Data Protection Officer
Prestbury Village Pharmacy
Unicorn House, Prestbury, Cheshire SK10 4DG
What information we hold
We process personal data including your name, contact details, date of birth, NHS number, prescription medicines, and information from pharmacy/healthcare services (flu vaccinations, Pharmacy First, new medicine services).
Purposes of processing
Your Care
Safe pharmacy services, dispensing, clinical checks. Shared with GP/NHS when necessary for your care.
NHS Payments
Prescription/service data to NHSBSA, NHS England, Local Authority for payment.
Governance
NHS standards, audits, regulatory compliance with GPhC, CQC, NHS England.
Research/Planning
Anonymised data for NHS planning (opt-out available).
Legal basis
- Article 6(1)(e) UK GDPR – Public interest (healthcare provision)
- Article 9(2)(h) UK GDPR – Healthcare purposes
- NHS Terms of Service, Health and Social Care Act 2008
Retention periods
| Record Type | Retention |
|---|---|
| Dispensing/prescription records | 2 years from last contact |
| Consultation records (NMS, CPCS) | 2 years from service |
| Adult health records | 8 years from last contact |
| Controlled drugs registers | 2 years minimum |
Secure destruction: Shredding or deletion per NHS Records Management Code.
Who we share data with
NHS: GP, NHS trusts, NHSBSA, NHS England, NHS Digital (anonymised)
External: Local Authority Public Health, auditors, other pharmacies (referrals)
NO commercial sharing of identifiable data.
Your rights
- Access: Free copy of your data
- Rectification: Correct inaccuracies
- Erasure: Delete (where permitted)
- Restriction: Limit processing
- Portability: Receive in portable format
- Object: Oppose processing (except legal obligations)
Contact pharmacy team or DPO to exercise rights.
NHS Data Opt-out
Opt out of NHS using data for planning/research (not direct care):
www.nhs.uk/your-nhs-data-mattersNHS App, pharmacy form, or write to NHS England
Complaints
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
0303 123 1113
Last updated: January 2026
Privacy policy reviewed annually