Data Sharing Policy
Summary
Mastermedicine Ltd
T/A My Direct Pharmacy are committed to the highest standards of data
privacy and protection.
We share your
information with organisations as required solely for the purpose of processing
your request for treatment and providing healthcare.
This data sharing
policy applies to Mastermedicine Ltd (the `data controller`) trading
as My Direct Pharmacy and providing services via the Ask A Pharmacist app.
Who might have access
to the personal data we collect?
We will never sell any patient data to third parties.
The following
organisations may process data provided by My Direct Pharmacy solely for the
purpose of providing or supporting the healthcare services provided via
the Ask A Pharmacist app. All organisations operate
strict UK/EU compliant confidentiality, privacy, and data protection
procedures.
- My
Direct Pharmacy staff.
Data processed: full data access.
Data processed: name, address, gender, date of birth (DOB), telephone,
email address, prescription / order details.
- Delivery
companies Royal
Mail and for restricted items APC courier.
Data processed: title/gender, name, address, telephone.
- VivaWallet - service used to
process payments.
Data processed: title/gender, name, email address, payment card details
including payment card address.
- Google - used
by IML for email communications (Gmail), file & document
storage, and website visitor statistics
Data processed: email address, details sent by a patient by email
to IML, and files sent by email. Internal IML report
documents may include anonymised patient details. Visitor statistics
provided by Google Analytics include: types and versions of device,
operating system, web browser, geographical country location of visitor,
referring web page, gender and age range of visitor, search term used to
find IML website, IP address and network, pages
visited on IML websites, record of purchase.
- CQC/GPhC - UK healthcare
regulators, when required for audit and inspection purposes.
Data processed: full data access.
- Police - official `Personal
data requests` from Police forces will be considered subject to GMC guidance on patient
confidentiality.
Data processed: as requested.
- Banks - in cases of
fraudulent card use only.
Data processed: name, address, email, telephone.
Sending personal data
by email
Patients that send
emails containing or requesting personal data to Ask A Pharmacist consent
to receive their personal data in a reply email sent to the `reply to` email
address of original, unless specifically requested to be supplied by some other
method, by agreeing to this data sharing policy. Please note email is generally
not considered a secure method to send confidential data.
Please contact the
Data Protection Officer Hasan Master on ([email protected]) for any issues
regarding your personal data.