Privacy Notice
officially: Hampshire & Isle of Wight LPC
Sentinel House
Harvest Crescent
Fleet
Hampshire
GU51 2UZ
1. Who We Are
This privacy notice is issued by Community Pharmacy Hampshire and Isle of Wight (CPHIOW). We are the data controller for the personal data we collect and process.
Contact us: office@cpsc.org.uk
2. For Patients and the Public
As part of locally commissioned services delivered by community pharmacies, we may process limited, anonymised health information to support:
- Service management and payment:
We collect anonymised health data (no names or identifiable details) from community pharmacies and share it only with the relevant service commissioner—such as NHS England or Local Authority—for the purpose of managing and funding the service. We do not share this data with any other third parties.
3. For Community Pharmacies
We collect and process your personal and professional data including name, address, contact details, and levy payment information for the following purposes:
- Representation and support, as outlined in the LPC Constitution:
- Keeping you informed about training events, service updates, regulatory changes, best practices, and patient safety.
- Sharing your details, where appropriate, with NHS England, NHS Business Services Authority, Primary Care Support England, service commissioners, Community Pharmacy England, and other organisations that support LPC operations.
4. Legal Basis for Processing
We process your data under the following lawful bases:
- Article 6(1)(e) – Performance of a task carried out in the public interest
- Article 9(2)(h) – Provision of health or social care and management of healthcare systems
5. Categories of Data We Collect
- For patients: anonymised health data (no names or identifiable information)
- For pharmacies: name, address, contact details, professional registration, levy payment details
6. Data Sharing
We only share data with:
- NHS England
- Local Authorities
- NHS Business Services Authority
- Primary Care Support England
- Community Pharmacy England
- Other organisations involved in LPC support and service commissioning
We do not sell or share your data for marketing purposes.
7. Data Retention
We retain your data in accordance with NHS Records Management Code of Practice and other relevant guidance. Retention periods vary depending on the type of data and purpose of processing.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Object to processing in certain circumstances
- Request erasure or restriction of processing (where applicable)
- Lodge a complaint with the Information Commissioner’s Office (ICO)
ICO Contact:
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
https://ico.org.uk
9. Data Security
We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse. Access is restricted to authorised personnel only.
10. Automated Decision-Making
We do not use your data for automated decision-making or profiling.