Privacy Policy - Roshban Pharmacy

Effective Date: 11th May 2026

Roshban Pharmacy is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, and protect the information you provide to us through our website.

Roshban Pharmacy  is the data controller for the personal data collected via this website.

1. Information We Collect

We only collect information that is necessary to provide you with the services you request. When you use our website, specifically the Contact Page, we may collect the following personal data:

  • Identity Data: Your full name.
  • Contact Data: Your email address and telephone number.
  • Communication Data: Any personal information or health-related information you choose to provide to us within the message box.

2. How We Use Your Information (Purposes and Legal Basis)

We process your data based on the following legal grounds under the UK General Data Protection Regulation (UK GDPR).

A. To respond to your enquiry and provide customer service.

  • Data Used: Identity, Contact, Communication.
  • Legal Basis: Legitimate Interests, to run our business, respond to user queries, and provide general services.

B. To communicate with you about your request, prescription, or pharmacy service.

  • Data Used: Identity, Contact, Communication (including any health data).
  • Legal Basis: Consent, where you have explicitly provided information for us to act upon (e.g., asked a specific health-related question). OR Legal Obligation/Public Interest (if the data relates to a specific NHS service).

C. To improve our website and services.

  • Data Used: Non-personal data (e.g., website usage statistics - see Section 5).
  • Legal Basis: Legitimate Interests, to define types of customers for our services and keep our website updated and relevant.

3. Sharing Your Personal Data

We do not sell, rent, or trade your personal data with third parties for marketing purposes.

We may share your data with trusted third parties in the following limited circumstances:

  • Service Providers: We may share data with IT and system administration service providers who host or maintain our website, solely for the purpose of keeping our services running securely.
  • Regulatory/Legal Requirements: We will disclose your personal data where required to do so by law, to a government body, or to comply with a court order.
  • NHS Services: If your enquiry relates to an NHS service or prescription, we may be required to share relevant information with NHS bodies (e.g., your GP surgery, NHS England).

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Access to your personal data is limited to employees, agents, contractors, and other third parties who have a business need to know.

5. Cookies and Analytics

Our website may use necessary cookies to function correctly. We may also use non-essential cookies (such as Google Analytics) to collect standard internet log information and details of visitor behaviour patterns. This information is processed in a way that does not directly identify anyone and helps us analyse and improve our website performance. You will be asked for your consent before any non-essential cookies are placed on your device.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Contact Enquiries: Typically, we will retain contact enquiry data for [1 Year after the last communication, or longer if a service relationship is established.
  • Health Information: Information relating to your health or prescriptions is subject to specific professional and NHS record keeping requirements and will be retained according to those guidelines.

7. Your Legal Rights (UK GDPR)

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

  • Request access to your personal data (commonly known as a "data subject access request").
  • Request correction of the personal data that we hold about you.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request the transfer of your personal data to you or a third party.
  • Withdraw consent at any time (where consent is the legal basis for processing).

If you wish to exercise any of the rights set out above, please contact us using the details below.

8. Roshban Attendance Mobile Application

The Roshban Attendance mobile application is provided exclusively for authorised employees, pharmacists, locums and contractors working for Roshban Pharmacy.

The application is used to manage attendance, employee self-service and workforce administration.

Information We Process

When using the mobile application, we may process the following information:

  • Employee name
  • Employee code
  • Employment role and staff type
  • Home and assigned pharmacy
  • Attendance and clock-in / clock-out records
  • Shift schedules
  • Leave requests and leave balances
  • Working hours and attendance history
  • Locum invoices (where applicable)
  • Authentication preferences

Biometric Authentication

The application supports Face ID, Touch ID and Fingerprint authentication for quicker and more secure sign in.

Biometric information is processed entirely by your device's operating system (Apple iOS or Android) and is never collected, transmitted or stored by Roshban Pharmacy.

NFC Attendance

The application uses Near Field Communication (NFC) technology to identify authorised pharmacy attendance points during employee check-in and check-out.

NFC data is used solely for attendance verification.

Location Information

The application does not continuously monitor or track your location.

Attendance is recorded only when an authorised pharmacy NFC tag is scanned or when another approved attendance method is used.

Data Security

Communication between the mobile application and Roshban systems is encrypted using industry-standard HTTPS/TLS encryption.

Access to employee information is restricted to authorised personnel with a legitimate business need.

Data Retention

Attendance, leave, shift and payroll related information is retained only for as long as required to fulfil employment, payroll, legal and regulatory obligations.

9. Contact Details and Complaints

Roshban Limited is committed to resolving any complaints about our collection or use of your personal data.

  • Contact Person: The Data Protection Lead
  • Address: Roshban Pharmacy

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

‍