Privacy notice

Who controls your information

Hamahud Ltd is the data controller for personal information processed through PharmacyScore. It is registered in England and Wales under company number 17429503. Its registered office is 82a, 82a James Carter Road, Mildenhall, United Kingdom, IP28 7DE.

Information processed

• Basic server and security logs may include IP address, time, requested URL, user agent and error information.
• If you email us, we process your address, message, attachments and related correspondence.
• Provider information shown in the comparison concerns businesses and publicly presented professional or regulatory records.
• If you sign up for weekly price alerts, we process your email address, recorded signup consent, delivery/unsubscribe status, and the alert runs sent to you. We do not ask for health, prescription, consultation or patient information for this service.
• We may hold pharmacy business contact details from a documented lawful business-contact source so we can explain a listing, invite corrections or removal requests, and offer a clear opt-out. Where an address identifies an individual, it is treated as personal data.
• Pharmacy workspace accounts process the authorised user's name, work email, pharmacy name, GPhC premises number, official website, business telephone, premises address, declared authority, account role and terms/privacy acceptance record.
• Account security records include password hashes, email-verification and recovery tokens, encrypted authenticator secrets, one-way recovery-code hashes, active sessions, failed-login counters and salted or keyed IP identifiers. Plain passwords and used authenticator codes are not stored.
• Profile claims, settings changes and account, security and billing actions are recorded in an audit trail. Card details remain with Stripe rather than PharmacyScore.
• Cloudflare Web Analytics processes page-load performance and aggregate visit measurements without tracking individual visitors across different websites.
• Google Analytics measures visitors, sessions, page views and site usage only after you give consent. If accepted, it may set first-party cookies such as _ga and _ga_*.
• PharmacyScore records timestamped aggregate pharmacy-profile impressions and provider-website clicks. When a browser supplies a recognised AI-service referrer, the allowlisted AI provider category is recorded with the profile visit and any provider-site click; the metrics table does not store the raw referrer, IP address or a visitor identifier.
• The service does not use a patient questionnaire or advertising tracker, and analytics, pharmacy accounts and outreach must not collect health, prescription or patient information.

Purposes and lawful basis

We use limited information to deliver and secure the site, administer authorised pharmacy workspaces, diagnose faults, prevent abuse, answer correspondence, investigate corrections and rights complaints, understand aggregate site and pharmacy-profile performance, and keep evidence of editorial decisions. The profile metrics distinguish recorded visits, provider-site clicks and recognised AI-referrer visits; they are not used to identify a visitor or infer health interests, and an AI referrer is not treated as proof of an AI citation. Submitting the consumer price-alert form confirms that the address belongs to the person signing up and records consent for the weekly email. Verified active pharmacy-account contacts may receive the same factual weekly price update as an account service communication. Every update has an unsubscribe link, and opt-outs, bounces, complaints and suppressions stop future updates. Documented pharmacy-business outreach is processed separately on the stated legitimate-interests basis: explaining the listing and evidence process, enabling corrections or removal, and introducing the relevant business workspace. We record the source and honour objections, opt-outs, bounces, complaints and provider suppressions. Google Analytics is used solely to produce site-usage statistics that help us improve this website. It is not used by PharmacyScore for advertising, cross-site tracking, treatment targeting, automated decisions or visitor profiling.

Analytics storage

Google Analytics and its script stay off unless you explicitly accept optional analytics cookies. Advertising storage, advertising user data, advertising personalisation and general personalisation storage remain denied, and Google Signals is disabled. You can change your choice at any time using the control below. Disabling Google Analytics changes analytics storage to denied for this browser and removes the site's first-party Google Analytics cookies.

Sharing and retention

Hosting, database, payment, email and technical service providers may process limited information on our behalf. Resend processes transactional email and the consented weekly price alerts; Stripe processes hosted billing. Cloudflare provides privacy-first web performance analytics, and Google provides visitor and session analytics for aggregate website improvement. We may share a notice with an affected source, provider, adviser, platform or authority where lawful and necessary. Active account information is retained while the workspace is open. Timestamped profile-event rows are retained only while needed for aggregate trend and service reporting. Price-alert subscription, consent and delivery records are retained only while needed to operate the service and demonstrate consent; suppression records are retained so an opt-out, bounce or complaint is not accidentally reversed.

Your rights

Depending on the circumstances, UK data-protection law may give you rights of access, correction, erasure, restriction, objection and complaint to the Information Commissioner’s Office.

Send a privacy request to hello@pharmacyscore.co.uk. Do not send health, prescription, consultation or patient information through this general business channel.

Changes

This notice must be reviewed again before live billing, monitoring connections, a new outreach purpose or other material data collection is enabled. The separate DPIA, processor/controller mapping and contractual retention schedule remain required launch records.