Privacy policy

1. Who we are 

This privacy policy explains how 123 Chem collects and uses personal data through this website, 123chem.co.uk. 123 Chem is the data controller for this information. 

123 Chem Group 

For any questions about how we handle your data, contact us at info@123chem.co.uk. 

2. What personal data we collect through this website

Contact Us form 

If you use the Contact Us form, we collect your name, contact details, your chosen branch if you provide one, and whatever you write in your message. Please avoid including sensitive health details in this form beyond what’s needed for us to help you; if you do include health information, we treat it with the same care as any other special category data under UK GDPR. 

Online shop 

If you place an order through the online shop, we collect your name, delivery and billing address, order details, and confirmation that payment has been made. We do not store your full payment card details ourselves; these are handled directly by our payment provider (for example Stripe or PayPal). 

Email newsletter 

You can sign up for our newsletter to receive updates about seasonal health campaigns, changes to our opening hours, new services and other pharmacy updates. 

To subscribe, please complete our 123Chem Pharmacies Patient Details Update – Fill in Form. 

We will only add you to our newsletter mailing list if you have actively chosen to subscribe. You will not be added automatically. 

We use a third-party email platform to send our newsletters. Every email includes an unsubscribe link, allowing you to opt out at any time.  

Patient Details Update form 

If you complete our Patient Details Update form, whether on the website or in branch, we collect the details you provide, such as your name and contact details, in order to keep you informed about your prescriptions and relevant pharmacy services. We rely on your consent to use your details this way, and you can withdraw that consent at any time by contacting us. 

Cookies and technical data 

Like most websites, we automatically collect some technical information when you visit, such as your IP address, browser type, and which pages you view, mainly through cookies. See the Cookies section below for full detail. 

3. How we use your data, and our legal basis for doing so 

• Responding to an enquiry sent through the Contact Us form
  Data involved: Name, contact details, chosen branch (if given), and the content of your message
  Legal basis: Legitimate interest: we need to process your message in order to reply to it

• Processing an order placed through the online shop
  Data involved: Name, delivery and billing address, order contents, and payment confirmation from our payment provider
  Legal basis: Contract: processing is necessary to fulfil the order you have placed with us

• Sending you email newsletter updates you’ve opted in to receive
  Data involved: Name and email address
  Legal basis: Consent

• Keeping you informed about your prescriptions and relevant pharmacy services, once you’ve completed the Patient Details Update form
  Data involved: The details you provide on that form, such as your name and contact details
  Legal basis: Consent

• Understanding how the website is used, to improve it
  Data involved: Technical and usage data collected through analytics cookies (see the Cookies section)
  Legal basis: Consent, for any non-essential analytics cookie; legitimate interest for strictly necessary technical data needed to run the site

• Meeting our own legal and regulatory obligations
  Data involved: Records we are required to keep under applicable law
  Legal basis: Legal obligation

4. Cookies 

Under UK PECR (the Privacy and Electronic Communications Regulations), non-essential cookies, including most analytics and marketing cookies, require your active, opted-in consent before they’re set. This needs a cookie consent banner on the live site that blocks non-essential cookies until you agree, not just this wording. 

• Strictly necessary cookies, needed for the website to function (for example, keeping items in your basket while you shop). These don’t require consent. 

• Analytics cookies, which help us understand how the site is used so we can improve it (for example Google Analytics). 

• Marketing or advertising cookies, where any are in use. 

You can manage or withdraw cookie consent at any time through the cookie banner’s settings link, or through your browser settings. 

5. Who we share your data with 

We don’t sell personal data. We share it only where necessary to run the website and fulfil what you’ve asked us to do, for example: 

• Our website hosting provider. 

• Our payment provider, for online shop orders. 

• Our email marketing platform, for newsletter emails. 

• The platform that receives and manages details submitted through the Patient Details Update form. 

• Our analytics provider. 

• Regulators or authorities, where we’re legally required to share information with them.
  
  

6. International transfers  

Some of the third-party services above may process data outside the UK, for example if an analytics or hosting provider operates servers in the United States. Where this happens, we put appropriate safeguards in place, such as the UK’s International Data Transfer Agreement or the EU-US Data Privacy Framework, as applicable to that provider. 

7. How long we keep your data 

• Contact form enquiries: kept for 12 months, then deleted or anonymised. 

• Online shop orders: kept for 7 years, in line with standard UK tax and accounting record-keeping requirements. 

• Email newsletter: kept until you unsubscribe or ask us to remove you. 

• Patient Details Update form submissions: kept for as long as you remain a patient of ours and continue to receive these communications, or until you ask us to stop. 

• Analytics data: kept for 26 months, in line with standard analytics platform defaults. 

8. Your rights 

Under UK GDPR, you have the right to: 

• Be informed about how your data is used, which is what this policy is for. 

• Access a copy of the personal data we hold about you. 

• Have inaccurate personal data corrected. 

• Ask us to delete your personal data in certain circumstances. 

• Ask us to restrict how we use your personal data in certain circumstances. 

• Receive the personal data you’ve given us in a portable format, where processing is based on consent or contract and carried out by automated means. 

• Object to processing based on legitimate interest, including direct marketing. 

• Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before you withdrew it. 

To exercise any of these rights, contact us at privacy@123chem.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your data has been mishandled. The ICO can be contacted at ico.org.uk or on 0303 123 1113. 

9. Children   

This website and its online shop are not intended for use by children under 13 without the involvement of a parent or guardian. Where a product or service has its own age restriction, that restriction applies regardless of this general policy. 

10. How we protect your data  

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. This includes using HTTPS encryption across the website, restricting access to personal data to those who need it to do their jobs, and keeping our systems and software up to date. 

11. Changes to this policy 

We may update this policy from time to time. The date below shows when it was last revised. 

Last updated: 02-09-2026

12. Contact us 

If you have any questions about this policy or how your data is used, contact us at privacy@123chem.co.uk, or write to us at 454, Shore Road, Belfast,BT15 4HD,
United Kingdom.