Privacy Policy

How Northway Chemist handles your personal information when you use our website, book an appointment or use our pharmacy services.

Last updated: Oct 1, 2026

Who we are

Northway Chemist is the data controller for your information. Our details are:

  • Legal name: trading as Northway Chemist
  • Address: The Northway Centre, Northway Lane, Tewkesbury GL20 8TW, United Kingdom
  • Email:info@northwaychemist.co.uk
  • Phone:01684 299499 or 07934 125663
  • Superintendent Pharmacist: Mr Ashvin Aggarwal (GPhC registration no. 2075660)
  • GPhC premises registration number: 1031610
  • Data protection lead: Mr Ashvin Aggarwal, contactable at the email above

The short version

  • We do not use analytics, tracking or advertising tools on this website.
  • We do not set marketing or tracking cookies.
  • We do not sell your information or share it for marketing.
  • If you book an appointment, we receive the details you enter in our booking system (TidyCal) so we can provide your appointment.
  • When you use our pharmacy services in person, we keep the health records the law requires us to keep.

Information we collect

When you browse our website. We do not collect any personal information. Our website host keeps standard server logs (such as IP address, browser type and pages requested) for security and to keep the site running. We do not use these logs to identify you.

When you book an appointment. Bookings are made through TidyCal. We receive the information you enter, which may include:

  • your name, email address and phone number
  • the service and appointment time you choose
  • any notes or answers you give in the booking form, which may include health information
  • payment confirmation, if the service requires payment at booking (we do not see or store your full card details)

When you contact us. If you email or phone us, we keep your message and contact details so we can reply.

When you use our pharmacy services. To provide services such as prescriptions, vaccinations, consultations and NHS services, we collect information including your name, date of birth, address, NHS number, GP details, medical history, medicines and allergies, and records of the care we provide.

How we use your information and why

UK data protection law requires us to have a lawful basis for using your information.

What we use it for
Lawful basis (UK GDPR)
Managing appointments, confirmations and reminders
Contract (Article 6(1)(b))
Providing pharmacy care, prescriptions and consultations
Legitimate interests or public task for NHS services (Article 6(1)(f) or 6(1)(e)), and health or social care (Article 9(2)(h))
Keeping clinical and dispensing records
Legal obligation (Article 6(1)(c)) and health or social care (Article 9(2)(h))
Replying to your enquiries
Legitimate interests (Article 6(1)(f))
Keeping our website secure
Legitimate interests (Article 6(1)(f))

We never use your information for marketing, profiling or automated decision-making.

Who we share it with

We only share your information where it is needed to provide your care or run our service:

  • TidyCal (booking system), which stores your booking details on our behalf.
  • Payment providers such as Stripe or PayPal, if you pay when booking. They handle your card details directly.
  • Webflow (website hosting), which keeps the server logs described above.
  • The NHS and your GP, where needed for NHS services, prescriptions or your ongoing care.
  • Regulators or authorities, where the law requires it.

Some of these providers are based in the United States. Where your information is transferred outside the UK, it is protected by safeguards approved under UK law, such as the UK-US Data Bridge or the International Data Transfer Addendum.

Cookies

Our website does not use analytics, advertising or tracking cookies, so we do not show a cookie banner.

When you open our booking page, TidyCal may set strictly necessary cookies so the booking form works. These do not track you across other websites. You can block or delete cookies in your browser settings, but the booking form may not work without them.

How long we keep it and how we protect it

We keep information only as long as we need it:

  • Booking details: [12 months] after your appointment, unless they form part of your clinical record.
  • Enquiries by email or phone: up to [12 months] after we last hear from you.
  • Clinical and dispensing records: for the periods set by the NHS Records Management Code of Practice, which for most adult pharmacy records is [8 years].

We protect your information with access controls, secure systems and staff training. We complete the NHS Data Security and Protection Toolkit each year.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the information we hold about you
  • ask us to correct information that is wrong
  • ask us to delete your information, where we are not legally required to keep it
  • object to or ask us to restrict how we use your information
  • ask us to transfer your information to another provider

To use any of these rights, contact us at info@northwaychemist.co.uk. We will reply within one month. There is usually no charge.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.