Fadden’s Pharmacy, Abbeylands Shopping Centre, Clane, Co. Kildare
Tel: 045 902 112 Fax: 045 902 113 Email: firstname.lastname@example.org
1. Opening Statement
We respect your privacy and your rights to control your personal data. We will be clear about what data we collect and why we collect it. This privacy notice explains the personal information we collect from you, why we collect it, how we will use it and how we protect it. If you have any questions, please do not hesitate to contact us.
We collect personal data to provide professional pharmacy services and healthcare advice.
Fadden’s Pharmacy is a Controller of the personal data you (the data subject) provide us. We can collect the following types of personal data from you:
- Personal Data: name, address, contact details, date of birth, gender, PPS number,
- GMS/DPS/LTI number, next of kin
- Sensitive Personal Data, with your consent, regarding medication details, vaccination details, allergy details, patient and family medical history, prescriber details, monies paid for prescriptions/prescription levies
- In store payment details
2. Why We Collect Your Personal Data?
We use the personal data you share with us to process your prescription requests and to provide you with healthcare advice and for business administration.
We rely on the following legal bases to process your personal data:
When you engage and voluntarily provide personal data to enquire about or purchase our products or services.
To respond to queries and the general administration of our business.
To process your special category data.
3. Sharing & Disclosure
We strive to keep your personal data safe and only share it when necessary. We recognise that you have a right to know that the information you share with Fadden’s Pharmacy is maintained confidentially.
We do not rent or sell your personal data to anyone. We do not share your personal data with third parties unless you have given us your consent.
However in certain limited circumstances, obtaining patient consent may be impractical, not possible, or undesirable. Examples could include:
- Where the disclosure is required by law.
- Where the disclosure is required to prevent, detect, or investigate offences.
- Where the disclosure is required urgently to prevent injury, or other damage to the health of a person, or otherwise to protect the vital interests of the patient.
- 4. What we do with your data?
We process your personal data onsite in Fadden’s Pharmacy.
We use Touchstore EPOS which uses European servers to store and process personal data.
We also use the MPS Dispensing Package system which stores data in Belfast.
We have agreements in place with these providers to protect personal data.
5. How long we keep your personal data?
Under statute, we keep prescription information for patient safety, for two years as standard, and five years for unlicensed medicines. However certain things like flu vaccination records need to be kept for eight years.
For this reason, we keep all paper data for ten years and then confidential shredding of files takes place. Electronic data (patient dispensary files) is kept for a period of fifteen years, after a patient stops using our services.
Sometimes there may be a circumstance where data is required to be held for a longer period, and this will be outlined to you.
6. What Cookies do we use on our site?
We use the following cookies but they do not collect personal data:
(A) Necessary cookies: used to serve up the site.
(B) Analytics cookies: to help track site visits and to improve the content of our web pages.
We do not use Preference cookies or Marketing cookies on our site.
7. How do we keep your personal data secure?
We use appropriate technical, organisational, and administrative security measures to protect all personal data we hold in our records and keep it secure.
8. What are your rights?
Right of Access
Individuals have the right to access their personal data and supplementary information. Please contact the Manager at email@example.com or in writing at the address above. We will acknowledge your request and respond to you within one month.
Right to Rectification
Please advise us of any changes in your personal information, as soon as possible. Should you believe that any personal data we hold on you is incomplete or incorrect, you can request to see this information and have it rectified.
Right to Erasure
In certain circumstances, data subjects have the right to the erasure of their data. Please contact the Manager at firstname.lastname@example.org or in writing at the address above. We will acknowledge your request and respond to you within one month. Please note, this is not an absolute right and only applies in certain circumstances.
Right to Restrict Processing
Individuals have the right to request the restriction or suppression of their personal data. Please contact the Manager at email@example.com or in writing at the address above. We will acknowledge your request and respond to you within one month. Please note, this is not an absolute right and only applies in certain circumstances.
Right to Object
You have the right to object and be removed from any direct marketing emails.
Right to be Informed
Right to Portability
You can ask that your personal data be transferred to you or a third party in a machine-readable format.
Please note, this is only if the data in question is:
1) provided by the data subject,
2) is processed automatically and 3) is processed based on consent or fulfilment of a contract.
If you wish to complain about how we have handled your personal data, please contact the Manager at firstname.lastname@example.org or in writing at the address above. If you still feel that your personal data has not been handled appropriately, you can contact the Irish Data Protection Commission and file a complaint with them.
Data Protection Commission,
Canal House, Station Road, Portarlington, R32 AP23, Co. Laois
Tel: 1890 252 231