Privacy Policy

Swindon Health Hub is the brand for two community pharmacies in Swindon — Clive Parade Pharmacy and Moredon Pharmacy. The pharmacies are operated by Ascent (Swindon) Ltd (company number 14169702). Our Superintendent Pharmacist is Asim Iqbal (GPhC 2225229).

Ascent (Swindon) Ltd is the “data controller” for the personal information described in this policy.

Depending on how you use our services, we may collect:

• Your contact details (name, phone number, email and address)
• Appointment and booking details
• Prescription requests and related information
• Messages or enquiries you send us
• Basic website usage information, such as analytics data where you have given consent

Some of our services involve health information. We only collect health or prescription information where it is needed to provide a service you have asked for, and we treat it with extra care. Please do not share clinical details through general website forms — our team will discuss anything clinical with you directly and securely.

• To provide the pharmacy services you request
• To manage appointments and prescriptions
• To contact you about your care or booking
• To meet our legal and professional obligations
• To improve our services

Our lawful bases for processing depend on the circumstances and may include your consent, performance of a contract, compliance with a legal obligation, and — for health information — the provision of health and social care.

We may share your information with:

• Our pharmacy team, who provide your care
• The NHS and your GP, where needed to provide a service
• Booking, payment or delivery providers we use to run the service
• Others where required by law or by our professional regulator

We do not sell your personal information.

We store your information securely and limit access to those who need it to provide your care. We use reputable third-party providers to host our website, store data and send messages, and we put appropriate safeguards in place to protect your information — including when it is handled outside the UK (see “International transfers” below).

We keep information only as long as necessary for the purposes described in this policy, and retention of pharmacy and health records follows professional and legal requirements.

We use a small number of essential cookies to make this website work and to remember your cookie choice. These don’t track you and are always on.

With your consent, we also use Google Analytics 4 (loaded through Google Tag Manager) to understand how the site is used so we can improve it — for example, which pages and services are most useful. We use Google Consent Mode, so these analytics cookies are only set after you choose “Accept analytics” on our cookie banner. If you choose “Essential only”, no analytics cookies are set.

We do not use advertising cookies and we don’t sell your data. You can change your choice at any time using the Cookie settings link in the footer. Analytics data is collected in an aggregated way and retained in line with our Google Analytics settings. Google may process this analytics data outside the UK; where it does, the safeguards described in “International transfers” below apply.

When you use our booking or enquiry forms, we collect the details you provide (such as your name, contact details, chosen branch and service, and your message) so we can respond and arrange your request. We ask you not to include medical details in these forms — anything clinical is handled with you directly and securely. Form submissions are stored securely and emailed to the relevant branch to action, and are kept in line with the retention section above.

We use trusted providers who process personal data on our behalf, under data-processing agreements, to run the website and these services:

• Supabase — secure database hosting and storage
• Vercel — website hosting and delivery
• Resend — sending notification and confirmation emails
• Cloudflare — spam protection (Turnstile) on our forms
• Google (Google Analytics and Google Tag Manager) — website analytics, where you have consented

Some of the providers we use may store or process personal data outside the United Kingdom, including in countries whose data-protection laws differ from the UK’s. Where your information is transferred outside the UK, we take steps to make sure it stays protected to a standard equivalent to UK data-protection law.

Depending on the provider and country, we rely on a lawful transfer mechanism — such as UK “adequacy” regulations, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or the EU Standard Contractual Clauses — together with the provider’s own data-protection commitments. You can ask us for more detail about the safeguards that apply to a particular provider.

You have the right to:

• Access the information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete information, where applicable
• Restrict or object to certain processing
• Request a copy of certain information (portability)
• Withdraw consent where we rely on it
• Complain to the Information Commissioner’s Office (ICO)

For any privacy question, or to exercise your rights, contact us at pharmacy.fgw68@nhs.net (Clive Parade) or pharmacy.fxw30@nhs.net (Moredon), or call Clive Parade on 01793 722097, or Moredon on 01793 265661.

We are registered with the Information Commissioner’s Office (ICO); our ICO registration number is ZB698386. You can find out more or raise a concern at ico.org.uk.