Privacy Policy

At Stride Pharmacy Ltd, we are committed to protecting your privacy and ensuring your personal data is handled securely and responsibly. 

Stride Pharmacy provides online consultations, prescriptions and medicines. To do this safely we need to collect information about you, including information about your health. This policy explains what we collect, why, who we share it with, how long we keep it, and your rights.

By using our website and services, you agree to the practices described in this policy.

 

1. Who We Are
Stride Pharmacy Ltd is a company registered in England (Company No. 16917655)
Registered office: 3 Caxton Road, Preston, PR2 9ZZ, United Kingdom
Pharmacy address: 3 Caxton Road, Preston, PR2 9ZZ, United Kingdom
ICO Registration Ref: ZC118990
For the purposes of UK data protection law, Stride Pharmacy Ltd is the data controller responsible for your personal data.
If you have any questions about this policy, you can contact our Privacy Officer Naeem Seth via [email protected] or 01772 211933.

2. Our Lawful Bases for Processing Your Data
We are required under the UK GDPR to process your personal data lawfully, fairly, and transparently. This means we only process your data when we have a valid legal basis. We may rely on one or more of the following lawful bases:
Consent – where you have given us clear permission to process your data (e.g., for marketing or sharing medical data with your GP).
Contract – where processing is necessary to provide the services you have requested or to take steps at your request before entering into a contract.
Legal Obligation – where we are required to comply with legal or regulatory requirements (e.g., pharmacy and prescribing regulations).
Legitimate Interests – where processing is necessary for our legitimate business purposes, provided these do not override your rights and freedoms.
Public Interest – on rare occasions, where processing is required for tasks carried out in the public interest.
Vital Interests – in extremely rare cases, where processing is necessary to protect your life or the life of another person.

Special Category Data
When processing special category data (such as health information, biometric data, or information revealing racial or ethnic origin), we will only do so with an additional lawful basis, such as your explicit consent or where it is necessary for healthcare purposes.

Legitimate Interests Explained
When we rely on our legitimate interests (or those of a third party), we balance these interests against your privacy rights. Our legitimate interests typically include:

Operating, providing, and improving our services, including our website.
Communicating with you and responding to your enquiries.
Enhancing and developing our services, including marketing activities (where legally permitted).
Detecting, preventing, or investigating illegal activities such as fraud.
Maintaining the security of our systems, staff, customers, and business operations.
We will always ensure that any reliance on legitimate interests is reasonable, proportionate, and does not materially affect your rights and freedoms.

 

3. What Information We Collect

• Health information: answers to consultation questions, medical history, current medicines, height, weight and BMI, photos or videos you provide to confirm your weight or condition, messages with our clinical team, prescriptions and treatment history. This is “special category” data and we give it extra protection.
• Identity and contact details: name, date of birth, address, email, phone number, account login.
• Identity verification: information used to confirm your identity and age, and photo ID if requested.
• GP details: your GP practice, if you give them, and whether you consent to us contacting your GP.
• Order and payment information: what you order, delivery details, transaction records. Card details are handled by our payment providers; we do not store full card numbers.
• Technical and usage information: IP address, device and browser type, pages visited and how you use our website and app, collected through cookies and similar technologies (see our Cookie Policy).
• Marketing preferences: whether you have agreed to receive marketing.

 4. Why We Use Your Information And Our Legal Basis
Purpose: Assessing your consultation, prescribing and supplying medicines, ongoing clinical care and follow-up
Legal Basis (UK GDPR Article 6): Performance of a contract with you; legal obligation (pharmacy and prescription record keeping)
Condition For Health Data (Article 9): Article 9(2)(h): provision of health care, under the supervision of a health professional bound by confidentiality

Purpose: Verifying your identity and age
Legal Basis (UK GDPR Article 6): Legal obligation and legitimate interests (preventing fraud and unsafe supply)
Condition For Health Data (Article 9): Article 9(2)(h) where health data is involved

Purpose: Contacting your GP
Legal Basis (UK GDPR Article 6): Performance of a contract
Condition For Health Data (Article 9): Your explicit consent, Article 9(2)(a), unless we must share for your safety

Purpose: Processing payments, delivering orders, customer service
Legal Basis (UK GDPR Article 6): Performance of a contract
Condition For Health Data (Article 9): Not applicable

Purpose: Handling complaints, side effect reports and regulatory inspections
Legal Basis (UK GDPR Article 6): Legal obligation; legitimate interests
Condition For Health Data (Article 9): Article 9(2)(h) and (i) (public health, e.g. reporting to the MHRA)

Purpose: Sending marketing emails and texts
Legal Basis (UK GDPR Article 6): Your consent (you can withdraw at any time)
Condition For Health Data (Article 9): We do not use your health information for marketing

Purpose: Advertising cookies and measuring our ads
Legal Basis (UK GDPR Article 6): Your consent through our cookie banner
Condition For Health Data (Article 9): We do not send health information to advertising platforms

Purpose: Analytics and improving our website and app
Legal Basis (UK GDPR Article 6): Your consent (cookies); legitimate interests (essential service data)
Condition For Health Data (Article 9): Not applicable

 

5. Sharing Your Information
We only share what each organisation needs, and we require them to protect it. We only share your personal data when necessary:

 - Our prescriber and pharmacy team - To assess your consultation, prescribe, dispense and support you.
 - LexisNexis Risk Solutions - Identity and age verification
 - Mollie, Apple Pay, Google Pay & Klarna - Taking payment. If you choose Klarna, Klarna processes your data under its own privacy notice
 - Royal Mail & DPD - Delivering your order (name, address, phone only)
 - MTC - Hosting and maintaining our website and app
 - Your GP - Only with your consent, or where needed for your safety
 - Regulators and authorities (GPhC, MHRA, police, courts) - Where the law requires it, or to report side effects
 - Google, Meta (Facebook and Instagram), Reddit & TikTok - Advertising and analytics cookies, only if you accept them. See section 5 and our Cookie Policy
 - CookieScript - Recording your cookie choices

We never sell your personal data.

