Evercare Pharmacy (“Evercare”, “we”, “us” or “our”) takes your privacy seriously.
This Privacy Policy explains how we collect, use, store and protect your personal information when you use our website, pharmacy services and associated online services.
Some of our digital services, including online booking and other pharmacy functionality, are provided using the Healthera platform, operated by Healthera Limited. Where Healthera processes personal information on our behalf, it does so in accordance with its agreement with us and applicable data protection law. In some circumstances, Healthera may process information as a separate data controller. Where this applies, Healthera’s own Privacy Policy will explain how that information is used.
Please also read our Cookie Policy and any additional privacy information provided when using particular services.
Personal data, or personal information, means any information relating to an individual who can be identified directly or indirectly from that information. It does not include information where your identity has been removed and you can no longer be identified.
Who is responsible for your information?
For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, the organisation responsible for your personal information will depend on the pharmacy or service you are using.
Evercare Pharmacy currently operates from the following locations:
Evercare Pharmacy – Market Street
13 Market Street
Colne
BB8 0LJ
GPhC registration: 1109447
Registered pharmacy owner: Shealmore Limited
Evercare Pharmacy – Albert Road
7 Albert Road
Colne
BB8 0RY
GPhC registration: 1033357
Registered pharmacy owner: Colne Healthcare Limited
Evercare Pharmacy – Rochdale
242 Yorkshire Street
Rochdale
OL16 2DP
GPhC registration: 9012100
Registered pharmacy owner: Shealmore Limited
Where one of these companies determines how and why your personal information is processed, that company will act as the data controller.
Where our services are delivered through the Healthera platform, Healthera Limited may process personal information on behalf of Evercare and/or process certain information in its own capacity as a data controller, depending on the service being provided.
You can read Healthera’s Privacy Policy for more information about how Healthera processes personal information.
Before publishing: I’d have Evercare/Healthera confirm that final paragraph against the actual data-processing agreement.
How we use your personal information
We may collect and use personal information where necessary to:
- provide pharmacy and healthcare services
- manage appointments and consultations
- process prescription-related requests
- communicate with you about your care or services
- manage pharmacy nominations
- respond to enquiries, feedback and complaints
- maintain appropriate clinical and pharmacy records
- operate and improve our website and online services
- meet our legal, regulatory and professional obligations
- protect our systems, patients, staff and services against misuse or fraud
Where appropriate, we may also process information for administrative, analytical or service-improvement purposes.
The information we collect and the reason we process it may differ depending on the service you use.
Information processed through Healthera
Evercare Pharmacy uses technology and services provided by Healthera Limited to support parts of our digital pharmacy service.
When you interact with services powered by Healthera, information may be processed through Healthera’s systems.
Depending on the service, this may include information such as:
- your name and contact details
- date of birth
- pharmacy selection
- appointment or booking information
- prescription-related information
- information you provide during a consultation
- information necessary to provide the requested pharmacy service
Healthera may act as a processor on behalf of Evercare for some processing activities and may act as a separate data controller for others.
Where Healthera acts as a separate data controller, its processing is governed by Healthera’s own Privacy Policy.
Healthera Privacy Policy:
https://healthera.co.uk/privacy/
This section is the main addition I’d make compared with your existing Healthera policy because it makes the relationship between Evercare → patient → Healthera SaaS platform much clearer.
Special category and health information
When providing pharmacy and healthcare services, we may need to process information concerning your health.
Health information is classed as “special category data” under UK data protection law and receives additional protection.
We only process health information where we have an appropriate lawful basis and condition under data protection legislation, including where processing is necessary for the provision and management of healthcare services.
Access to health information is limited to people and organisations that require it for legitimate purposes.
Sharing your personal information
We may share personal information where necessary with organisations involved in providing or supporting your care and our pharmacy services.
