Spirit Pharmacy provides medicines to customers via prescriptions. The prescriptions are provided either electronically or via post. Patients can place their orders through our website, email or telephone.
As part of the services performed by Spirit Pharmacy, we have access to special category of personal data – identifiable patient data.
What information is being collected by Spirit Pharmacy?
How is it collected?
All information is collected directly from the patient via:
Why is it being collected?
This information is being collected to process prescriptions.
Information is collected for accurate processing and dispensing of prescriptions.
How will it be used?
Who will it be shared with?
Where will the data be stored?
Data is initially collected via the Spirit Pharmacy Website. Personally identifiable customer data is strongly encrypted over the internet using TLS/SSL, and data is stored in the UK.
The data is then input into a third-party Pharmacy System which is hosted inside the Health and Social Care Network (HSCN). Data is transmitted and stored in compliance with NHS Digital required standards.
Information received via telephone is input directly to the third-party pharmacy system only.
No automated decision making is used with the data collected.
Your rights as a data subject
As a data subject, you have a number of rights. You can:
If you would like to exercise any of these rights, please contact firstname.lastname@example.org
Accessing your information
If you would like to access the information we hold on you please write to email@example.com
The Data Protection Officer (DPO)
Spirit have appointed a DPO. This is our Head of Governance – Lisa Wakeford. The role of the DPO is to assist data ‘Controllers’ and ‘Processors’ to comply with data protection law and avoid the risks that organisations face when processing personal data.
The Data Controller
The Data Controller responsible for keeping your information confidential is:
Telephone: 0800 881 5423
If you believe that the organisation has not complied with your data protection rights, you can complain to the Information Commissioner.
The Data Protection Act 2018 requires organisations to lodge a notification with the Information Commissioner to describe the purposes for which they process personal information. These details are publicly available in the Register of Data Controllers. Our Registration number is: ZA493297
Further information can be obtained from:
Information Commissioner’s Office
Telephone: 0303 123 1113,