Privacy notice

Who we are

Windmill Pharmacy, 709 Windmill Lane, Denton, Manchester, M34 2ET, is the data controller for the information on this page. We are a pharmacy registered with the General Pharmaceutical Council, premises number 1033700, owned by Rachel S Potter Limited.

Ask for the pharmacist, call 0161 336 2111 or email support@windmillpharmacy.co.uk with any question about your information.

What we collect and why

When you book an appointment we collect your name, mobile number, email address and, for services with an age limit, your date of birth. We use these to hold your appointment, send you the confirmation and the receipt, and contact you if something changes.

When a service needs it, we ask health questions before your appointment, and we record what happened at the appointment. We use these to check the service is safe for you, to give you care, and to keep the clinical record the law requires us to keep.

When you ask us to set up an NHS nomination we collect your name, mobile number, date of birth and GP surgery, and we use these to make the nomination with the NHS.

When you ask for a home visit we collect the service you want, your postcode, your phone number and when you are free, and we use these to call you back and arrange the visit.

Our lawful basis

For NHS services, our basis is UK GDPR Article 6(1)(e), a task carried out in the public interest, and for the health information within it, Article 9(2)(h), the provision of health care, supported by condition 2 of Part 1 of Schedule 1 to the Data Protection Act 2018.

For private services you pay for, our basis is Article 6(1)(b), performance of a contract with you, and for the health information within it, Article 9(2)(h) on the same footing.

Where we ask you to tick a consent box before a consultation, that consent is your Article 9(2)(a) explicit consent for us to use your answers for that appointment. You can withdraw it at any time by telling us, and that will not affect anything we did before you withdrew it. Withdrawing it may mean we cannot go ahead with the service.

We only send you marketing if you have asked for it, and every message has an unsubscribe link.

Who we share it with

The NHS, including NHS England and the NHS Business Services Authority, for NHS services and prescription claims.

Your GP, where sharing is needed for your care.

Our IT suppliers, who host the booking system and the patient record under contract and who act only on our instructions.

Our payment providers, Stripe and Mollie, who take your card details directly and never pass the card number to us.

Anyone the law requires us to share with.

We do not sell your information and we do not share it for advertising.

Where it is kept

Our systems are hosted in the United Kingdom. Where a supplier processes data outside the UK, we only use suppliers covered by UK adequacy regulations or by the International Data Transfer Agreement.

How long we keep it

We follow the NHS Records Management Code of Practice. The details you give us to set up an NHS nomination are deleted 90 days after the nomination is made, and in any case within 12 months. The details you give us to ask for a home visit are removed from the request 12 months after we have booked or declined it.

Your rights

You can ask us for a copy of your information, ask us to correct it, ask us to delete it, ask us to restrict or stop using it, and object to us using it. Some of these rights are limited where we have a legal duty to keep a clinical record.

Ask us at the counter, call 0161 336 2111 or email support@windmillpharmacy.co.uk. We will reply within one month.

If you are not happy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You can complain to the ICO without complaining to us first, but we would rather you told us so we can put it right. Our own complaints process is at Feedback and complaints.

Cookies

This website sets two cookies, one to keep you signed in to your booking and one to protect the forms from being submitted by another site. Both are needed for the site to work and both are deleted when you close your browser or after two hours, whichever comes first.

We use no analytics and no marketing cookies. If we ever do, we will ask you first.