Privacy policy
Who we are
Yip Pharmacy (yip.co.uk) is the trading name of Healtha Medical Ltd, a GPhC-registered pharmacy (premises registration 9012473, Office 11, 22 Milnpark Street, Glasgow G41 1BB; registered office 124-128 City Road, London EC1V 2NX). Healtha Medical Ltd is the data controller for the personal information described here. Our Superintendent Pharmacist is Aisha Ismail (GPhC 2067698). Contact for privacy matters: help@yip.co.uk or 0808 169 9594.
What we collect
- Identity and contact details: name, address, date of birth, email, phone.
- Health information: your answers to clinical assessments and pharmacist questions, medicines you tell us about, prescriber decisions and notes, verification records (for weight management, video-call verification of height and weight), and your GP details where you provide them. This is special category data and we treat it with additional protections.
- Order and payment information: what you ordered, delivery details, and payment status. Card details are handled and securely stored by our payment processor, Square, and never stored by us. For consultations, your card is saved with Square until your prescriber's decision, and removed if treatment is declined. If you have an active subscription, it stays saved until you cancel.
- Communications: messages between you and our clinical and support teams.
- Technical information: device and usage data needed to run the site securely. See our cookie notice.
Why we use it (lawful bases)
- To provide pharmacy services - assessing suitability, prescribing, dispensing, delivery and clinical follow-up: performance of a contract, and for health data, provision of health care by or under the responsibility of registered professionals (UK GDPR Article 9(2)(h)).
- To meet legal duties - pharmacy record-keeping, regulatory reporting to the GPhC or MHRA, and responding to safety alerts: legal obligation.
- To keep you and others safe - identity checks, safeguarding concerns, misuse prevention: legitimate interests and, where relevant, vital interests.
- Marketing - only with your consent, only about our own services, never using your health information, and you can withdraw consent at any time.
Who we share it with
The registered pharmacists and prescribers responsible for your care; your GP, with your consent or where clinically necessary for your safety; our delivery carriers (name, address and parcel details only, never what the medicine is on the outside of the parcel); our payment processor; and IT providers who host our systems under contracts that prohibit them using your data for their own purposes. We share information with regulators or authorities where the law requires it. We never sell your data.
How long we keep it
Clinical and prescribing records are kept for at least 8 years after your last interaction, in line with pharmacy record-keeping guidance. Order and financial records are kept for 6 years for tax purposes. Marketing preferences are kept until you withdraw consent.
Security
Data is encrypted in transit and at rest, hosted in the UK/EEA, and access is restricted to staff who need it for your care, with access logging. Patient health information is never used for advertising.
Your rights
You can ask for a copy of your information, ask us to correct it, ask us to delete it (note that we must keep clinical records for the periods above), object to or restrict some processing, and take your data elsewhere. Email help@yip.co.uk and we will respond within one month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
We will post any changes to this policy here with a new version date.