Privacy Policy

Introduction

We ensure that we offer the highest standards of privacy and security to all users of our website and services therein.

The personal information we collect is used solely to fulfil your request for a consultation, medical advice, and prescription. We also collect technical information to improve the experience on our site.

This policy outlines the data we hold, how we use it, and the measures we take to protect your data and privacy.

In this policy, "we", "us", and "our" refer to Al Muhsineen trading as www.prescriptiondoctor.com.

When we use the term "writing" in this policy, we also include electronic messaging, such as emails and text messages.

If you wish to contact us regarding any information pertaining to your rights or the processing of data you provide, you can contact our customer services team by telephoning 0208 191 7477 or by sending an email to enquiries(at)prescriptiondoctor(dot)com.

Lawful Processing of Data

Personal data relating to health and medical information is classed as "Special category of data". For that reason, it can be subject to certain exemptions and provisions.

Within the GDPR regulations, there is a lawful basis for processing customer data:

GDPR Article 6 (1)(c): processing is necessary for compliance with a legal obligation.

Al Muhsineen Ltd is legally required to abide by regulations governing healthcare, which require accurate information to be held on a patient's record.

GDPR Article 9 (h): processing of special categories of personal data: "processing is necessary for the purposes of preventive or occupational medicine, … medical diagnosis, the provision of health or social care or treatment".

As such, Al Muhsineen are required by law to process this information in order to provide its services, which include the provision of medicine and medical devices.

Privacy Statement

Al Muhsineen are the "data controller" trading as Prescription Doctor in the UK. Please contact us at admin(at)prescriptiondoctor(dot)com for any issues or information relating to your personal data.

We take your privacy seriously and, as such, we are transparent about how your data is collected, stored, processed, and shared.

We comply with the current GDPR regulations and adhere to the Data Protection Act. Our Information Commissioner's Office (ICO) registration number is ZA776177.

Information required to provide treatment

At Al Muhsineen, we provide health advice and offer treatment via prescription if deemed appropriate by our online doctor. These medicines are provided via postal service from our fully licensed and regulated UK Pharmacy.

As such, we must comply with the legal requirements for issuing prescription medicines and the collection, processing and sharing of data. Part of our requirements include confirming your identity, keeping your personal medical information up to date, and informing your own GP if you give us permission to do so.

Identity Checks

In order for us to verify a person's identity and verify their age, for the supply of a prescription, we require the following information to be correct:

• A full name (forename(s) and surname(s))
• Gender (as assigned at birth)
• Date of Birth
• Address details

If your identity cannot be verified using a credit reference agency (LexisNexis), we will require you to submit proof of identity before a prescription can be issued.

Medical records

In order to create an account with Prescription Doctor, we require some basic medical information such as blood pressure, allergies, etc. This is to build your core medical record. To then further order a prescription for a medicine, you will be required to answer specific medical questions relating to that product and the associated medical condition.

The answers to these are recorded and form part of the overall consultation process with our doctor. Our panel is viewable for our doctor and contains a full history provided, answers to specific questions for that medicine, and any previous order history or advice we have provided. All of these factors, combined, are used by the doctor to make a decision about issuing a prescription to the pharmacy.

If a doctor requests more information from a patient, this is passed to the customer service team confidentially, who then forward this request to the patient. Any reply with information is confidentially passed to the doctor and forms part of the medical record.

Your GP details

We strongly advise patients to inform their local GP of any consultations taken online and any resulting prescriptions issued by our online doctor. If you choose to include your GP, you will be asked to provide their details, allowing us to notify them directly via letter or email.

Pharmacy records

Our partner pharmacy, Halliwell Late Night Pharmacy, enters the relevant information you provide into a patient medication record (PMR) system. This PMR system acts as an independent record of any treatment supplied and is required for all UK pharmacies.

The pharmacy will also print a paper copy of your prescription, which is stored on the premises for a period of 2 years, as per GPhC Standards.

With your permission, the pharmacy may also carry out SCR searches which match your details correctly to your NHS record to ensure continuity of information across healthcare providers.

Health Data Collection and Use Mobile App

Our mobile applications integrate with HealthKit to access and collect health-related information from your device. The types of data we read include:

- Weight, Height, Activity, Heart Rate, Blood Pressure, Blood Glucose, Body Temperature, Body Fat, Lean Body Mass & Sleep Analytics.

Purpose of Data Collection

This information is securely stored as part of your patient record and is used exclusively to help our clinicians deliver high-quality, personalised care. By monitoring these health metrics, our healthcare professionals are better equipped to identify potential issues early and to provide timely interventions.

Consent and Patient Control

Your privacy and consent are paramount. You have full control over the health data you share via HealthKit. You may adjust your settings at any time to limit the types of data accessed by our applications. Should you choose to revoke your consent, you can do so through your device settings or by contacting us directly.

Sharing and Use of Health Information

The health data collected is used solely for the purposes of enhancing your care and will not be shared with third parties without your explicit consent, except as required by applicable law or necessary to protect your health and safety.

Communication

To ensure effective remote healthcare treatment, we require excellent communication facilities. This is done by patients providing their email addresses and phone numbers. Our primary form of contact will be email, with secondary contact made via telephone or SMS.

Messages from doctors and the admin team will be submitted via email and will be visible on your account. Sensitive information will not be sent via email unless requested by the patient via email, where consent to reply via email is implied, unless indicated otherwise.

