Mr Chemist is a trading name of Medheal Ltd. Medicines are dispensed by Trustcare Pharmacy, a UK registered pharmacy regulated by the General Pharmaceutical Council (GPhC).
We are committed to protecting your personal data and handling it in accordance with:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
1. What Information We Collect
We collect and process the following categories of data:
Personal Information
- Name, date of birth, address, contact details
- Payment and order information
Health & Medical Information (Special Category Data)
- Medical history and conditions
- Medication history
- Consultation responses
- Lifestyle information relevant to treatment
This information is necessary to assess suitability for treatment.
2. How Your Data Is Collected
We collect data when you:
- Complete an online consultation
- Place an order
- Contact our team
- Use our website
Some technical data is also collected automatically (IP address, browser type, usage data).
3. Lawful Basis for Processing
We process your data under the following legal bases:
- Contractual obligation – to provide healthcare services
- Legal obligation – to comply with pharmacy and prescribing regulations
- Legitimate interests – to operate and improve our services
- Explicit consent – for processing health (special category) data
Health data is processed under Article 9(2)(h) of UK GDPR (provision of healthcare).
4. How We Use Your Information
Your data is used to:
- Assess your suitability for treatment
- Provide prescribing and dispensing services
- Communicate with you regarding your care
- Prevent misuse of medicines
- Maintain clinical records
- Comply with legal and regulatory requirements
We do not use your medical data for marketing.
5. Sharing Your Information
We may share your data with:
Clinical & Pharmacy Partners
- Prescribers reviewing your consultation
- Trustcare Pharmacy (dispensing pharmacy)
- Healthcare Services
- Your GP (where appropriate and in your best interest)
- Other healthcare professionals if required for safety
Service Providers
- Payment processors
- IT systems (e.g. prescribing platforms such as Semble)
- Delivery partners (limited to name and address only)
All third parties are required to handle your data securely and lawfully.
6. Data Storage & Security
We store your data in secure, encrypted systems:
- Your medical data is stored on secure, encrypted systems
- Access is restricted to authorised healthcare professionals
- We use appropriate technical and organisational safeguards
- We do not store full consultation medical data on the website server
- Clinical data is stored within secure prescribing systems
7. Data Retention
- Medical records: minimum 8 years (NHS standard for adult records)
- Transactional data: as required for legal and financial purposes
After this period, data is securely deleted or anonymised.
8. Your Rights
- Access your personal data
- Request correction of inaccurate data
- Request deletion (where legally permissible)
- Restrict or object to processing
- Data portability
Requests can be made via our contact details below.
9. Identity Verification & Fraud Prevention
- Confirm your identity and age
- Prevent fraudulent orders
- Ensure safe prescribing
Failure to verify identity may result in refusal of service.
10. Marketing Communications
We may send service-related communications (e.g. order updates).
Marketing emails will only be sent if you have opted in.
You may unsubscribe at any time.
11. Cookies & Website Tracking
- Enable core website functionality
- Improve performance and usability
- Analyse traffic and usage
Please refer to our Cookies Policy for full details.
12. Complaints & Data Protection Concerns
If you have concerns about how your data is handled, you may contact us directly.
You also have the right to lodge a complaint with:
13. Contact Details
Data Controller: Medheal Ltd
Trading as: Mr Chemist
