Dr Weightmans

At DrWeightmans  we are dedicated to protecting your privacy and making sure that your personal information is handled in a legal and responsible way. This notice tells you what kind of information we collect, how it is used, stored, and kept safe, and what rights you have under the UK General Data Protection Regulation (UK GDPR) and other data protection laws.

Who We Are

The company that runs Dr. Weightmans is based in the UK and is in charge of your personal data. In other words, we decide what your data is used for and how it is handled.

How to Get in Touch: Send an email to [email protected]. Postal Address: 49 Fishmoor Drive, Blackburn, BB2 3UY Data Protection Officer (DPO): [Talha Isap]

The Information We Gather

The following types of personal data may be collected and used by us:

• Full name, date of birth, and gender to prove who you are.
• Address, email address, and phone number for getting in touch.
• Health related data includes medical history, symptoms, prescriptions, picture submissions, and records of consultations.
• Data about payments and transactions, such as order records, payment ID, and some card information.
• Techinical data including IP location, device and browser type, and login timestamps are examples of technical data.
• Usage data: how you use our website or app.
• Marketing choices: Status of opting in and communication choices.
• We may also get personal information about you from healthcare sources, like your doctor or the NHS, if it’s needed for your care or by law.

Purpose and legal basis for processing

We will only use your information when the law allows us to. Among these are:

• Required by contract: to provide prescribing, pharmacy and health care services.
• Legal Obligation: compliance with laws that apply.
• Consent: When you have freely agreed to something, like for business purposes.
• Legitimate Interests: business operations, security, fraud prevention.
• In case of a medical disaster.
• The provision of healthcare: is covered by Article 9(2)(h) of the UK GDPR for special category data.

Use of personal information

Your data may be used for the following:

• Processing and fulfilment of prescriptions.
• Offer medical advice tailored to you.
• Check your ID and make sure the medication is correct for you.
• Send updates and alerts regarding your order.
• Meeting professional standards.
• Perform analytics, internal audits, and service updates.
• Process transactions and refunds if necessary.

Disclosure of Your Data

We will only share your data if it is essential to do so. The organisations we may need to share your data with include:

• The NHS and other qualified health care workers.
• Delivery services/couriers like Royal Mail and DPD.
• Cloud based IT service providers.
• Payment processing companies such as Stripe and Mollie.
• Regulatory bodies, like the GPhC and GMC.
• Partners in marketing and communication (provided you have given consent).

All third-party providers are legally required to keep data private and safe, as stated in data protection laws.

Security measures

To keep your personal information safe, we use technical, physical, and administrative measures. Among these are:

• Communication that is encrypted with SSL.
• Restricted access to the system limited to people who need to know.
• Secure servers and environments where data is stored
• Regular audits of compliance and security.
• Staff training and confidentiality procedures.

Data Retention

We will only keep your personal information for as long as it takes to complete the tasks for which it was received and to meet legal and regulatory requirements:

• Health records are kept for up to 10 years after a patient’s death according to NHS guidelines.
• Transactional and account info is kept for up to 6 years.
• Marketing data will be kept unless consent is withdrawn.
• Research and analytics data is kept in a manner that hides or anonymises names.

Your Rights

The law protects your privacy and gives you the following rights:

• To be informed about what is being done with your data.
• To access the private information we hold about you.
• To request inaccurate information be amended.
• To ask for deletion when it’s appropriate.
• To restrict or say no to certain processing.
• To request for data transfer.
• To contest automated decision-making.

Please email [email protected] to use any of your rights. You also retain the right to raise concerns with the Information Commissioner’s Office (ICO): Click on https://ico.org.uk/make-a-complaint

Use of Cookies

Cookies and other similar technologies are used on our website to improve the user experience, track site traffic, and make sure the site works properly. You can change how cookies work in your browser’s settings. To learn more, read our full Cookie Policy.

Automated decisions

Some services, like online medical exams, may use computers to make decisions. You have the right to ask for a human review of a significant decision that was made only by automated processes.

Communication and Marketing

Based on what you tell us, we may send you messages about our goods or services. You can stop getting emails from us at any time by clicking the “unsubscribe” link or contacting us.

Policy Changes

This privacy warning may be updated from time to time. Any changes will be put on our website, and if necessary, you may also be emailed.

Updated most recently on 20/5/2025.