Not available
- Treatments
Popular Treatment - Conditions Popular Conditions
We offer 1085 over-the-counter and prescription medicines, for the treatment of 89 conditions.
We also provide expert advice on a range of common health issues.
View All Treatments
Free & Discreet
delivery over £40
Sign up to get
10% off first order
Not applicable on prescription medications
Fully registered
UK Pharmacy
Rated 4.9/5.0
From over 10k reviews
Policies
Privacy policy
Understanding how pillpharm handles your personal data.
UK & EU
Where your data is stored, on secure AWS servers
7 years
Before a dormant account's data is deleted
UK GDPR
And the Data Protection Act 2018 govern our processing
At pillpharm, we are committed to protecting your privacy and ensuring your personal data is handled safely and transparently. This Privacy Policy outlines how we collect, use, and protect your information.
1
Data Controller
- 1.1 MI Health Limited, trading as pillpharm, is the data controller responsible for your personal data. Our registered office is Longcroft House, London, EC2M 4NS.
2
What Personal Data We Collect
- 2.1 We collect the following types of personal information to provide our services and for legitimate business purposes:
- 2.1.1 Name
- 2.1.2 Age (date of birth)
- 2.1.3 Sex
- 2.1.4 Gender
- 2.1.5 Address
- 2.1.6 Email address
- 2.1.7 Medication details
- 2.1.8 IP addresses and device types
3
How We Use Your Data (Purposes)
- 3.1 The data we collect allows us to fulfill our contract to supply medication.
- 3.2 If you've requested it, we may also undertake marketing activities to promote our products and services.
- 3.3 pillpharm processes your personal data in accordance with the Data Protection Act 2018 (DPA). In most circumstances, your personal data will not be disclosed to third parties.
- 3.4 We may need to contact you if we receive a request under the Freedom of Information Act 2000 (FOIA).
- 3.5 By submitting a prescription to MI Health Limited or signing up for one of our private services, you consent to an employee (or locum acting on our behalf) who is a GPhC registrant accessing your Summary Care Record (National Care Records Service) where necessary to safely provide your care, prescription, or service.
- 3.6 We may use third-party identity verification services, such as LexisNexis, to confirm your age. This involves sharing information outlined in section 2. This is necessary to comply with legal requirements relating to age-restricted products.
4
Legal Basis for Processing Personal Data
- 4.1 Under the UK General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information include:
- 4.1.1 Article 6(1)(a) UK GDPR: Your consent for specific purposes.
- 4.1.2 Article 6(1)(b) UK GDPR: Processing necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract.
- 4.1.3 Article 9(h) UK GDPR: Processing necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services.
5
Data Processors and Other Recipients of Personal Data
- 5.1 pillpharm acts as the data processor.
- 5.2 We use a number of trusted companies to process data to deliver the requested services. Details of those companies and the safeguards in place to protect your data can be found here.
6
International Data Transfers and Storage Locations
- 6.1 Any personal information collected will be stored securely within the UK and EU.
- 6.2 Where required to fulfill the requested service, we may use companies that adhere to EU-US Privacy Shield Certification rules and/or Model Contractual Clauses to ensure adequate data protection.
- 6.3 Data storage by pillpharm is provided through secure AWS servers located in the UK.
7
Retention and Disposal Policy
- 7.1 We process your personal data in the performance of a task in the public interest, specifically for the provision of healthcare and treatment and the management of healthcare systems. A pharmacist is responsible for the confidentiality of your information.
- 7.2 we will keep your information as long as you remain an active customer to assist with future orders and allow you to download VAT receipts. If your account becomes dormant, we will delete your data after 7 years.
- 7.3 Our payment handling partners and identity check partners will retain your information for as long as legally required for Fraud detection and Anti-Money Laundering purposes, as determined by the fourth schedule of the anti-money laundering directive.
- 7.4 You may object to us or any third party holding your information. You may also lodge a complaint with the Information Commissioner’s Office (ICO).
8
How We Keep Your Data Secure
- 8.1 pillpharm employs a range of technical, organisational, and administrative security measures to protect any information we hold from:
- 8.1.1 Loss
- 8.1.2 Misuse
- 8.1.3 Unauthorised access
- 8.1.4 Disclosure
- 8.1.5 Alteration
- 8.1.6 Destruction
- 8.2 pillpharm has written procedures and policies that are regularly audited and reviewed at a senior level.
9
Your Rights as a Data Subject
- 9.1 By law, data subjects have several rights under the EU General Data Protection Regulation (2016/679) and the Data Protection Act 2018. These rights are not diminished by our processing activities.
- 9.2 These rights include:
- 9.2.1 The right to get copies of information: You have the right to ask for a copy of any information about you that is used.
- 9.2.2 The right to get information corrected: You have the right to ask for any inaccurate information held about you to be corrected.
- 9.2.3 The right to limit how the information is used: You have the right to ask for any information held about you to be restricted (e.g., if you think inaccurate information is being used).
- 9.2.4 The right to object to the information being used: You can ask for any information held about you not to be used. However, this is not an absolute right, and continued use of the information may be necessary, with you being advised if this is the case.
- 9.2.5 The right to get information deleted: This is not an absolute right, and continued use of the information may be necessary, with you being advised if this is the case.
10
Comments or Complaints
- 10.1 If you are unhappy or wish to complain about how your personal data is used, please contact info@pillpharm.co.uk in the first instance or write to:
C/O Data Protection Officer pillpharm
Longcroft House
London
EC2M 4NS
10.2 If you are still not satisfied, you can complain to the Information Commissioner's Office (ICO). Their website address is www.ico.org.uk and their postal address is:Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
11
Automated Decision Making or Profiling
- 11.1 No decision will be made about individuals solely based on automated decision making (where a decision is taken using an electronic system without human involvement) which has a significant impact on them.
12
Changes to This Policy
- 12.1 This privacy notice is kept under regular review, and new versions will be available on our privacy notice page on our website.
- 12.2 This privacy notice was last updated on May 21, 2025.
For more information, please visit our FAQs or contact our Customer Support team.
Disclaimer: This Privacy Policy is subject to change in accordance with UK data protection laws and healthcare regulations.
Questions about your data?
Contact our team, or write to the Data Protection Officer using the address above.