We take the security of user data very seriously and take appropriate steps to keep it secure. At no point, we will sell your personal data to another company.
Where is the user data stored and who has access?
The user data is saved on secured dedicated servers in the United Kingdom. With industry level security and firewalls to stop any external threats accessing information. The information is accessed by us and our IT services providers (Tech Developer Ltd) in European Economic Area (EEA) and outside of EEA, to ensure that the website runs smoothly and to carry out administrative tasks. To provide certain services, such as repeat prescription requests and EPS nomination, we will need to share your personal details with your GP surgery. By using this website and our services, you agree to the collection, storing and processing of your personal data by us. Also, we may host carefully selected third party service provider on our websites, such as online doctor providers and vaccination booking providers. If you decided to use these service, your personal data will be shared with them to enable them to provide you with the service.
How do we protect your data?
We take the security of your personal information seriously. When you enter sensitive information, we encrypt the transmission of that using secure socket layer technology (SSL). We do not store any credit or debit card information. Payments are processed via a third party payment provider that is fully compliant with Level 1 Payment Card Industry (PCI) data security standards. Any payment transactions are encrypted using SSL technology. We follow generally accepted standards to protect your personal information submitted to us. We take at least a monthly backup of the data stored on our system and is stored in UK based dedicated servers.
Commercial sale of your data?
Under no circumstances will we make your personal data available to a third party company for sale. Your data is used to provide products and services to you.
Limitations of internet based systems
We follow generally accepted standards to protect your personal information submitted to us. Due to the nature of digital information transmission, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.
User Access and Choice
We take the security of user data very seriously and take appropriate steps to keep it secure. At no point, we will sell your personal data to another company.
Where is the user data stored and who has access?
The user data is saved on secured dedicated servers in the United Kingdom. With industry level security and firewalls to stop any external threats accessing information. The information is accessed by us and our IT services providers (Tech Developer Ltd) in European Economic Area (EEA) and outside of EEA, to ensure that the website runs smoothly and to carry out administrative tasks. To provide certain services, such as repeat prescription requests and EPS nomination, we will need to share your personal details with your GP surgery. By using this website and our services, you agree to the collection, storing and processing of your personal data by us. Also, we may host carefully selected third party service provider on our websites, such as online doctor providers and vaccination booking providers. If you decided to use these service, your personal data will be shared with them to enable them to provide you with the service.
Limitations of internet based systems
As a user, under the GDPR rules, you have the following rights over your data that we store and hold.
- Right to be informed: we will explain to you in our privacy policy as to how we use your personal data.
- Right to correction and completion: you have the right to ask us to correct any of your data which might be inaccurate and complete any data that is incomplete.
- Right to restrict: In some cases you may request to restrict the processing of your personal data. We reserve the right to store enough data to respect your data restriction request in future.
- Right to data portability: You have the right to request your data to be provided to you for your own use. This request applies to when processing is based on consent or performance of contract and where when processing is done through an automated system.
- Right to object: you may object to the processing of your personal data.
- Right to erasure: You may request to have your personal data erased where its not stopping us from complying with legal requirements.
Right to withdraw consent: you have the right to withdraw your consent at any point by contacting us through the details below. In some circumstances, this might not be always possible or you might have to wait for a period of time for this to take place. Contact us for if you would like to discuss this in detail.