Addresses

In order for medicine to be provided via post and for payment to be taken, we require the billing and shipping addresses to be provided. Each address is stored and recorded on your customer account.

Emails

We use automated emails to inform you of your order.

Automated notification emails will be sent to patients in the following circumstances:

• When placing an order
• When your order is at a pre-approval stage
• When the representative requires further information to verify your identity
• When your order has changed status
• If the doctor requires further information
• If the pharmacy requires further information
• When your order has been shipped

Some automated emails may appear to be sent by our doctor. Just because an email appears to have been sent by our doctor does not confirm that the doctor has reviewed or approved your order.

Supplementary Emails

You may receive automated supplementary emails from TrustPilot and Royal Mail.

We may also send promotional information about products, services and news. These messages are sent, on average, once a month using MailChimp software. To understand what data we share with MailChimp, please visit the data sharing policy.

At Al Muhsineen, we reserve the right to send mass emails for important drug safety information and important updates that affect registered users. For example, when a manufacturer recalls a product or stops production, or if the ingredients of a medicine change.

We do not send targeted emails based on previous purchases or online behaviour. Any email you receive from us regarding a product or service you previously used via our website is purely coincidental.

Cookie Policy

Our full cookie policy can be found here.

Please read our cookie policy before using our website. It includes information for removing cookies if required.

By visiting our website at www.prescriptiondoctor.com, cookies will be stored on your browser, both on your mobile device and computer. Cookies are there to help support your use of the website. By agreeing to this policy and using our website, you consent to the installation of cookies on your device.

Visitor tracking

Prescription Doctor uses Google Analytics website visitor tracking tools to give an overall understanding of user experience and behaviour. This allows us to improve our service. Information on how this works can be found on the Google Analytics website.

If you wish to opt out of Google Analytics, you can use Google's add-on, which prevents your data from being used by Google Analytics. Further information on this add-on can be found here: https://tools.google.com/dlpage/gaoptout

We also track using Laravel sessions.

Retaining your data

Your data will be retained indefinitely. Please refer to the Data and Payment Security page, which outlines the safety measures in place to protect your data. This is done to comply with healthcare regulations. It is also important for both the patient and doctor if an issue ever arises with prescribing or dispensing.

In accordance with UK governance, our pharmacy must retain data from private prescriptions issued through our www.prescriptiondoctor.com service for 2 years after they have been issued.

You can disable your account at any point by contacting our customer service team.

Automated Doctor Questions

The www.prescriptiondoctor.com website contains questionnaires with specific questions designed to exclude some patients from treatment before they reach the doctor for consultation. This is in the interest of patient safety.

Automated Emails and Messages

We use the email address you provide to send automated emails regarding your order.

Here are the reasons we may send you an automated email:

• To confirm that we have received your order.
• To inform you that the order has been passed to our doctor for review.
• To let you know that your order has been dispatched from our pharmacy.
• To let you know about order cancellations and refunds.

Automated messages may be sent to you which appear to come directly from our doctor. This automated message does not confirm that the doctor has reviewed the order; it only indicates that the order has been passed on to the doctor for review.

If you have any concerns about any emails you receive from us, do contact our customer service team by telephoning 0208 191 7477 or emailing us at enquiries(at)prescriptiondoctor(dot)com.

Automated Purchase Tracking

Our software is built to ensure that patient safety is paramount. Once you have created your account, this will be fixed, and any new account set up with similar details will be flagged to our customer care team. We also restrict purchases of certain medicines to ensure only a safe quantity of medicines are in a person's possession at any one time.

If we have reason to believe you have created a duplicate account, we will let you know.

Access To Your Data

Patients can update their details, such as their name or address, by contacting our customer care team via email or telephone, providing valid reasons.

We may contact you to request the information we require for processing.

Patients can also request to view all the data we hold, as per GDPR legislation. This can be done by contacting enquiries(at)prescriptiondoctor(dot)com. We will provide you with the requested information in an easy-to-read and accessible format, in compliance with the GDPR.

You will not be charged for requesting access to the data we have.

Who We Share Your Data With

We only share your data with parties that help us deliver the best service online. For a full disclosure of who we share your data with, please refer to our Data Sharing Policy.

With your consent, we will share information you provide during your order

We will never sell your data to a third party for any reason.

Complaints Regarding Data

For all complaints or concerns relating to data, please forward details in writing to our Privacy Officer at admin(at)prescriptiondoctor(dot)com.

EU General Data Protection Regulation (GDPR) Requests

The GDPR has been a legal requirement in the UK since May 2018. This new legislation allows you the following rights:

• The right to be informed - you can ask us how we safeguard your data and protect your privacy
• The right of access - you can ask to see your personal data held by us
• The right to rectification - you can ask us to rectify inaccurate or incomplete personal data;
• The right to erasure - you can ask us to erase your personal data;
• The right to restrict processing - you can ask us to restrict the processing of your personal data (subject to Article 9(h) of the GDPR);
• The right to data portability - you can request us to send your personal data to you or an organisation on your behalf;
• The right to object to processing - you can object to the processing of your personal data;
• The right not to be subject to automated decision-making, including profiling - you can request us not to make decisions based on automated profiling services.

In order to exercise any of these rights, or if you have a query relating to this legislation and how it impacts your use of our website, please contact admin(at)prescriptiondoctor(dot)com.

Please be aware that the GDPR provides exceptions, including the legal retention of data for legitimate medical purposes.