📄 Privacy Policy: 

Last updated: June 2025

This policy applies to all branches of Buchanhaven Pharmacy Ltd (Lochardil, Riverside, Alness, Buchanhaven) and pharmacies under our oversight (Crimond Pharmacy – N&F Enterprises, and Peterhead Health Centre Pharmacy – PHCC Ltd).

 

1. 🔍 Who We Are

We are a group of community pharmacies registered in Scotland and regulated by the General Pharmaceutical Council (GPhC). We provide a wide range of NHS and private healthcare services. Each pharmacy is responsible for the personal data it handles, under the supervision of our Superintendent Pharmacist.

 

2. 🛡️ How We Protect Your Data

We take your privacy seriously. To protect your data, we use:

• Encrypted systems for electronic records

• Secure passwords and access control

• Locked cabinets for paper files

• Staff access based on clinical role

• Regular GDPR training and audits

​

3. 📋 What Information We Collect

Depending on the service, we may collect:

• Name, date of birth, address, contact details

• NHS number and GP information

• Medication records and health history

• Weight, BMI, blood pressure, test results

• Consultation notes and treatment plans

• CCTV footage for safety

• Employment data (staff only)

 

4. 🧾 Why We Collect Your Data

We collect data to:

• Dispense NHS and private prescriptions

• Deliver clinical and prescribing services

• Record and monitor treatment safely

• Book and manage your appointments

• Meet NHS, GPhC, and audit obligations

• Protect staff and patients through CCTV

​

5. ⚖️ Lawful Basis for Processing

We process your personal data under:

• Article 6(1)(e): public task (NHS services)

• Article 6(1)(b): contract (private services)

• Article 6(1)(f): legitimate interest (e.g. CCTV)

• Article 9(2)(h): healthcare by a regulated professional

​

6. 🤝 Who We Share Data With

We only share data when necessary and with GDPR-compliant partners:

• NHS Scotland and GP practices

• Health Improvement Scotland

• General Pharmaceutical Council (GPhC)

• Approved service providers:

  • Heidi Health (AI transcription)

  • Healthera (prescription app)

  • Pharmadoctor (private clinical services)

  • PocDoc (cholesterol screening)

  • Vitajab (B12 injections)

  • SimplyBook.me (booking system)

  • Wix (website platform)

  • MedPoint (prescription pickup lockers)

​

7. 🔒 How We Store Your Data

Your data is stored securely:

• Encrypted PMR and cloud systems for digital records

• Locked cabinets for paper forms

• CCTV stored securely for 30 days

• Staff access is restricted and monitored

​

8. ⏳ How Long We Keep Your Data

• NHS records: kept for your lifetime + 10 years

• Private services: retained for 8–10 years

• CCTV: kept for 30 days

• Emails (e.g. NMWLP): deleted within 12 months or earlier on request

​

9. ✉️ Your Rights

You have the right to:

• Access your personal data

• Request correction of inaccurate records

• Request erasure in certain situations

• Object to specific types of processing

• Withdraw consent (where applicable)

• Lodge a complaint with the ICO (ico.org.uk)

​

We always respond to requests in line with UK GDPR timelines.

​

10. 📬 Contact Us

If you have any questions about this policy or your data:

• Data Protection Officer: John Mitchell

• Email: superintendentoffice@buchanhavenpharmacy.co.uk

• Phone: 01463236263
  Or speak to your local pharmacist directly.

​

11. 🔁 Updates to This Policy

This privacy policy is reviewed annually and updated when services, regulations, or technologies change. The most up-to-date version is always available in your local pharmacy and on this website.​​​​