Privacy Policy

Last updated: May 2026

Who we are

Bounce Pharmacy Group operates nine community pharmacies across Merseyside and Cheshire, all registered with the General Pharmaceutical Council (GPhC). We are the data controller for personal information collected through this website.

You can contact us about data matters at: [email protected]

What information we collect

When you book a private clinic appointment through this website, we collect:

• Contact details — your name, phone number and email address
• Health information — the service or condition you are booking for (for example, travel health, weight management, or a Pharmacy First condition)
• Appointment details — the branch, date and time you have chosen

We do not collect payment information through this website. We do not use cookies for tracking or advertising.

Why we collect it and our legal basis

We process your contact details on the basis that it is necessary to perform the appointment contract you are entering into with us (UK GDPR Article 6(1)(b)).

Health information (the service or condition you are booking for) is special category data. We process it under Article 9(2)(h) — necessary for the provision of health care and treatment by a health professional.

We use your information to:

• Confirm and manage your clinic appointment
• Contact you if we need to reschedule or if the pharmacist needs information before your appointment
• Send you an appointment confirmation

Who we share it with

Your booking details are shared with the specific Bounce Pharmacy branch you have booked with, and with our internal booking management system, solely to fulfil your appointment.

We do not sell your personal data. We do not share it with third parties for marketing purposes.

Where we use third-party software to manage bookings, those providers act as data processors on our behalf and are contractually required to handle your data securely and only as we instruct.

How long we keep it

Appointment and consultation records are retained for a minimum of 8 years from the date of service, in line with NHS records management guidance for community pharmacy. After this period, records are securely deleted.

Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data, where we are not legally required to retain it
• Restriction — ask us to limit how we use your data while a concern is resolved
• Objection — object to processing based on legitimate interests
• Portability — receive your data in a machine-readable format

To exercise any of these rights, email us at [email protected]. We will respond within one month.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to complain to the UK Information Commissioner's Office (ICO):

ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

We would appreciate the opportunity to address your concern directly before you contact the ICO — please reach out to us first.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Significant changes will be notified via a notice on our website.