Direct Care Logo

Legal & Compliance

Privacy Notice (UK GDPR)

Direct Care Ltd  |  Last Updated: June 2026

IntroductionData We CollectWhy We CollectOnline ConsultationsLawful BasisData SharingData SecurityRetentionYour RightsCookiesContact
1

Introduction

Direct Care Ltd ("we", "us", "our") is committed to protecting your personal data and privacy. This Privacy Notice explains how we collect, use, and protect your personal information when you use our website and pharmacy services, including online consultations and medicine orders.

We process all personal and health data in accordance with UK GDPR and the Data Protection Act 2018.

2

Data We Collect

We may collect and process the following information:

PPersonal Data

  • ✓Full name
  • ✓Address
  • ✓Email address
  • ✓Phone number
  • ✓Date of birth
  • ✓Payment details (processed securely via third-party providers)

HHealth DataSpecial Category

  • ✓Medical history
  • ✓Symptoms and health conditions
  • ✓Allergies
  • ✓Current medications
  • ✓Consultation questionnaire responses
  • ✓Prescription details
3

Why We Collect Your Data

We collect your data to:

  • ›Provide safe pharmacy services
  • ›Assess suitability of medicines
  • ›Process online consultations
  • ›Dispense and supply medicines safely
  • ›Communicate with you regarding your order
  • ›Process payments and prevent fraud
  • ›Comply with legal and regulatory obligations
4

Lawful Basis for Processing

We process your personal and health data under UK GDPR:

Article 6(1)(c)Legal Obligation
Article 6(1)(e)Public Task / Healthcare Provision
Article 9(2)(h)Provision of Health or Social Care
5

Data Sharing

We may share your data only when necessary with:

■Registered pharmacists and healthcare professionals
■Delivery and logistics providers
■Payment processors
■Regulatory bodies (GPhC, MHRA, NHS or legal authorities where required)
We do not sell your personal data.
6

Data Security

We use appropriate technical and organisational measures to protect your data, including:

Secure serversEncryptionAccess controlRestricted staff permissions
7

Data Retention

We retain your data only for as long as necessary to:

  • Provide pharmacy services
  • Comply with legal obligations
  • Meet regulatory requirements
8

Your Rights Under UK GDPR

You have the right to:

A

Access

Your personal data

C

Correct

Request correction of inaccurate data

D

Delete

Request deletion of your data (where applicable)

R

Restrict

Restrict or object to processing

P

Portability

Request data portability

C

Complain

Lodge a complaint with the ICO

9

Cookies & Website Tracking

Our website may use cookies and tracking technologies for:

  • Website functionality
  • Analytics (e.g., Google Analytics)
  • Marketing and advertising (if enabled)

You can control cookie preferences through your browser settings.

10

Consent for Health Data Processing

By using our consultation and pharmacy services, you consent to the processing of your health data for the purpose of providing safe pharmacy care.
11

Contact Details (Data Protection Officer)

If you have any questions about this Privacy Notice or how we handle your data, please contact:

Data Protection Officer

Direct Care Ltd

Email: brijesh@direct-care.co.uk

12

Complaints

If you are unhappy with how we handle your data, you also have the right to complain to:

Information Commissioner's Office (ICO)

Website: https://ico.org.uk

Direct Care Ltd — UK GDPR Privacy Notice — Last Updated: June 2026