Privacy Policy

1. Who We Are

TheChemistLive is a UK-based online healthcare platform operated by a registered pharmacy. We are the data controller for the personal information we collect from you.

2. Information We Collect

We collect the following types of information:

• Personal details: name, email, phone number, date of birth, gender
• Health information: assessment responses, medical history, current medications
• Payment information: processed securely via Stripe (we do not store card details)
• Usage data: how you interact with our platform
• Delivery address for order fulfilment

3. How We Use Your Information

• To provide clinical assessment and prescription services
• To process and deliver your orders
• To communicate with you about your treatment
• To comply with legal and regulatory obligations
• To improve our services and user experience
• To send marketing communications (only with your consent)

4. Legal Basis for Processing

We process your personal data under the following legal bases: your consent, performance of a contract (providing healthcare services), legal obligations (pharmacy regulations), and legitimate interests (improving our services).

5. Health Data (Special Category)

Your health information is classified as special category data under UK GDPR. We process this data for the purposes of providing healthcare services, with your explicit consent. This data is handled with the highest level of security and is only accessible to authorised clinical staff.

6. Data Sharing

We do not sell your personal data. We may share your information with:

• Our clinical team (pharmacists and prescribers) for treatment purposes
• Your GP, with your consent or where clinically necessary
• Payment processors (Stripe) for secure payment handling
• Delivery partners for order fulfilment
• Regulatory bodies where required by law

7. Data Retention

Medical records are retained in accordance with NHS guidelines (typically 10 years for adults). Account data is retained for the duration of your account. You may request deletion of non-medical data at any time.

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (where applicable)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the ICO

9. Cookies

We use essential cookies for authentication and session management. Analytics cookies are only used with your consent. You can manage your cookie preferences through your browser settings.

10. Contact Us

For any privacy-related queries, please contact our Data Protection Officer at privacy@thechemistlive.com.