Privacy Policy

1. Who we are

Mickleover Pharmacy (“we”, “us”, “our”), trading as Derby Weight Loss Clinic, is the data controller responsible for your personal information. We are a pharmacy registered with the General Pharmaceutical Council (GPhC) and we operate the weight-loss, travel health and related clinic services described on this website.

Registered address: 79 Devonshire Drive, Mickleover, Derby, DE3 9HD. You can contact us about this policy or your personal data at info@weightlossderby.co.uk or by phone on 01332 514262.

We are registered with the Information Commissioner’s Office (ICO) under registration number [ICO registration number].

2. The information we collect

Depending on how you use our services, we may collect:

• Identity and contact details — your name, date of birth, email address, postal address and phone number.
• Health information — your height, weight, BMI, medical history, medicines, allergies, and other clinical details you share with our clinicians. This is “special category” data and we handle it with extra care.
• Appointment and consultation records — bookings you make (including through our online booking provider), notes from your consultation and any treatment prescribed or supplied.
• Payment information — details needed to take payment for a service. Card details are processed by our payment provider; we do not store full card numbers.
• Website and device information — pages you visit, your approximate location, device and browser type, and information collected through cookies and similar technologies (see section 6).

3. How we collect it

We collect information when you:

• complete a form, quiz or eligibility check on our website;
• book an appointment online or contact us by phone, email or in person;
• attend a consultation, in the clinic or by video;
• make a payment for a service; or
• browse our website (via cookies and analytics tools).

4. Why we use your information, and our lawful bases

Under UK GDPR we must have a lawful basis for using your personal data. We rely on the following:

• To provide clinical care, assess your suitability for treatment, prescribe and supply medicines, and keep proper patient records — this is necessary for the performance of our contract with you and to comply with our legal and professional obligations as a pharmacy.
• To handle health information specifically, we rely on UK GDPR Article 9(2)(h) — the provision of health care and treatment by a health professional bound by a duty of confidentiality.
• To take payment and keep financial records — necessary for our contract with you and to meet legal accounting obligations.
• To improve our website and services and keep them secure — our legitimate interests in running and improving the business, balanced against your rights.
• To send you marketing (where you have not opted out or where you have consented) — consent, or our legitimate interests, and you can opt out at any time (see section 5).

5. Marketing

We may contact you about our services, and we may show you advertising on platforms such as Google and Meta (Facebook and Instagram). You can opt out of marketing emails at any time using the unsubscribe link, or by contacting us at info@weightlossderby.co.uk. Opting out of marketing will not affect the care we provide.

6. Cookies and analytics

Our website uses cookies and similar technologies to make the site work, to understand how it is used, and to measure and improve our advertising. This includes tools such as Google Tag Manager, Google Analytics, Microsoft Clarity and our online booking provider.

You can control non-essential cookies through the cookie banner on our site and through your browser settings. Some cookies are necessary for the site to function and cannot be switched off.

7. Who we share your information with

We never sell your personal data. We share it only where necessary, including with:

• our clinicians, prescribers and dispensing team who are involved in your care;
• our online booking, payment, hosting, IT and analytics providers, who process data on our behalf under contract;
• the NHS, GPhC, or other regulators and authorities where we are required to do so by law or professional duty; and
• other healthcare professionals (such as your GP) where clinically appropriate and, where required, with your consent.

Where a provider processes data outside the UK, we make sure appropriate safeguards are in place (see section 11).

8. How long we keep your information

We keep patient and clinical records for as long as required by law and professional guidance for a pharmacy in England, and then dispose of them securely. Non-clinical information (such as marketing preferences or website data) is kept only for as long as we need it for the purpose it was collected.

9. How we protect your information

We use appropriate technical and organisational measures to keep your information secure, including access controls, staff confidentiality obligations, and secure systems for storing clinical records. No method of transmission over the internet is completely secure, but we take steps to protect your data and to respond to any suspected breach.

10. Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information in certain circumstances;
• ask us to restrict or object to how we use your information;
• ask us to transfer your information to another provider where technically possible; and
• withdraw your consent at any time where we rely on consent.

Some of these rights are limited where we are required to keep clinical records. To exercise any of these rights, contact us at info@weightlossderby.co.uk.

11. International transfers

Some of our providers may store or process data outside the UK. Where they do, we make sure the transfer is covered by an adequacy decision or by appropriate safeguards such as the International Data Transfer Agreement, so your information continues to be protected.

12. Children

Our services are intended for adults aged 18 and over. We do not knowingly provide weight-loss treatment to, or collect data from, anyone under 18.

13. Complaints

If you have a concern about how we handle your personal data, please contact us first at info@weightlossderby.co.uk so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, by calling 0303 123 1113, or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

14. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a new “last updated” date above.

15. Contact us

For any questions about this policy or your personal information, contact Mickleover Pharmacy at info@weightlossderby.co.uk, by phone on 01332 514262, or by post at 79 Devonshire Drive, Mickleover, Derby, DE3 9HD.