Legal
Privacy Policy
This policy explains how IntelligentQ Limited (“PharmacyIQ”, “we”, “us”) collects and uses personal data across this website, our early access programme, the PharmacyIQ platform, NHS integrations and our customer relationships. We process personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and applicable NHS information governance standards.
01Data controller and processor status
For this website and commercial enquiries, IntelligentQ Limited is the Data Controller. Where the platform is deployed in a pharmacy and handles prescription or patient-related data, the pharmacy organisation is the Data Controller and PharmacyIQ acts as Data Processor under a written agreement.
02Personal data we collect
- Website visitors — name, organisation, email, phone number, IP address, browser information and usage data.
- Prospective customers — business contact details, operational details such as branch counts and current systems, and correspondence records.
- Customer accounts — usernames, professional roles, authentication credentials, access logs and configuration data.
- Pharmacy operations — product codes, stock records, batch numbers, expiry dates, supplier information and workflow metadata.
03Special category data
Health-related information processed through the platform is Special Category Data under UK GDPR. We process it solely as Data Processor, on the instructions of the pharmacy Data Controller and with appropriate safeguards in place.
04Why we process data
Processing supports responding to enquiries, commercial discussions, operating the platform, authentication, audit logging, NHS integration, system monitoring, fraud prevention and regulatory compliance.
05Lawful bases
We rely on consent, legitimate interests, contractual necessity and legal obligation under UK GDPR, depending on the activity.
06Data retention
Website enquiry data is kept for up to 24 months unless you ask us to delete it sooner. Customer and operational data is retained in line with contractual agreements and pharmacy record-keeping requirements.
07Data security
Measures include encrypted transmission using secure protocols (e.g. TLS), role-based access control, authentication safeguards, audit logging, environment segregation and continuous monitoring. See our Security & Compliance page for detail.
08Data sharing
Third-party service providers supporting hosting, communications, diagnostics and analytics may process data for us under confidentiality obligations. We do not sell personal data.
09International transfers
Where data is transferred outside the UK, we use Standard Contractual Clauses or rely on adequacy determinations, in compliance with applicable data protection law.
10Your rights
You may request access to, correction or erasure of your personal data, ask us to restrict processing, or request data portability. Contact privacy@pharmacyiq.co.uk. You also have the right to complain to the Information Commissioner’s Office.
11Automated decision-making
PharmacyIQ does not engage in automated decision-making that produces legal or similarly significant effects without human involvement.
12Data breach response
We investigate suspected breaches, notify affected customers and authorities where required, and implement remedial measures.
13Children’s data
The platform and this website are not directed at individuals under 16 and we do not knowingly collect their data.
14Changes to this policy
We update this policy to reflect changes in law, the product, the scope of our integrations and our security practices. The current version is always published here.
15Contact
Privacy enquiries: admin@pharmacyiq.co.uk