Privacy Policy
Last updated: 14th February 2026
INTRODUCTION
Rose Pharmacy respects the privacy of our users (“user” or “you”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://rosepharmacy.co.uk, including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the “Site”).
Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site or use our services.
We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about changes by updating the “Last Updated” date of this Privacy Policy. Continued use of the Site after changes are posted constitutes acceptance of those changes.
Rose Pharmacy is a UK-based healthcare provider and data controller. All personal data is processed in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
COLLECTION OF YOUR INFORMATION
We may collect information about you in a variety of ways. The information we may collect includes:
Personal Data
Personally identifiable information such as:
-
name
-
postal address
-
email address
-
telephone number
-
date of birth
-
payment details (limited as described below)
This information is provided voluntarily when you:
-
place an order
-
book a consultation
-
complete a contact form
-
register an account
-
use our services
You are not obliged to provide personal information; however, failure to do so may prevent us from providing certain services.
Health and Clinical Information (Special Category Data)
Where you use our clinical services, we may collect and process health-related information, which is considered special category personal data under UK GDPR.
This may include:
-
symptoms and medical history
-
medication history
-
consultation notes
-
diagnostic information
-
prescribing decisions
-
clinical correspondence
We process health data under:
-
Article 6(1)(b) UK GDPR – performance of a contract (where applicable), and/or
-
Article 6(1)(c) – compliance with legal obligations, and/or
-
Article 6(1)(f) – legitimate interests, where appropriate;
and under:
-
Article 9(2)(h) UK GDPR – provision of healthcare and treatment.
Health data is processed only where necessary for safe and lawful healthcare provision and in line with professional and regulatory standards.
Video and Remote Consultation Data
Where clinically appropriate, Rose Pharmacy may offer consultations by video or other remote means.
During such consultations, we may process:
-
identifying information
-
contact details
-
health and medical information
-
communication data necessary for the consultation
Video consultations are not recorded unless explicitly stated and agreed in advance. All remote consultations are conducted using secure systems and in accordance with UK data protection law.
Derivative Data
Information automatically collected when you access the Site, including:
-
IP address
-
browser type
-
operating system
-
access times
-
pages viewed
Financial Data
Financial information (e.g. payment card details) may be collected when you purchase products or services.
We store only limited financial information. Payment processing is handled by secure third-party payment providers. You are encouraged to review their privacy policies.
Mobile Device Data
Device information such as mobile device ID, model, and manufacturer if you access the Site via a mobile device.
Third-Party Data
Information from third parties where you provide consent or where necessary for service provision (e.g. medical correspondence from overseas clinicians).
USE OF YOUR INFORMATION
We use collected information to:
-
provide healthcare services
-
assess suitability for treatment
-
process prescriptions and supply medicines
-
manage bookings and appointments
-
process payments and refunds
-
respond to enquiries
-
comply with legal and regulatory obligations
-
improve the Site and services
Where health data is processed, it is used solely for healthcare and safety purposes.
DISCLOSURE OF YOUR INFORMATION
We may share your information in the following circumstances:
By Law or to Protect Rights
Where required by law or necessary to protect rights, property, or safety.
Third-Party Service Providers
We may share information with third parties that perform services for us, including:
-
payment processors
-
IT service providers
-
hosting providers
-
email service providers
-
delivery and courier companies
These providers process data only as necessary and under contractual safeguards.
Delivery and Courier Services
Where products or medicines are supplied and delivery is requested, we may share limited personal information (such as name, address, and contact details) with courier providers solely for order fulfilment.
Only the minimum necessary data is shared.
Third-Party Healthcare Providers
Some services advertised on the Site may be delivered by independent third-party healthcare professionals using our premises.
In such cases:
-
those providers may act as separate data controllers;
-
you may receive a separate privacy notice from them;
-
Rose Pharmacy is not responsible for the data processing practices of independent providers.
International and Overseas Information
Where you are located outside the United Kingdom or where your care involves overseas medical information, we may process personal data provided by you or on your behalf.
All such processing is carried out under UK data protection standards. Where personal data is transferred outside the UK, appropriate safeguards are applied in accordance with legal requirements.
DATA RETENTION
We retain personal and health data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory, and professional record-keeping requirements.
Clinical records are retained in accordance with professional healthcare standards.
TRACKING TECHNOLOGIES
We may use cookies, web beacons, tracking pixels, and similar technologies. Please refer to our Cookie Policy for further details.
SECURITY OF YOUR INFORMATION
We use administrative, technical, and physical security measures to protect your personal information. However, no system is completely secure, and transmission of data over the internet is at your own risk.
YOUR DATA PROTECTION RIGHTS
Under UK data protection law, you have the right to:
-
access your personal data
-
rectify inaccurate data
-
request erasure (subject to legal obligations)
-
restrict processing
-
object to processing
-
request data portability
-
lodge a complaint with the Information Commissioner’s Office (ICO)
DATA RELATING TO OVERSEAS USERS
Where you access the Site or services from outside the United Kingdom, you acknowledge that your personal data will be processed in accordance with UK data protection law and this Privacy Policy.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy at any time. Changes will be indicated by updating the “Last Updated” date.
CONTACT US
If you have questions or comments about this Privacy Policy, please contact us at:
Rose Pharmacy
24 Creek Road, Greenwich, London, SE8 3BN
0208 469 1711
info@rosepharmacy.co.uk
