Privacy Policy

1. Introduction

MedsHut ("we", "us", or "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, share, and protect your information when you use our online pharmacy services.

As a licensed pharmacy operating in the UK, we are regulated by the General Pharmaceutical Council (GPhC) and must comply with strict data protection requirements under the UK GDPR and Data Protection Act 2018.

2. Information We Collect

Personal Information

• Name, date of birth, and contact details
• Address and delivery information
• NHS number (where applicable)
• Payment and billing information
• Account credentials and preferences

Health Information

• Prescription details and medical history
• Health conditions and allergies
• Medication usage and adherence data
• Consultation records with our pharmacists

Technical Information

• IP address and device information
• Browser type and settings
• Usage data and website interactions
• Cookies and similar technologies

3. How We Use Your Information

• To process and fulfill your medication orders
• To provide pharmaceutical care and consultations
• To verify prescriptions and ensure medication safety
• To communicate about your orders and health services
• To comply with legal and regulatory requirements
• To improve our services and website functionality
• To prevent fraud and ensure account security

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract: To fulfill our pharmacy services and deliver your medications
• Legal obligation: To comply with pharmacy regulations and healthcare laws
• Vital interests: To protect your health and safety
• Legitimate interests: To improve our services and prevent fraud
• Consent: For marketing communications and optional services

5. Information Sharing

We may share your information with:

• Healthcare professionals involved in your care
• NHS systems for prescription verification
• Delivery partners for order fulfillment
• Payment processors for secure transactions
• Regulatory authorities when required by law
• Service providers who help us operate our platform

We never sell your personal information to third parties for marketing purposes.

6. Data Security

We implement robust security measures to protect your information, including encryption, secure servers, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Under UK data protection law, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict processing
• Data portability
• Withdraw consent where applicable

Please note that some rights may be limited due to regulatory requirements for pharmacy records.

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal requirements. Prescription records are kept for a minimum of 2 years as required by pharmacy regulations, while some information may be retained longer for legitimate business purposes.

9. Cookies

Our website uses cookies to enhance your experience, remember your preferences, and analyze website traffic. You can control cookie settings through your browser, though some features may not function properly if cookies are disabled.

10. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been breached.