Privacy Policy

Last updated: 5 April 2026

Sidley Pharmacy is committed to protecting your privacy and ensuring your personal information is handled in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. This policy explains how we collect, use, and safeguard your information.

1. Who We Are

Sidley Pharmacy is located at 44 Turkey Road, Bexhill-on-Sea, TN39 5HE. We are registered with the General Pharmaceutical Council (GPhC) under registration number 1093182. The Owner and Superintendent Pharmacist is Sukhpreet Singh Uppal (GPhC registration: 2085963).

For data protection enquiries, please contact us at:
Phone: 01424 220424

2. Information We Collect

We may collect the following types of personal information:

• Identity information: Name, date of birth, NHS number
• Contact information: Address, email address, telephone numbers
• Health information: Medical conditions, allergies, current medications, prescription details
• Transaction information: Details of services provided and payments made
• Communication records: Notes from consultations and correspondence

3. How We Use Your Information

We use your personal information to:

• Dispense prescriptions and provide pharmaceutical services
• Provide clinical services such as vaccinations, health checks, and consultations
• Communicate with you about your healthcare
• Maintain accurate patient records
• Comply with legal and regulatory requirements
• Process bookings and appointments
• Improve our services

4. Legal Basis for Processing

We process your personal information under the following legal bases:

• Vital interests: To protect your health and wellbeing
• Legal obligation: To comply with healthcare regulations and NHS requirements
• Legitimate interests: To provide and improve our pharmacy services
• Consent: Where you have given explicit consent for specific purposes

5. Who We Share Your Information With

We may share your information with:

• Your GP and other healthcare professionals involved in your care
• NHS England and NHS Digital for healthcare administration
• The General Pharmaceutical Council for regulatory purposes
• Other pharmacies (for prescription transfers with your consent)
• IT service providers who help us maintain our systems (under strict data processing agreements)

We will never sell your personal information to third parties or share it for marketing purposes without your explicit consent.

6. Data Retention

We retain your personal information in accordance with NHS and professional guidelines:

• Prescription records: 2 years from the date of dispensing
• Patient medication records: 8 years after the last entry
• Controlled drug registers: 2 years from the date of the last entry
• Private prescription records: 2 years

After these periods, records are securely destroyed in compliance with data protection requirements.

7. Data Security

We take appropriate security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. This includes physical security measures, secure IT systems, staff training, and access controls. Our staff are bound by confidentiality obligations and we regularly review our security practices.

8. Your Rights

Under GDPR, you have the following rights:

• Right of access: Request a copy of your personal information
• Right to rectification: Request correction of inaccurate information
• Right to erasure: Request deletion of your information (subject to legal requirements)
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data to another provider
• Right to object: Object to certain types of processing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided above.

9. Cookies and Website Analytics

Our website may use cookies to improve your browsing experience. Cookies are small text files stored on your device. You can control cookies through your browser settings. We may also use analytics tools to understand how visitors use our website, but this data is anonymised and cannot identify individual users.

10. Complaints

If you are unhappy with how we have handled your personal information, please contact us first so we can try to resolve your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.