Last updated: 30 July 2026
This policy explains what personal information Caxton Pharmacy collects, why we collect it, who we share it with and what rights you have over it. It covers both our website and the services we provide in the pharmacy.
Caxton Pharmacy is the data controller for the information described in this policy.
You can verify our registration on the General Pharmaceutical Council register.
Our online booking system collects your name, email address, telephone number, the service you have booked and your appointment date and time, together with any notes you choose to add.
To provide services such as travel vaccinations, blood testing, weight management, the NHS Pharmacy First service or contraception, we need to record information about your health. This may include your medical history, current medication, allergies, relevant symptoms, travel plans, measurements such as blood pressure or BMI, test results, and details of any treatment or vaccination we provide.
Information about your health is special category data under data protection law and is treated with a correspondingly high level of protection.
If you email, telephone or speak to us in the pharmacy, we keep a record of your enquiry and our response where it is necessary to do so.
We collect limited technical and usage information through cookies and similar technologies, including analytics data about how our pages are used. Full details are in our Cookie Policy.
| Purpose | Lawful basis |
|---|---|
| Providing NHS services such as Pharmacy First, contraception and NHS vaccinations | Public task (UK GDPR Article 6(1)(e)); for health data, provision of health care and treatment (Article 9(2)(h)) |
| Providing private services you have asked us for | Performance of a contract (Article 6(1)(b)); for health data, provision of health care and treatment (Article 9(2)(h)) |
| Keeping clinical and dispensing records | Legal obligation (Article 6(1)(c)) and Article 9(2)(h) |
| Managing appointments and sending confirmations and reminders | Performance of a contract, or our legitimate interests in running the service efficiently (Article 6(1)(f)) |
| Responding to your enquiries and complaints | Legitimate interests (Article 6(1)(f)); Article 9(2)(f) where health data is involved |
| Website analytics | Your consent (Article 6(1)(a)) |
Health information is handled by, or under the responsibility of, professionals subject to a duty of confidentiality.
We do not sell, rent or trade your personal information, and we do not share it for marketing purposes. We may share it with:
These are the companies we rely on to run our booking, our website and our analytics. Each one receives only what it needs to do its job, acts on our instructions, and is bound by a contract requiring it to keep your information secure and confidential.
| Provider | What they do for us |
|---|---|
| Booked trybooked.co |
Our online appointment booking system. It holds your name, contact details, the service you booked and your appointment time, and sends your confirmations and reminders. |
| Gildhart (PharmoDigital Ltd) gildhart.com |
Designs, builds and maintains this website and manages our digital marketing. They may access the website’s systems in the course of that work. |
| Treatovia treatovia.com |
A healthcare directory that lists our services. If you contact us through the directory, the details you enter there are passed to us. |
| Google Analytics | Measures how this website is used so we can improve it. Details are in our Cookie Policy. |
| Kinsta | Hosts this website and stores the data it holds. |
We may also disclose personal information where the law requires it, or where it is necessary to protect the rights, property, safety or security of Caxton Pharmacy, our patients, our staff or the wider public.
We keep clinical records in line with the NHS Records Management Code of Practice. In general this means records are retained for eight years after your last contact with us for adults, and until a child’s twenty-fifth birthday (or twenty-sixth if they were seventeen at the last entry) for children.
Appointment and booking records that do not form part of a clinical record are kept only as long as we need them for administration and audit. Website analytics data is retained according to the settings described in our Cookie Policy.
Your information is primarily stored within the UK or the European Economic Area. Some of our service providers, including analytics providers, may process data outside the UK. Where that happens we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Addendum.
We use appropriate technical and organisational measures to keep your information secure, including access controls, encryption in transit, and staff training on confidentiality. Consultations involving health information take place in our private consultation room.
Under UK data protection law you have the right to:
To exercise any of these rights, contact us at info@caxtonpharmacy.com or on 020 8460 0377. We will respond within one month.
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint
We may update this policy from time to time. The date at the top shows when it was last revised.
If anything here is unclear, or you want to exercise any of your rights, speak to us. Call 020 8460 0377 or come in to 3 Widmore Road, Bromley.