Privacy policy

Who is responsible

A1 Pharmacy Ltd, 18 Market Street, Example City 00000, is the data controller. Our superintendent pharmacist, Amara Okonjo, is accountable for how patient information is handled here.

What we hold, and why

• Patient medication records. Everything we dispense to you, with the clinical checks made at the time. We are legally required to keep these, and to keep them for at least two years.
• Order and delivery details. Name, address, contact details and what you bought. Held for six years to satisfy tax and consumer law.
• Clinical service records. Notes from consultations, blood pressure readings and screening results.
• Website usage. We do not run advertising trackers and we do not sell anything about you. Essential cookies keep your bag working.

Our lawful basis

For dispensing and clinical services, we rely on the provision of health care as a lawful basis under applicable data protection law. For orders, we rely on performance of a contract. For the newsletter, we rely on your consent, which you can withdraw at any time.

Who we share it with

Your GP and other clinicians directly involved in your care. National Health Insurance Authority for prescription reimbursement. Our delivery partner, who receives an address and nothing clinical. We never share patient data for marketing, and we never sell it.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Deletion has limits: we cannot erase a dispensing record we are legally obliged to keep. Write to hello@a1pharmacy.example and we will respond within one month.

Complaints

Tell us first if you can — it is usually quicker. If we cannot resolve it, you have the right to complain to the Data Protection Commission at dataprotection.org.gh.