Effective Date: 24/10/2025

1. Who We Are

This Privacy Policy explains how SS Pharmaconsult Ltd (“we”, “our”, “us”) collects, uses, and protects your personal information when you visit www.seharthepharmacist.co.uk, purchase our services, or join our Dose of Empowerment membership.

Company Name: SS Pharmaconsult Ltd

Registered Address: Unit 5, Sir James Clark Building, Seedhill, Paisley, PA1 1TJ

Email: [email protected]

Company Registration: SC701640

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Information We Collect

We may collect the following information when you use our website, make a purchase, or subscribe to our services:

- Name and contact details (email, phone number, address)

- Billing and payment details (processed securely via Stripe – we do not store full card details)

- Business information (e.g., pharmacy name or company details if relevant)

- Account and login information (if applicable)

- Communication preferences

- Any information you voluntarily share via forms, email, or surveys

We do not collect or store health, medical, or prescription data.

3. How We Use Your Information

We use your data to:

- Provide our services and manage your bookings or membership

- Process payments and issue receipts

- Communicate about events, updates, and services you’ve subscribed to

- Manage your account and respond to enquiries

- Improve our website and services

- Comply with legal and financial obligations

4. Lawful Basis for Processing

We rely on one or more of the following lawful bases:

- Contract: To fulfil our obligations when you purchase a service or membership

- Consent: When you sign up for marketing or newsletters (you can withdraw consent at any time)

- Legitimate Interests: To maintain our business operations, prevent fraud, and improve our website

- Legal Obligation: Where processing is required by law

5. How We Store and Protect Your Data

Your data is stored securely on encrypted servers and password-protected systems.

We retain data only for as long as necessary for the purposes stated, or as required by law (e.g., accounting records are held for up to 6 years).

We have implemented appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse.

6. Sharing of Data

We only share data with trusted third parties where necessary, including:

- Stripe (payment processing)

- Hey Clients (booking and website hosting)

- Email marketing providers (for newsletters or event updates)

- Professional advisors (e.g., accountants or legal counsel)
All third parties comply with UK GDPR and process data under written agreements.

We do not sell or rent your personal data.

7. International Transfers

Some third-party providers may store data outside the UK (e.g., in the EEA or USA).

Where this occurs, we ensure adequate safeguards such as Standard Contractual Clauses (SCCs) are in place.

8. Your Data Protection Rights

Under UK GDPR, you have the right to:

- Access your data (“Subject Access Request”)

- Rectify inaccuracies

- Erase your data (“Right to be Forgotten”)

- Restrict or object to processing

- Data portability

- Withdraw consent (for marketing)

To exercise any of these rights, email [email protected].

If you’re unhappy with our response, you can contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.

9. Cookies

We may use cookies to improve your experience and analyse website traffic.

You can adjust cookie settings in your browser at any time. A full cookie notice will appear upon your first visit to the website.

10. Changes to This Policy

We may update this Privacy Policy occasionally. The latest version will always be posted on our website.