Privacy policy.

Introduction

This website (hedonpharmacy.co.uk) is provided by Hedon Pharmacy ("we", "our" or "us"). We are the controller of personal data obtained via our website, meaning we are the organisation legally responsible for deciding how and for what purposes it is used.

We take your privacy very seriously. Please read this Privacy Policy carefully as it contains important information on who we are and how and why we collect, store, use and share any information relating to you (your personal data) in connection with your use of our website. When we do so we are subject to the UK General Data Protection Regulation (UK GDPR).

What this Privacy Policy applies to

This Privacy Policy relates to your use of our website only.

Personal data we collect

When you interact with the website, certain information may be collected in order to operate the website and provide our pharmacy services effectively.

Personal information

You may choose to provide personal information when completing forms, registering for services (such as prescription ordering or booking a consultation), contacting the pharmacy, or engaging with features on the website. This may include your name, contact details, address, date of birth, NHS number, and other information you voluntarily submit.

Providing this information is optional, however some services may not be available if the required details are not supplied.

Technical and usage information

Certain technical information may be collected automatically when you visit the website, including your IP address, browser type, device information, operating system, access times, and the pages you view. This helps us understand how the website is used and improve performance.

Payment information

If you pay for a private service through the website or our app, payment details are processed by external payment providers. We do not normally store full payment card information on our systems.

Mobile device information

If the website or Hedon Pharmacy app is accessed from a mobile device, limited device information such as device type, model, and system information may be collected to ensure it functions correctly.

Information from third parties

In some circumstances, information may be received from third-party services where you have authorised such access — for example, when your GP surgery sends an electronic prescription to us.

How and why we use your personal data

Under data protection law, we can only use your personal data if we have a proper reason, e.g.:

• where you have given consent
• to comply with our legal and regulatory obligations (including NHS and GPhC standards)
• for the performance of a contract with you or to take steps at your request before entering into a contract
• for our legitimate interests or those of a third party

Information collected through the website may be used for purposes including:

• Providing pharmacy services, dispensing prescriptions and responding to enquiries
• Operating, maintaining, and improving the website and Hedon Pharmacy app
• Communicating important updates or service information
• Processing payments or service requests
• Preventing fraud, abuse, or security incidents
• Monitoring usage patterns and website performance
• Responding to customer support requests
• Statistical analysis to help us understand our customer base
• Complying with legal or regulatory obligations

Certain personal data we collect (including data concerning your health) is treated as a special category to which additional protections apply under data protection law.

Disclosure of information

We may share information where necessary for operational, legal, or service-related purposes.

Legal requirements

Information may be disclosed where required to comply with applicable laws, regulations, legal processes, or lawful requests by public authorities, including NHS England and the General Pharmaceutical Council.

Service providers

Third-party organisations may assist with website hosting, payment processing, communications, analytics, or technical support. These providers process information on our behalf under appropriate confidentiality and data protection obligations.

Business partners

Where services are delivered with trusted partners (such as your GP surgery or delivery couriers), limited information may be shared as necessary to provide those services.

Protection of rights

Information may be shared where reasonably necessary to investigate fraud, enforce policies, protect users, or defend legal claims.

PharmAppy platform services

The website and Hedon Pharmacy app operate using technology and infrastructure provided by PharmAppy Services Limited. Certain technical or operational data may be processed within systems operated by PharmAppy Services Limited in order to maintain platform functionality, security and performance. PharmAppy Services Limited acts as a technology provider and processes information solely for the purpose of operating and supporting the platform.

Cookies and tracking technologies

The website may use cookies and similar technologies to improve functionality and user experience. These may be used to:

• Maintain essential website functionality
• Remember user preferences
• Analyse site usage and performance
• Improve services and content

Most web browsers allow cookies to be managed or disabled through browser settings. Disabling cookies may affect certain features of the website.

Third-party websites

The website may include links to websites operated by third parties. Once you leave our website, this Privacy Policy no longer applies. We are not responsible for the privacy practices or content of external websites.

Transferring your personal data out of the UK

It is sometimes necessary to transfer your personal data to countries outside the UK. We will only do so where the UK government has decided the country ensures an adequate level of protection (an "adequacy regulation" under Article 45 UK GDPR), where appropriate safeguards are in place, or where a specific exception applies under relevant data protection law.

Security of information

We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine need to access it. No internet-based system can guarantee absolute security; we will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Your data rights

You generally have the following rights, which you can usually exercise free of charge:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of personal data where appropriate
• Request restriction of processing your personal data
• Request the transfer of your personal data to you or to a third party
• Object to processing of your personal data
• Not to be subject to automated individual decision-making
• The right to withdraw consent

Requests can be submitted using the contact details below.

Retention of information

Personal information will be retained only for as long as necessary to fulfil the purposes outlined in this policy, including meeting legal, regulatory, or operational requirements (NHS records are typically held for the periods set out in the NHS Records Management Code of Practice).

Changes to this Privacy Policy

This Privacy Policy was last updated in June 2026. If a change is material, we will place a prominent notice on our website or update you by other appropriate means.

Keeping your personal data accurate and up to date

It is important that the personal data we hold about you is accurate and up to date. Please inform us of any changes to your data.

Contact information

If you have questions regarding this Privacy Policy or how your information is handled, please contact:

Hedon Pharmacy
16-20 St Augustine's Gate, Hedon, Hull, HU12 8EX
[email protected]
01482 898973