Privacy Policy

Last updated: September 2026

Who we are

Bounce Pharmacy Group operates nine community pharmacies across Merseyside and Cheshire, all registered with the General Pharmaceutical Council (GPhC). We are the data controller for personal information collected through this website.

You can contact us about data matters at: [email protected]

What information we collect

When you book an appointment through this website — NHS or private — we collect:

• Contact details — your name, date of birth, phone number and, if you give it, your email address
• Health information — the service or condition you are booking for (for example, a vaccination, travel health, or a Pharmacy First condition)
• Appointment details — the branch, date and time you have chosen

Before an NHS flu or COVID vaccination booking we ask which NHS group applies to you. Your answer is not saved. It is used only to decide which appointment to show you next — free on the NHS, or private — and it is not stored, not added to your booking, and not sent to the pharmacy or to your health record. The pharmacist checks your eligibility with you when you arrive.

We do not collect payment information through this website.

Cookies and website analytics

We use Google Analytics to count visits and see which pages people use, so we can improve the site. It is not used for advertising, and we do not use it to try to identify you.

Nothing is set until you agree. When you first visit, a notice asks whether you accept analytics cookies. Until you tap Accept, no analytics cookie is stored and no information about your visit is sent to Google. If you tap Reject, nothing is stored and any analytics cookie from a previous visit is deleted. Advertising and personalisation signals are switched off permanently, whichever you choose.

You can change your mind at any time using the Cookie choices link at the foot of any page.

What is never sent to Google. Your name, date of birth, phone number, email address and booking reference are never sent to Google Analytics. Neither is the service or condition you booked: the web address of a confirmed booking contains those details, so we deliberately report only the page you were on, with those details stripped out, whether or not you accepted cookies.

The cookies we use that are not optional are the ones that make the site work — they keep your place while you fill in a booking form and keep staff logged in to the admin area. These do not track you across other websites.

Why we collect it and our legal basis

We process your contact details on the basis that it is necessary to perform the appointment contract you are entering into with us (UK GDPR Article 6(1)(b)).

Health information (the service or condition you are booking for) is special category data. We process it under Article 9(2)(h) — necessary for the provision of health care and treatment by a health professional.

We use your information to:

• Confirm and manage your clinic appointment
• Contact you if we need to reschedule or if the pharmacist needs information before your appointment
• Send you an appointment confirmation

Who we share it with

Your booking details are shared with the specific Bounce Pharmacy branch you have booked with, and with our internal booking management system, solely to fulfil your appointment.

We do not sell your personal data. We do not share it with third parties for marketing purposes.

Where we use third-party software to manage bookings, those providers act as data processors on our behalf and are contractually required to handle your data securely and only as we instruct.

If you accept analytics cookies, Google acts as a data processor for the website usage data described above. Your booking details are not part of that data and are never sent to Google.

How long we keep it

Appointment and consultation records are retained for a minimum of 8 years from the date of service, in line with NHS records management guidance for community pharmacy. After this period, records are securely deleted.

Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data, where we are not legally required to retain it
• Restriction — ask us to limit how we use your data while a concern is resolved
• Objection — object to processing based on legitimate interests
• Portability — receive your data in a machine-readable format

To exercise any of these rights, email us at [email protected]. We will respond within one month.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to complain to the UK Information Commissioner's Office (ICO):

ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

We would appreciate the opportunity to address your concern directly before you contact the ICO — please reach out to us first.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Significant changes will be notified via a notice on our website.