Privacy Policy

Last updated: 23 July 2026

Pharmacy Weight Loss Midsomer Norton | GPhC Registration No. 9012511 | Last Updated: July 2026

We are committed to protecting your privacy and handling your personal data responsibly. This policy explains how we collect, use, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Pharmacy Weight Loss Midsomer Norton is a GPhC registered online pharmacy weight loss clinic (GPhC No. 9012511) serving patients in Midsomer Norton and across the UK. We act as the Data Controller for all personal information you provide to us.

2. Data We Collect

To provide safe and effective pharmacy services, we may collect the following information:

• Personal details: Full name, date of birth, address, email address, and phone number
• Health information: Medical history, current medications, weight, BMI, and any clinical information relevant to your treatment
• Payment information: Billing details processed securely through our payment provider
• Technical data: IP address, browser type, and website usage data collected via cookies
• Communications: Records of any correspondence between you and our pharmacy team

3. How We Use Your Data

We process your personal and health data to deliver our pharmacy services safely and lawfully. Specifically, we use your data to:

• Assess your suitability for weight loss treatments and issue prescriptions where appropriate
• Process and fulfil your orders, with delivery typically within 1 working day once approved by our pharmacist
• Communicate with you regarding your treatment, orders, and any clinical concerns
• Maintain accurate medical and dispensing records as required by our GPhC registration obligations
• Comply with legal and regulatory requirements, including reporting obligations to relevant healthcare authorities
• Improve our website and services through anonymised usage analytics

Our legal bases for processing include the performance of a contract, compliance with legal obligations, protection of vital interests, and, for special category health data, the provision of healthcare services by a regulated professional.

4. Cookies

Our website uses cookies to enhance your browsing experience and help us understand how visitors use our site. Cookies we use include:

• Essential cookies: Required for the website to function correctly, including secure login and session management
• Analytics cookies: Help us understand visitor behaviour in an anonymised form so we can improve our services
• Preference cookies: Remember your settings and choices to personalise your experience

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect website functionality.

5. Third-Party Sharing

We do not sell or rent your personal data to any third party. We may share your information in limited circumstances:

• Healthcare providers: We may share relevant clinical information with your GP or other healthcare professionals where required for your safety or by law
• Service providers: Trusted third parties who assist us in operating our website, processing payments, and delivering orders — all bound by strict data processing agreements
• Legal obligations: Regulatory bodies such as the GPhC or law enforcement agencies where we are legally required to disclose information

All third parties we work with are required to handle your data securely and in compliance with UK data protection law.

6. Data Retention

We retain patient records for a minimum of 8 years in line with NHS and GPhC guidelines, or longer where required by law. Payment data is retained only as long as necessary for financial and legal purposes. You may request details of our full retention schedule by contacting us directly.

7. Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All health data is encrypted and stored on secure servers within the UK.

8. Your Data Rights

Under UK GDPR, you have rights in relation to your personal data, including the right to access, correct, or request deletion of your information, and the right to object to or restrict certain processing. To exercise any of these rights, please contact us using the details below. We will respond to all data-related enquiries within 48 hours.

9. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please get in touch:

Pharmacy Weight Loss Midsomer Norton
GPhC No. 9012511
Phone: (+44) 116 4646009
Email: info@pharmacyweightloss.co.uk

We aim to respond to all enquiries within 48 hours. This policy was last reviewed in July 2026 and will be updated periodically to reflect any changes in our practices or applicable law.