Privacy notice
The public comparison does not ask for health information, prescription details or patient information. Pharmacy business contacts and controlled workspace accounts are handled separately from public comparison data.
Last updated 23 October 2026
Who controls your information
Hamahud Ltd is the data controller for personal information processed through PharmacyScore. It is registered in England and Wales under company number 17429503. Its registered office is 82a, 82a James Carter Road, Mildenhall, United Kingdom, IP28 7DE.
Hamahud Ltdhas paid the data protection fee to the Information Commissioner's Office (application C2067496). You can check its entry on the ICO register of fee payers.
Information processed
- Basic server and security logs may include IP address, time, requested URL, user agent and error information.
- If you email us, we process your address, message, attachments and related correspondence.
- Provider information shown in the comparison concerns businesses and publicly presented professional or regulatory records.
- We no longer offer weekly price-alert emails and do not collect email addresses for them. Records from the discontinued service (email address, signup consent and delivery or unsubscribe status) are kept only as long as needed to show consent and honour opt-outs. We never asked for health, prescription, consultation or patient information for that service.
- We may hold pharmacy business contact details from a documented lawful business-contact source so we can explain a listing, invite corrections or removal requests, and offer a clear opt-out. Where an address identifies an individual, it is treated as personal data.
- Pharmacy workspace accounts process the authorised user's name, work email, pharmacy name, GPhC premises number, official website, business telephone, premises address, declared authority, account role and terms/privacy acceptance record.
- Account security records include password hashes, email-verification and recovery tokens, encrypted authenticator secrets, one-way recovery-code hashes, active sessions, failed-login counters and salted or keyed IP identifiers. Plain passwords and used authenticator codes are not stored.
- Profile claims, settings changes and account, security and billing actions are recorded in an audit trail. Card details remain with Stripe rather than PharmacyScore.
- Cloudflare Web Analytics processes page-load performance and aggregate visit measurements without tracking individual visitors across different websites.
- Google Analytics measures visitors, sessions, page views and site usage only after you give consent. If accepted, it may set first-party cookies such as
_gaand_ga_*. - PharmacyScore records timestamped aggregate pharmacy-profile impressions and provider-website clicks. When a browser supplies a recognised AI-service referrer, the allowlisted AI provider category is recorded with the profile visit and any provider-site click; the metrics table does not store the raw referrer, IP address or a visitor identifier.
- The service does not use a patient questionnaire or advertising tracker, and analytics, pharmacy accounts and outreach must not collect health, prescription or patient information.
Purposes and lawful basis
We use limited information to deliver and secure the site, administer authorised pharmacy workspaces, diagnose faults, prevent abuse, answer correspondence, investigate corrections and rights complaints, understand aggregate site and pharmacy-profile performance, and keep evidence of editorial decisions. The profile metrics distinguish recorded visits, provider-site clicks and recognised AI-referrer visits; they are not used to identify a visitor or infer health interests, and an AI referrer is not treated as proof of an AI citation. Google Analytics is used solely to produce site-usage statistics that help us improve this website. It is not used by PharmacyScore for advertising, cross-site tracking, treatment targeting, automated decisions or visitor profiling.
The lawful basis for each purpose is:
| Purpose | Lawful basis |
|---|---|
| Delivering and securing the website (server and security logs) | Legitimate interests: running a secure, working website and preventing abuse. |
| Pharmacy workspace accounts, sign-in and account security | Contract: providing the account you asked for, and steps before entering that contract. |
| Billing and invoices for paid workspaces | Contract, and legal obligation to keep accounting records. |
| Answering correspondence, corrections and content-rights complaints | Legitimate interests: responding to you and keeping published facts accurate. |
| Handling data-protection requests | Legal obligation under UK data-protection law. |
| Google Analytics | Consent, which you can withdraw at any time using the control below. |
| Cloudflare Web Analytics and aggregate pharmacy-profile visit and click counts | Legitimate interests: understanding aggregate use of the site. No cookies, no visitor identifiers. |
| Public pharmacy profiles built from regulator and business records | Legitimate interests: publishing accurate, source-linked information about pharmacy businesses. |
| Pharmacy-business outreach about a listing | Legitimate interests: explaining the listing and offering corrections or removal. Sent only to business addresses; sole traders and partnerships are contacted by email only with consent. Every message offers an opt-out. |
| Records from the discontinued price-alert service | Legal obligation and legitimate interests: showing that consent was given and making sure opt-outs are honoured. |
Where we rely on legitimate interests, we have balanced them against your rights, and you can object at any time. We do not make automated decisions with legal or similarly significant effects.
Analytics storage
Google Analytics and its script stay off unless you explicitly accept optional analytics cookies. Advertising storage, advertising user data, advertising personalisation and general personalisation storage remain denied, and Google Signals is disabled. You can change your choice at any time using the control below. Disabling Google Analytics changes analytics storage to denied for this browser and removes the site's first-party Google Analytics cookies.
Google Analytics is disabled on this browser. Advertising storage, advertising user data and advertising and general personalisation remain denied in either setting.
How long we keep information
| Information | Retention |
|---|---|
| Server and security logs | Kept only as long as needed to investigate faults and abuse, then deleted in routine log rotation. |
| Pharmacy workspace accounts and audit trail | While the workspace is open, then deleted or anonymised once no longer needed to resolve disputes. |
| Billing records | Six years after the end of the financial year they relate to, as UK accounting rules require. |
| Correspondence, corrections and rights complaints | As long as needed to resolve the matter and keep a record of the decision. |
| Aggregate profile visit and click counts | As long as needed for aggregate trend and service reporting. They contain no visitor identifiers. |
| Opt-out, bounce and complaint suppression records | Kept so an opt-out is never accidentally reversed. Suppression records hold only the minimum needed. |
| Discontinued price-alert records | Only as long as needed to demonstrate consent and honour opt-outs, then deleted. |
Your rights
You have rights to access your information, correct it, have it erased, restrict or object to its use, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time without affecting earlier processing. We respond within one month.
If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the chance to resolve it first.
Send a privacy request to hello@pharmacyscore.co.uk. Do not send health, prescription, consultation or patient information through this general business channel.
Changes
We review this notice whenever we change how we use personal information, and update the date at the top of this page. Significant changes will be highlighted on the site.