Privacy Policy

01

About Us

Meshkati Pharmacy is a UK-registered online and in-person pharmacy, operated by Advanced Genetic Research Ltd. We are regulated by the General Pharmaceutical Council (GPhC) and comply with all applicable UK data protection and pharmacy regulations.

• GPhC Registration Number: 9013056
• Company Number: 9924398
• Registered Address: 10 Grosvenor Place, London, United Kingdom, SW1X 7HH
• Superintendent Pharmacist: Bassam Al-Dhahir
• Email: contact@meshkatipharmacy.com

You can verify our pharmacy registration on the GPhC website: pharmacyregulation.org/registers/pharmacy.

02

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our handling of personal data. If you have any questions about this policy or how we use your information, please contact:

03

Personal Data We Collect

We collect and process the following types of information:

a. Personal Identification Information
Name, date of birth, address, phone number, and email.

b. Medical and Health Information (Special Category Data)
Medical history, treatment details, medication requests, prescriptions, and any health information provided through online consultations.

c. Payment and Transaction Information
Payment details for orders or services.

d. Technical Data
IP address, device type, browser, and site usage statistics (via cookies or analytics tools).

We only collect data necessary to provide safe, effective, and compliant pharmacy services.

04

How We Use Your Information

We use your personal information to:

• Verify your identity and eligibility for pharmacy services.
• Dispense prescriptions and supply medication safely.
• Communicate about orders, appointments, or health queries.
• Process payments and issue invoices.
• Fulfil our regulatory and legal obligations (e.g. under GPhC, NHS, or MHRA).
• Improve our services and website experience.
• Send service messages or, with your consent, marketing updates.

We do not sell or share your data for commercial gain.

05

Lawful Bases for Processing

We process your personal data under the following lawful bases (Article 6 and 9 of the UK GDPR):

• Contractual necessity — to provide you with pharmacy services you request.
• Legal obligation — to meet regulatory requirements under pharmacy law and NHS frameworks.
• Vital interests — when processing is necessary to protect your health.
• Consent — where required, such as for marketing communications.
• Legitimate interests — for business improvement, fraud prevention, and service monitoring.

06

Who We Share Your Data With

We only share your data where necessary and with appropriate safeguards, including:

• Your GP or healthcare provider (for clinical safety and prescription verification).
• NHS systems for prescriptions and medical records, when applicable.
• Payment providers (e.g. Stripe, PayPal) to process transactions.
• Delivery and logistics partners for medication delivery.
• Regulatory bodies (GPhC, MHRA, NHS) if legally required.
• IT and software providers that support our operations, under data processing agreements.

We do not transfer your data outside the UK/EEA without appropriate safeguards.

07

Retention of Your Information

We retain personal data only as long as necessary to:

• Provide ongoing pharmacy services.
• Comply with legal and professional retention periods (typically 6 years for medical records).
• Resolve disputes and enforce agreements.

After that, data is securely deleted or anonymised.

08

Your Rights

Under the UK GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Erase your data (where legally permissible).
• Restrict or object to processing.
• Data portability (receive a copy of your data).
• Withdraw consent (for marketing or optional processing).

To exercise your rights, contact us at contact@meshkatipharmacy.com.

09

Cookies and Website Analytics

Our website uses cookies to enhance your experience and analyse site usage. You can manage or disable cookies in your browser settings.

10

Security of Your Information

We use secure servers, encryption, and restricted access to protect your personal data against loss, misuse, or unauthorised access. All medical data is stored in compliance with NHS and UK data protection standards.

11

Updates to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with the revised "last updated" date. We encourage you to review it periodically.

12

Contact Us

If you have any questions, concerns, or wish to exercise your data rights, please contact: