The short version: the only thing this website collects is what you type into the booking form, and we use it to hold your appointment and nothing else. No newsletter, no advertising trackers, and nothing is ever sold or shared. Your booking is stored in the United Kingdom and deleted after twelve months.
Who is responsible for your data
The data controller for this website is Bower Healthcare Ltd (registered in England and Wales, company number 16679345), the company that owns and operates Talke Pharmacy. You can reach us in the pharmacy, on 01782 508214, or by email at info@talkepharmacy.com. If your question is about this page, ask for the superintendent pharmacist.
What this policy covers
This website, and nothing else. Your health records, and anything you discuss with the pharmacy team, fall under separate NHS and professional obligations. Ask us in the pharmacy about those.
What we collect, and what we do not
The booking form asks for your name, a phone number, an email address, the service you want, and the day and time you want it. All of those are needed to hold the appointment. The email address is where we send your confirmation, which is the only written record of the booking you get to keep, so it has to be one you can read. The notes box is the one thing that is optional, and the form works without it.
There is no login and no mailing list, no advertising tags and no third-party tracking. The site stores one item on your device holding your answer to the cookie question, and counts visits anonymously only if you accept. Our cookie policy explains both.
Our web host also keeps standard server logs: the IP address making a request, the date and time, and the page asked for. We never use them to work out who you are.
Why we are allowed to hold it
Booking an appointment is an agreement between you and the pharmacy, so our lawful basis for the booking is Article 6(1)(b) of the UK GDPR: processing necessary to perform a contract, or to take steps before entering one.
The service you pick can say something about your health, and health information needs a second, stricter basis on top of the first. Ours is Article 9(2)(h), health or social care, together with paragraph 2 of Part 1 of Schedule 1 to the Data Protection Act 2018. That basis is open to us only because this pharmacy is run by registered healthcare professionals who owe you a duty of confidence, which is the safeguard section 11(1) of that Act requires.
For the server logs, our lawful basis is legitimate interests, under Article 6(1)(f) of the UK GDPR: keeping this site online and secure. Logs are held for our host's standard retention period, then discarded. They are never copied elsewhere, profiled, or used for marketing.
Where it is kept, and who else sees it
Your booking is held in a database run for us by Supabase, in their London region, so it stays in the United Kingdom. A copy of the appointment goes into the pharmacy's own Google Calendar so the team can see the day's list. Nobody else receives it. We do not sell it, we do not share it for marketing, and no advertising company ever sees it.
If a supplier of ours ever handles your data outside the United Kingdom, we use only the transfer routes UK law allows, and we will name that supplier here before it starts.
How long we keep it
We keep a booking for twelve months after the appointment date, then delete it. That is long enough to answer a question about an appointment that has already happened, and no longer. If your appointment leads to a consultation, the record the pharmacist makes of that consultation is a separate health record kept under NHS rules, and this page does not govern it.
Your rights
Under the UK GDPR you can ask for a copy of your personal data, ask us to correct or erase it, restrict how it is used, object to our using it, or have it sent elsewhere. Ring us, or email info@talkepharmacy.com, and we will answer within one month. It costs nothing and you do not have to say why. If the law requires us to keep something you have asked us to erase, we will tell you that and tell you which law.
Complaints
If you think we have handled your data badly, tell us and we will look into it. You can also complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk (opens in a new tab).
Changes to this policy
If the site changes, this page changes with it. Anything new that collects data means rewriting this page before it goes live, not after.