Legal

Privacy policy

Last updated: 10 July 2026

Introduction

This website (pharmacycoedpoeth.co.uk) is provided by The Pharmacy Coedpoeth Ltd, a community pharmacy based in Coedpoeth, Wrexham ("we", "our" or "us"). We are the controller of personal data obtained via our website, meaning we are the organisation legally responsible for deciding how and for what purposes it is used.

We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share any information relating to you ("personal data") in connection with your use of our website. It also explains your rights in relation to your personal data and how to contact us in the event you have a complaint.

We collect, use and are responsible for certain personal data about you. When we do so we are subject to the UK General Data Protection Regulation ("UK GDPR").

This version of our privacy policy is primarily written for adults, including parents and guardians of child users.

What this privacy policy applies to

This privacy policy relates to your use of our website only. Where you receive NHS or private clinical services from us in branch, those records are handled in line with NHS Wales and General Pharmaceutical Council record-keeping rules.

Personal data we collect

When you interact with the website, certain information may be collected in order to operate the website and provide services effectively.

Personal information

You may choose to provide personal information when completing forms, registering for services, contacting the pharmacy, or engaging with features on the website. This information may include your name, contact details, address, date of birth, and other information that you voluntarily submit.

Providing this information is optional, however some services may not be available if the required details are not supplied.

Technical and usage information

Certain technical information may be collected automatically when you visit the website. This can include your IP address, browser type, device information, operating system, access times, and the pages you view before or after visiting the website. This information helps us understand how the website is used and allows us to improve performance and user experience.

Payment information

If you pay for a private service through the website, payment details are processed by external payment providers. We do not store full payment card information on our systems. Payment providers handle payment processing in accordance with their own privacy and security policies.

Mobile device information

If the website is accessed from a mobile device, limited device information such as device type, model, and system information may be collected in order to ensure the website functions correctly.

Information from third parties

In some circumstances, information may be received from third-party services where you have authorised such access. This may occur when connecting accounts or interacting with services provided through integrated platforms such as NHS Login.

How and why we use your personal data

Under data protection law, we can only use your personal data if we have a proper reason, for example:

where you have given consent;
to comply with our legal and regulatory obligations;
for the performance of a contract with you or to take steps at your request before entering into a contract; or
for our legitimate interests or those of a third party.

A legitimate interest is when we have a business or commercial reason to use your personal data, so long as this is not overridden by your own rights and interests. We carry out an assessment when relying on legitimate interests, to balance our interests against your own.

Information collected through the website may be used for a variety of legitimate purposes, including:

Providing pharmacy services and responding to enquiries
Operating, maintaining and improving the website
Communicating important updates or service information
Processing payments or service requests
Preventing fraud, abuse or security incidents
Enforcing legal rights or defending legal proceedings
Monitoring usage patterns and website performance
Responding to customer support requests
Protecting the security of systems and data
Statistical analysis to help us understand our patients
Complying with legal or regulatory obligations

Certain personal data we collect is treated as a special category to which additional protections apply under data protection law, including data concerning your health.

Disclosure of information

We may share information where it is necessary for operational, legal, or service-related purposes.

Legal requirements

Information may be disclosed where required to comply with applicable laws, regulations, legal processes, or lawful requests by public authorities.

Service providers

Certain third-party organisations may assist with services such as website hosting, payment processing, communications, analytics, or technical support. These providers may process information on our behalf under appropriate confidentiality and data protection obligations.

Business partners

Where services are delivered in collaboration with trusted partners (for example NHS Wales, your GP practice, or other healthcare professionals involved in your care), limited information may be shared as necessary to provide those services.

Protection of rights

Information may be shared where reasonably necessary to investigate fraud, enforce policies, protect users, or defend legal claims.

PharmAppy platform services

The website and our patient app operate using technology and infrastructure provided by PharmAppy Services Limited. Certain technical or operational data may be processed within systems operated by PharmAppy Services Limited in order to maintain platform functionality, security, and performance. PharmAppy Services Limited acts as a technology provider and processes information solely for the purpose of operating and supporting the platform.

Cookies and tracking technologies

The website may use cookies and similar technologies to improve functionality and user experience. Cookies are small data files stored on your device that allow websites to recognise returning users and understand how visitors interact with pages. These technologies may be used to:

Maintain essential website functionality
Remember user preferences
Analyse site usage and performance
Improve services and content

Most web browsers allow cookies to be managed or disabled through browser settings. Disabling cookies may affect certain features of the website.

Third-party websites

The website may include links to websites operated by third parties. Once you leave the website, this privacy policy no longer applies. We are not responsible for the privacy practices or content of external websites. You should review the privacy policies of any third-party websites before submitting personal information.

Transferring your personal data out of the UK

Countries outside the UK have differing data protection laws, some of which may provide lower levels of protection of privacy. Where we transfer your personal data outside the UK we do so on the basis of an adequacy regulation or (where this is not available) legally-approved standard data protection clauses recognised or issued further to Article 46(2) of UK GDPR. If we cannot rely on either of those mechanisms we will not transfer your personal data outside the UK unless another exception provided by UK data protection law applies, which we will reflect in an update to this policy.

Security of information

We have appropriate security measures in place to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine need to access it. However, no internet-based system can guarantee absolute security. While we take appropriate precautions to protect information, transmission of data online carries inherent risks. We also have procedures in place to deal with any suspected data security breach, and will notify you and any applicable regulator where we are legally required to do so.

Your data rights

You generally have the following rights, which you can usually exercise free of charge:

Request access to the personal information we hold about you
Request correction of inaccurate information
Request deletion of personal data where appropriate
Request restriction of processing your personal data
Request the transfer of your personal data to you or a third party
Object to processing of your personal data
Not to be subject to automated individual decision-making
Withdraw consent at any time

Requests relating to your personal information can be submitted using the contact details provided below. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Retention of information

Personal information will be retained only for as long as necessary to fulfil the purposes outlined in this policy, including meeting legal, regulatory, or operational requirements. Clinical records are retained in line with NHS Wales retention schedules.

Changes to this privacy policy

This privacy policy was last updated on 10 July 2026. We may need to update this privacy policy from time to time. If the change is material, we will place a prominent notice on our website or update you by other appropriate means.

Keeping your personal data accurate and up to date

It is important that the personal data we hold about you is accurate and up to date. Please let us know of any changes to your details.

Contact information

If you have questions regarding this privacy policy or how your information is handled, please contact:

The Pharmacy Coedpoeth Ltd
Manchester House, Coedpoeth, Wrexham, LL11 3LS
[email protected]
01978 757367

Company registration 04708848. Registered with the General Pharmaceutical Council (premises 1043175). Superintendent Pharmacist: Dhimant Patel (GPhC 2070775). You can verify our registration at pharmacyregulation.org.