant and necessary. Also, hard copy prescription.|
|To whom do you provide the data (recipients)? (including processors)||As appropriate: NHS Business Services Authority (only controlled drug prescriptions for schedule 2 and 3 drugs for information, not payment) and relevant information to others in the NHS (e.g. as appropriate, GP practice, hospital on admission); relevant information to others such as the GPhC for compliance and enforcement purposes.|