Privacy Policy

1. Who We Are

Pharmarx Ltd is a company registered in Scotland (Company Number SC561117).

Registered office:
3 Houston Interchange Business Park
Livingston
West Lothian
EH54 5DW
United Kingdom

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Pharmarx Ltd is the “data controller”, meaning we are responsible for deciding how and why your personal data is processed.

Contact details for data protection enquiries:
Privacy Officer: Nazmul Kadir
Email: support@cloudpharmacy.zendesk.com
(Please include “FAO ICO Privacy Officer” in the subject line)

2. How and Why We Use Your Personal Data (Lawful Bases)

Under UK GDPR, we must have a lawful basis to process your personal data. Depending on the circumstances, we rely on one or more of the following:

• Consent – where you have given clear permission for specific processing (for example, marketing communications or sharing information with your GP).
• Contract – where processing is necessary to provide services you request or to take steps before entering into a contract with you.
• Legal obligation – where processing is required to meet legal or regulatory duties, including pharmacy and prescribing regulations.
• Legitimate interests – where processing is necessary for our legitimate business purposes, provided your rights and interests do not override those interests.
• Public task – in limited circumstances where processing is required in the public interest.
• Vital interests – in exceptional situations where processing is necessary to protect life.
  
  

Special Category Data

We process special category data (including health information) only where an additional lawful condition applies. This will usually be because processing is necessary for healthcare purposes or because you have provided explicit consent.

Legitimate Interests

Where we rely on legitimate interests, we carefully assess the impact on your rights. Our legitimate interests include:

• Providing, operating, and improving our services
• Communicating with users and responding to enquiries
• Preventing fraud and misuse of services
• Maintaining system and data security
• Managing and developing our business
• We only rely on this basis where the processing is proportionate and expected.

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

Information collected automatically

• IP address
• Browser type and device information
• Website usage data

Information you provide

• Personal details (name, date of birth, address, email, telephone number)
• Medical and clinical information (consultation responses, prescription history, clinician notes, treatment records)
• Order history and payment-related data
• Identity verification documents
• Account details and communications with our team

Your order history, medical information, account details, and message history are securely stored within Cloud Pharmacy’s central database and clinical systems, which support account management, dispensing processes, and regulatory record-keeping across the Pharmarx Ltd group.

4. How We Use Your Information

We use your personal data to:

• Provide pharmacy, prescribing, and healthcare services
• Review consultations and issue prescriptions where appropriate
  Process orders, payments, and deliveries
• Verify identity and reduce fraud risk
• Maintain accurate and compliant patient records
• Meet legal and regulatory obligations
• Communicate with you about your account, treatment, or services

Where required to fulfil your order, we may share limited information with a partner pharmacy for dispensing and delivery purposes. You may object to this at any time by contacting support@cloudpharmacy.zendesk.com.

Partner pharmacy:
Mediva Pharmacy
Unit 54 Tanners Drive, Blakelands
Milton Keynes, Buckinghamshire
MK14 5BN
GPhC No: 9012803
Superintendent Pharmacist: Nayan Shah (GPhC No: 2060682)

We will not use your medical information for marketing unless you have explicitly agreed.

5. Who We Share Data With

We only share personal data where it is necessary and lawful, including:

• Service providers acting on our instructions (such as LexisNexis for identity checks)
• Regulators, supervisory authorities, or law enforcement where required by law
• Third parties where necessary to prevent fraud or serious harm

We will not share your treatment information with your GP unless you consent, though we recommend doing so to support safe and effective care.

6. Confidentiality of Medical Information

All medical data is handled in strict confidence and accessed only by authorised pharmacy and prescribing professionals.

Disclosure will only occur where:

• Required by law
• Requested by a regulator
• Necessary to prevent serious harm or criminal activity

7. Identity Verification

To ensure patient safety and regulatory compliance:

• Identity checks are carried out using LexisNexis
• If automatic checks fail, we may request photographic ID
• Orders will be cancelled and refunded if suitable ID cannot be provided

8. Cookies

We use cookies to:

• Improve website functionality
• Collect anonymised usage statistics

Cookies do not directly identify you. You can manage or disable cookies via your browser settings, though this may affect site performance.

9. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request erasure of data (where legally permitted)
• Restrict or object to processing
• Withdraw consent where processing is based on consent

There is no charge for exercising these rights, unless a request is manifestly unfounded or excessive.

Requests can be made by contacting:
support@cloudpharmacy.zendesk.com 

10. Data Security and Retention

We use appropriate technical and organisational measures to protect your personal data.

We retain personal data only for as long as necessary to:

• Provide services
• Meet legal, regulatory, and professional requirements
• Comply with record-keeping obligations

11. Governing Law

This Privacy Policy is governed by the laws of the United Kingdom. Any disputes will be subject to the exclusive jurisdiction of the UK courts.

Pharmarx Ltd is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services or visit https://omc.co.uk.

This policy applies to all users of our website and services. By accessing or using our services, you acknowledge that your personal data will be processed as described below.