← Pharmacy Weight Loss Neath

Privacy Policy

Last updated: 22 July 2026

Pharmacy Weight Loss Neath | GPhC Registration No. 9012511 | Last Updated: July 2026

Pharmacy Weight Loss Neath is a GPhC registered online pharmacy weight loss clinic serving patients in Neath, UK. We are committed to protecting your personal data and handling it responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we collect, use, and protect your information.

1. Data We Collect

When you use our services, we may collect the following categories of personal data:

Health data is classified as special category data under UK GDPR and is handled with the highest level of care and security.

2. How We Use Your Data

We use your personal data for the following purposes:

Our lawful bases for processing include the performance of a contract, compliance with legal obligations, and the provision of healthcare services. For special category health data, we rely on Article 9(2)(h) of the UK GDPR — processing necessary for the provision of healthcare.

3. Cookies

Our website uses cookies to improve your browsing experience and help us understand how visitors use our site. Cookies we use include:

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.

4. Sharing Your Data with Third Parties

We do not sell or rent your personal data to any third party. We may share your data only in the following limited circumstances:

All third parties are required to handle your data in compliance with UK GDPR and our data protection standards.

5. Data Retention

We retain patient records for a minimum of 8 years in line with NHS and GPhC guidance, or longer where required by law. Payment data is retained only for as long as necessary to fulfil financial and legal obligations. After the applicable retention period, your data is securely deleted or anonymised.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted using secure encryption, and access to patient records is strictly limited to authorised personnel only.

7. Contact Us

If you have any questions about this privacy policy, wish to exercise your data rights, or have a concern about how we handle your information, please contact us directly. We aim to respond to all data-related enquiries within 48 hours.

If you are not satisfied with our response, you have the right to raise a concern with the relevant supervisory authority for data protection in the UK.