6. Advertising and Analytics
If you accept advertising cookies, our website shares limited information with advertising platforms (Google, Meta, Reddit, TikTok) so we can measure and improve our ads. This can include that you visited our website and whether you completed an order. We configure these tools so that they do not receive your consultation answers, the medicines you are interested in or prescribed, or your contact details from our clinical pages. Advertising cookies are off unless you choose to accept them, and you can change your choice at any time using the “Cookie settings” link at the bottom of every page.

7. The Stride App
The Stride Pharmacy app (iOS and Android) is available to patients with an active treatment plan. This policy applies to the app as well as our website.

What the app collects

Information: Account details (name, email, date of birth)
Where it comes from: Your Stride account
Why we use it: To sign you in and link the app to your treatment

Information: Weight, BMI and step count
Where it comes from: Entered by you, a connected smart scale, Apple Health or Android Health Connect (only if you give permission)
Why we use it: To track your progress and share it with your prescriber for your monthly review

Information: Dose and injection logs, injection sites
Where it comes from: Entered by you
Why we use it: To help you take your medicine safely and give your prescriber an accurate picture

Information: Meal, water and protein logs (including food photos and barcodes)
Where it comes from: Entered by you
Why we use it: To support healthy habits alongside treatment

Information: Progress photos
Where it comes from: Taken or uploaded by you
Why we use it: Stored only on your device behind your passcode

Information: Mood check-ins
Where it comes from: Entered by you
Why we use it: To help our team support you

Information: Messages with our pharmacy team
Where it comes from: You and our team
Why we use it: To answer your questions and provide care

Information: Device and app diagnostics
Where it comes from: Your device
Why we use it: To keep the app working and secure

Who can see it
Information you record in the app is stored securely with our hosting provider and can be seen by our prescriber and pharmacy team as part of your care. We do not use app data for advertising and we do not share it with advertising platforms.

Apple Health and Health Connect
The app only reads health data from Apple Health or Android Health Connect if you turn this on, and only the types you choose (such as weight and steps). We use this data only to show your progress and support your care. We never use it for advertising or sell it, and you can turn access off at any time in your phone’s settings.

Notifications
If you allow notifications, we send reminders about doses, check-ins and orders. You can turn them off in your phone’s settings.

Deleting your app data
You can delete progress photos, meal logs and other entries in the app at any time. To delete your account, go to [Profile > Privacy & Safety > Delete account or contact [email protected]]. We will delete your app data, except clinical information we must keep by law as part of your health record.

The app is only for patients aged 18 and over with an active Stride treatment plan

8. International transfers
Some of our suppliers, including Google, Meta and Reddit, are based in or process data in the United States or other countries outside the UK. Where this happens we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the UK International Data Transfer Agreement or Addendum, to make sure your data is protected to UK standards.

9. Automated checks
When you order, we check your identity automatically using LexisNexis. This may include checking your details against public records and credit reference agency data; this is a “soft” search that does not affect your credit score. If the automatic check cannot confirm your identity, we will ask for photo ID. A member of our team reviews every case before an order is cancelled, so no decision about you is made by automated means alone. Prescribing decisions are always made by our prescriber, never automatically.

10. Patient Confidentiality
Your medical information is treated with strict confidentiality. It will only be accessed by our pharmacy and prescribing team.
We will not disclose your medical data unless:
Required by law.
Directed by a regulator.
Necessary to prevent harm or crime.

11. ID Verification
All patients must complete ID verification to prevent fraud and ensure safe prescribing.
We use LexisNexis, a credit reference agency, to perform identity checks.
If you fail the automatic check, we may request photographic ID before processing your order.
If you cannot provide suitable ID, your order will be cancelled and refunded.

12. Cookies
We use cookies to improve your experience on our website and to collect anonymised statistical data.
Cookies do not identify you personally.
You can disable cookies in your browser settings, but this may affect website functionality.

13. Access to Information

Under the UK GDPR and Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you. This is provided free of charge. We may only charge a reasonable administrative fee, or refuse to act on the request, where it is manifestly unfounded, excessive, or repetitive.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (where legally permitted).
• Restrict or object to processing of your data.
• Withdraw consent (where processing is based on consent).

To exercise your rights, please contact us at [email protected].

Complaints about your personal data

If you’re unhappy with how we’ve handled your personal data, please contact us first at [email protected]. We’d welcome the chance to put things right, and the ICO will usually expect you to have raised your complaint with us before it looks into it.

We’ll acknowledge your complaint within 30 days of receiving it. We’ll then deal with it promptly, keep you updated on our progress and confirm the outcome in writing.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator. You can find their contact details at ico.org.uk. Stride Pharmacy Ltd is registered with the ICO under registration number ZC118990.

14. Data Security & Retention
We take appropriate technical and organisational measures to safeguard your data against loss, misuse, or unauthorised access.
We only keep your personal data for as long as necessary to fulfil our services and comply with legal, accounting, or regulatory requirements.
Your information is encrypted in transit (SSL/TLS) and stored securely. Access to health information is limited to our clinical and pharmacy staff and the suppliers listed above who need it. Our staff are bound by professional confidentiality.

15. Governing Law
This Privacy Policy is governed by the laws of the United Kingdom. Any disputes will be subject to the exclusive jurisdiction of the UK courts.