Data Sharing Policy

Summary

Mastermedicine Ltd T/A My Direct Pharmacy are committed to the highest standards of data privacy and protection.

We share your information with organisations as required solely for the purpose of processing your request for treatment and providing healthcare.

This data sharing policy applies to Mastermedicine Ltd (the `data controller`) trading as My Direct Pharmacy and providing services via the Ask A Pharmacist app.

Who might have access to the personal data we collect?

We will never sell any patient data to third parties.

The following organisations may process data provided by My Direct Pharmacy solely for the purpose of providing or supporting the healthcare services provided via the Ask A Pharmacist app. All organisations operate strict UK/EU compliant confidentiality, privacy, and data protection procedures.

1. My Direct Pharmacy staff.
   Data processed: full data access.
   Data processed: name, address, gender, date of birth (DOB), telephone, email address, prescription / order details.
2. Delivery companies Royal Mail and for restricted items APC courier.
   Data processed: title/gender, name, address, telephone.
3. VivaWallet - service used to process payments.
   Data processed: title/gender, name, email address, payment card details including payment card address.
4. Google - used by IML for email communications (Gmail), file & document storage, and website visitor statistics
   Data processed: email address, details sent by a patient by email to IML, and files sent by email. Internal IML report documents may include anonymised patient details. Visitor statistics provided by Google Analytics include: types and versions of device, operating system, web browser, geographical country location of visitor, referring web page, gender and age range of visitor, search term used to find IML website, IP address and network, pages visited on IML websites, record of purchase.
5. CQC/GPhC - UK healthcare regulators, when required for audit and inspection purposes.
   Data processed: full data access.
6. Police - official `Personal data requests` from Police forces will be considered subject to GMC guidance on patient confidentiality.
   Data processed: as requested.
7. Banks - in cases of fraudulent card use only.
   Data processed: name, address, email, telephone.

Sending personal data by email

Patients that send emails containing or requesting personal data to Ask A Pharmacist consent to receive their personal data in a reply email sent to the `reply to` email address of original, unless specifically requested to be supplied by some other method, by agreeing to this data sharing policy. Please note email is generally not considered a secure method to send confidential data.

Please contact the Data Protection Officer Hasan Master on ([email protected]) for any issues regarding your personal data.