Your privacy matters to us. This page explains how Chapel Pharmacy collects, uses, and protects your personal information. We want to be open and honest about what we do with your data.
Please read this policy carefully. If you have any questions, you can contact us using the details at the bottom of this page.
Chapel Pharmacy is operated by Vectrum Services Limited. We are the data controller for the personal information we collect through this website (chapelpharmacy.co.uk), our booking system, and when you visit the pharmacy in person.
This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Depending on how you interact with us, we may collect the following categories of personal data:
Identity and contact data – your name, date of birth, address, email address, and telephone number.
Health and medical data – information relevant to the services you receive, such as medical history, current medications, allergies, test results, and treatment records. This is classified as special category data under the UK GDPR.
Booking and appointment data – details submitted when you book through our Simplybook system, including the service requested, preferred date and time, and any pre-appointment information you provide.
Transaction data – payment details and records of services purchased.
Technical data – your IP address, browser type and version, device information, time zone, and browsing actions on our website, collected automatically through cookies and similar technologies.
Communication data – the content of any emails, enquiries, or messages you send us.
Directly from you – when you visit the pharmacy, book an appointment through Simplybook, submit a contact or enquiry form, register for a service, or communicate with us by email, phone, or in person.
Automatically – when you browse our website, we collect technical data through cookies and similar tracking technologies. See our Cookie Policy for details.
From third parties – we may receive information from the NHS (for example, through the Electronic Prescription Service or NHS referrals), your GP surgery, or other healthcare providers involved in your care.
We process your personal data only where we have a lawful basis to do so under the UK GDPR. The table below sets out the purposes for which we use your data and the corresponding legal basis.
Purpose | Lawful Basis |
Dispensing NHS and private prescriptions | Legal obligation; performance of a contract |
Providing pharmacy services (Pharmacy First, vaccinations, health checks) | Legal obligation; public interest in healthcare provision |
Providing private clinical services (prescribing clinic, weight loss, ED, period delay) | Performance of a contract; explicit consent for health data |
Providing aesthetic and cryotherapy treatments | Performance of a contract; explicit consent for health data |
Providing travel vaccination and antimalarial services | Performance of a contract; explicit consent for health data |
Managing appointments and bookings via Simplybook | Performance of a contract |
Responding to your enquiries and communications | Legitimate interests (customer service) |
Sending appointment reminders | Legitimate interests (service delivery); consent where required |
Improving our website and services | Legitimate interests (business improvement) |
Complying with legal and regulatory obligations (e.g. GPhC, NHS) | Legal obligation |
Where we rely on your consent, you may withdraw it at any time by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
We do not sell your personal data. We may share your data with the following categories of recipients where necessary:
All third-party processors are required to handle your data in accordance with UK data protection law and our instructions.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
When personal data is no longer required, it is securely deleted or anonymised.
Under the UK GDPR, you have the following rights in relation to your personal data:
To exercise any of these rights, please contact us at info@chapelpharmacy.co.uk. We will respond within one month of receiving your request.
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include secure storage of physical records, password-protected systems, encrypted data transmission on our website (SSL/TLS), and access controls limiting who within the pharmacy can view your data.
While we take all reasonable steps to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining the highest practicable standard of data protection.
Our website uses cookies to ensure it functions correctly, to analyse how visitors use the site, and to support third-party services such as our booking system. For full details on the cookies we use and how to manage them, please see our Cookie Policy.
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Any changes will be posted on this page with a revised effective date. We encourage you to review this page periodically.
If you have any questions about this Privacy Policy or wish to exercise any of your data protection rights, please contact us:
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
We would appreciate the opportunity to resolve any concerns before you contact the ICO. Please reach out to us first so we can address the matter directly.
