Privacy Policy

At Bliss Pharmacy Limited, we are committed to protecting your privacy and ensuring your personal data is handled securely and responsibly. This policy explains how we collect, use, and protect your information when you use our services or visit www.blisspharmacy.co.uk

By using our website and services, you agree to the practices described in this policy.

1. Who We Are
Bliss Pharmacy Limited is a company registered in England (Company No. 16917655).
Registered office: 3 Caxton Road, Preston, PR2 9ZZ, United Kingdom.
For the purposes of UK data protection law, Bliss Pharmacy Limited is the data controller responsible for your personal data.
If you have any questions about this policy, you can contact our Privacy Officer.

2. Our Lawful Bases for Processing Your Data
We are required under the UK GDPR to process your personal data lawfully, fairly, and transparently. This means we only process your data when we have a valid legal basis. We may rely on one or more of the following lawful bases:
Consent – where you have given us clear permission to process your data (e.g., for marketing or sharing medical data with your GP).
Contract – where processing is necessary to provide the services you have requested or to take steps at your request before entering into a contract.
Legal Obligation – where we are required to comply with legal or regulatory requirements (e.g., pharmacy and prescribing regulations).
Legitimate Interests – where processing is necessary for our legitimate business purposes, provided these do not override your rights and freedoms.
Public Interest – on rare occasions, where processing is required for tasks carried out in the public interest.
Vital Interests – in extremely rare cases, where processing is necessary to protect your life or the life of another person.

Special Category Data
When processing special category data (such as health information, biometric data, or information revealing racial or ethnic origin), we will only do so with an additional lawful basis, such as your explicit consent or where it is necessary for healthcare purposes.

Legitimate Interests Explained
When we rely on our legitimate interests (or those of a third party), we balance these interests against your privacy rights. Our legitimate interests typically include:

Operating, providing, and improving our services, including our website.
Communicating with you and responding to your enquiries.
Enhancing and developing our services, including marketing activities (where legally permitted).
Detecting, preventing, or investigating illegal activities such as fraud.
Maintaining the security of our systems, staff, customers, and business operations.
We will always ensure that any reliance on legitimate interests is reasonable, proportionate, and does not materially affect your rights and freedoms.

3. What Information We Collect
We may collect and process the following information about you:

Automatically collected data: IP address, browser type, and information about how you use our website.
Information you provide:

Payment information and order history.
Medical information (consultation notes, patient notes, doctor’s details, prescription and treatment history).
Personal details (name, date of birth, address, telephone number, email).
ID verification documents.

4. How We Use Your Information
We use your data to: Provide pharmacy and medical services.
Process your orders and payments.
Verify your identity and prevent fraud.
Maintain accurate patient records.
Meet legal and regulatory obligations.
Communicate with you about your treatment or our services (with your consent).
We may engage a partner pharmacy and, for that purpose, disclose certain personal information including your name, prescription details, and delivery address. You may opt out of such disclosures at any time by contacting us at [email protected] 
We will never use your medical data for marketing without your explicit consent.

5. Sharing Your Information
We only share your personal data when necessary:

With trusted third-party service providers (e.g., LexisNexis for ID verification).
With regulators or governing bodies if legally required.
To prevent or detect crime, fraud, or potential harm.
We will not share your treatment details with your GP unless you give us permission, although we strongly recommend doing so for continuity of care.

6. Patient Confidentiality
Your medical information is treated with strict confidentiality. It will only be accessed by our pharmacy and prescribing team.
We will not disclose your medical data unless:
Required by law.
Directed by a regulator.
Necessary to prevent harm or crime.

7. ID Verification
All patients must complete ID verification to prevent fraud and ensure safe prescribing.
We use LexisNexis, a credit reference agency, to perform identity checks.
If you fail the automatic check, we may request photographic ID before processing your order.
If you cannot provide suitable ID, your order will be cancelled and refunded.

8. Cookies
We use cookies to improve your experience on our website and to collect anonymised statistical data.
Cookies do not identify you personally.
You can disable cookies in your browser settings, but this may affect website functionality.

9. Access to Information
Under the UK GDPR and Data Protection Act 2018, you have the right to:

Access the personal data we hold about you.
Please note that there will be a £10 fee in order to cover the costs incurred by us providing this information.
Request correction of inaccurate or incomplete data.
Request deletion of your data (where legally permitted).
Restrict or object to processing of your data.
Withdraw consent (where processing is based on consent).
To exercise your rights, please contact us at [email protected]

10. Data Security & Retention
We take appropriate technical and organisational measures to safeguard your data against loss, misuse, or unauthorised access.
We only keep your personal data for as long as necessary to fulfil our services and comply with legal, accounting, or regulatory requirements.

11. Governing Law
This Privacy Policy is governed by the laws of the United Kingdom. Any disputes will be subject to the exclusive jurisdiction of the UK courts.