Depending on the service, these may include:
- Healthera Limited
- NHS organisations
- your GP practice
- NHS England
- NHS 111
- healthcare professionals involved in your care
- pharmacy system and technology providers
- delivery providers where applicable
- regulators and professional bodies
- organisations we are legally required to provide information to
We will only share personal information where there is an appropriate legal basis for doing so.
We do not sell your personal information.
Security and safe storage of your information
The security of your personal information is important to us.
We use appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or destruction.
Where information is processed using third-party technology providers such as Healthera, those providers are required to maintain appropriate security measures in accordance with applicable data protection legislation and their contractual obligations.
We may monitor the use of our systems and communications where appropriate for security, fraud prevention, regulatory compliance and the prevention of unlawful or improper use.
How long we keep your information
We retain personal information only for as long as necessary for the purpose for which it was collected and to meet our legal, regulatory, clinical and contractual requirements.
Healthcare and pharmacy records may need to be retained for specific periods in accordance with NHS, pharmacy and healthcare record-retention requirements.
Where Healthera processes information through its platform, applicable retention arrangements may also be described within Healthera’s Privacy Policy.
Your data protection rights
Depending on the circumstances, you may have the right to:
- request access to personal information we hold about you
- ask us to correct inaccurate or incomplete information
- request deletion of your personal information
- request restriction of processing
- object to certain types of processing
- withdraw consent where processing is based on consent
- request that information is provided in a portable format
These rights are subject to certain legal exceptions, particularly where information must be retained as part of a healthcare or pharmacy record.
If your request relates specifically to information held by Healthera as an independent data controller, you may need to contact Healthera directly.
NHS login
Some online services provided through the Healthera platform may allow you to use NHS login.
NHS login’s identity verification service is managed by NHS England.
NHS England is responsible for the personal information you provide to NHS England in order to create an NHS login account and verify your identity.
You can read the NHS login Privacy Notice and Terms and Conditions here:
https://access.login.nhs.uk/terms-and-conditions
Information you subsequently provide when accessing Evercare Pharmacy services may be processed separately by Evercare, Healthera or other relevant healthcare organisations depending on the service being used.
I prefer this wording to copying the Healthera version directly because Evercare shouldn’t claim:
“our role is a processor only”
unless Evercare itself actually has that processor relationship with NHS England.
NHS National Data Opt-Out
The NHS National Data Opt-Out gives patients a choice about whether their confidential patient information can be used for purposes beyond their individual care, including certain research and planning activities.
Information collected when you receive health or care services may be used to:
- improve the quality and standards of healthcare
- support research into new treatments
- prevent illness and disease
- monitor safety
- plan health and care services
Where possible, anonymised information is used so that individuals cannot be identified.
If you are happy for your confidential patient information to be used for eligible purposes beyond your individual care, you do not need to take any action.
If you choose to opt out, your information will continue to be used where necessary to provide your individual care.
You can find out more or manage your choice at:
https://www.nhs.uk/your-nhs-data-matters
You can also find further information about how patient information is used at:
https://www.hra.nhs.uk/information-about-patients
and:
https://understandingpatientdata.org.uk/what-you-need-know
Your National Data Opt-Out choice does not prevent your information being used where required for your individual care or where another legal requirement permits or requires its use.
Cookies
Our website uses cookies and similar technologies.
Cookies may be used to:
- make the website function correctly
- remember preferences
- understand how visitors use the website
- measure website performance
- support online booking and other functionality
Some functionality provided through Healthera may also use cookies or similar technologies.
Please see our Cookie Policy for more information about the cookies used and how you can manage your preferences.
Third-party websites and services
Our website may contain links to third-party websites and services, including NHS services, Healthera and other healthcare providers.
These organisations may have their own privacy policies and are responsible for explaining how they process personal information collected directly through their services.
We recommend reviewing the relevant privacy policy before providing personal information to another organisation.
Complaints and concerns
If you have questions or concerns about how your personal information is being used, please contact us first so we have the opportunity to investigate your concerns.
You also have the right to complain to the Information Commissioner’s Office (ICO).
Information about making a complaint is available at:
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements or the way we process personal information.