How we look after your information
This policy explains what personal information we collect when you use our website or buy from us, why we use it, who we share it with and the choices you have.
Who we are
Medical Supermarket is a trading name of ProCure Health Limited, registered in England and Wales (company number 7305206). Our address is Unit 5, Stocklake Park, Farmbrough Close, Aylesbury, Buckinghamshire, HP20 1DQ.
We are the “controller” of the personal information described in this policy, which means we decide how and why it is used.
What information we collect
- Contact details: your name, job title, work email address, phone number and the name and address of your practice, home or organisation
- Account and order details: your login, delivery addresses, orders, invoices, approved products, budgets and favourites
- Prescribing details: if you buy Prescription Only Medicines, the authorisation details on our POM form, such as the prescriber’s name and professional registration number
- Enquiries: what you tell us through our forms, live chat, email or phone, including invoices you upload for a price comparison
- Marketing preferences: whether you want to hear from us, and which emails you open or click
- Website data: your IP address, device and browser, and how you use our site, collected through cookies when you allow them
We do not ask for health information about patients, and we ask you not to send it to us.
How we collect it
- When you open an account, place an order or fill in one of our forms
- When you call, email or chat with our team
- When you sign up for our free resources or emails
- When you use our website, through cookies and similar technology
- From your colleagues, if they add you to your organisation’s account or name you as a contact
- From public sources, such as professional registers, when we check POM authorisations
How we use it and why
| What we use it for | Our lawful basis |
|---|---|
| To set up and manage your account, and to process, deliver and invoice your orders | Contract |
| To check that Prescription Only Medicines are only supplied to authorised prescribers | Legal obligation |
| To answer your enquiries and provide customer service | Legitimate interests |
| To keep accounting and tax records | Legal obligation |
| To send marketing emails to business contacts about similar products and services, with an easy way to unsubscribe | Legitimate interests (or your consent where the law requires it) |
| To ask you for a review after you order | Legitimate interests |
| To keep our website secure, understand how it is used and improve it | Legitimate interests and, for non-essential cookies, your consent |
| To prevent fraud and recover money owed to us | Legitimate interests |
Where we rely on legitimate interests, we have weighed our interests against your rights. You can ask us for details of this assessment.
Who we share it with
We only share your information when we need to, and we never sell it. We share it with:
- Couriers and delivery partners, so they can deliver your order
- Manufacturers and suppliers who deliver some orders direct to you
- Our payment, banking and credit-checking providers
- Our IT, website, hosting, email and business systems providers
- Our reviews provider, reviews.io, if we invite you to leave a review
- Professional advisers, such as accountants, auditors and lawyers
- The police, regulators or other authorities, when the law requires it
These organisations may only use your information to provide their service to us.
Transfers outside the UK
Some of our providers may store information outside the UK. When they do, we make sure it is protected, for example because the country has been approved by the UK government as having adequate data protection laws, or by using the UK’s approved contract terms.
How long we keep it
- Account and order records: for as long as your account is open, then for 6 years after your last order, for tax and legal reasons
- POM authorisation records: for as long as we need them to meet our legal and regulatory obligations
- Enquiries and live chat: for as long as we need them to deal with your enquiry and any follow-up
- Invoices uploaded for a price comparison: only for as long as we need them to prepare your comparison and follow it up
- Marketing preferences: until you unsubscribe, after which we keep a record so we don’t contact you again
When we no longer need information, we delete it or make it anonymous.
Cookies
We use cookies that are needed to run our website, such as keeping items in your basket. With your permission, we also use analytics and marketing cookies, for example Google Analytics, to see how our site is used. You can accept or decline these using the cookie banner, and change your mind at any time using the cookie settings link on our website.
Your rights
- See a copy of the information we hold about you
- Ask us to correct anything that is wrong
- Ask us to delete your information
- Ask us to restrict how we use it
- Object to how we use it, including for marketing at any time
- Ask us to send your information to you or another organisation
- Withdraw your consent, where we rely on it
To use any of these rights, email us or call us using the details below. We will reply within one month. Some rights have limits, for example we must keep certain records for tax purposes, and we will explain if this applies.
Keeping your information safe
We use technical and organisational measures to protect your information, including access controls, secure systems and staff training. Only people who need your information to do their job can see it.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. This version was last updated in October 2026.
Contact us about your data
If you have a question about this policy, want to use your rights or are unhappy with how we have handled your information, please contact us first and we will do our best to put it right.
You also have the right to complain to the Information Commissioner’s Office (ICO).
