1. Who we are and who controls your data
New International Medical Ltd (trading as NewGen Pharmacy), Company No. 07980522, 245 High Street, Stratford, London E15 2LS, is the data controller for all personal data collected through this website and our online clinic.
Contact us about data protection: info@newgenpharmacy.co.uk or call 020 4599 5647.
2. What we collect
We collect the following categories of personal data depending on how you use our service.
- Contact and account data: name, email address, phone number, delivery address, date of birth
- Consultation and health data (special-category data under UK GDPR Art. 9): your answers to the online consultation questionnaire, including health conditions, medicines, symptoms, and lifestyle information relevant to your requested treatment
- Transaction data: order details and payment confirmation (payment card data is processed by our payment provider and is not stored by us)
- Communications data: any correspondence between you and our team
- Technical data: IP address, browser type, and usage data collected via cookies (see Section 8)
3. How your consultation answers are handled
Your consultation answers are classified as special-category health data and receive the highest level of protection we apply.
- Stored securely on UK-based servers, encrypted at rest and in transit
- Accessible only to the clinical team (prescriber and Superintendent Pharmacist) involved in your care
- Used solely to assess your suitability for treatment and to supply your approved prescription
- Not sold, shared with third parties, or used for marketing purposes
- A summary of your consultation status and contact details (not the full health answers) may be accessible to our practice management system for operational and clinical follow-up purposes — see Section 4 for lawful bases
4. Lawful bases and consent for health data
We process your personal data on the following lawful bases under UK GDPR.
- Contract: to provide the online consultation and dispensing service you have requested
- Legal obligation: to comply with our GPhC, MHRA, and NHS regulatory requirements
- Vital interests: where necessary to protect your health or safety
- Explicit consent (Art. 9, special-category health data): you will be asked to give explicit, granular consent to the processing of your health data before completing your consultation — you may withdraw this consent at any time by contacting us, though this may mean we can no longer provide the service
5. Data retention
We retain your data for as long as necessary to fulfil the purposes described above and to meet our legal and regulatory obligations.
- Consultation and prescription records: retained in accordance with GPhC guidance (typically a minimum of 8 years for adults, or until age 25 for those who were minors)
- Account and contact data: retained while your account is active and for a reasonable period thereafter
- Incomplete or abandoned consultation drafts: purged automatically after a short expiry period
6. Your rights
Under UK GDPR, you have the following rights in relation to your personal data.
- Right of access (Subject Access Request)
- Right to rectification of inaccurate data
- Right to erasure (subject to our legal and regulatory retention obligations)
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
To exercise any of these rights, please contact us at info@newgenpharmacy.co.uk. We will respond within one calendar month.
7. Cookies
We use cookies and similar technologies to operate and improve our website. We use strictly necessary cookies to make the site work, and — with your consent — analytics and functionality cookies. You can manage your cookie preferences through the consent banner when you first visit our site.
8. ICO registration and complaints
New International Medical Ltd is registered with the Information Commissioner's Office (ICO) as required by UK data protection law, registration number ZA112587. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.