Privacy NOTICE

Last updated: 4 August 2026

1. Who we are

Thomas Brown Pharmacy is owned and operated by ZenRx Pharma Ltd, trading as Thomas Brown Pharmacy.

ZenRx Pharma Ltd is the data controller responsible for the personal information described in this Privacy Notice.

Company name: ZenRx Pharma Ltd
Company number: 16573367
Trading name: Thomas Brown Pharmacy
Address: 51 London Road, Stockton Heath, Warrington, WA4 6SG
Email: thomasbrownpharmacy@gmail.com
Telephone: 01925 264183
Website: www.thomasbrownpharmacy.co.uk

This Privacy Notice explains how we collect, use, store and share personal information when you visit our website or book a pharmacy service online.

2. Online appointment bookings

All online appointment bookings are made through Setmore, our third-party appointment-booking provider.

When you select a booking link on our website, you will be taken to a Setmore booking page. Setmore collects and processes the information you enter so that it can provide the booking service to us.

Depending on the service being booked, this may include:

  • your name;

  • telephone number;

  • email address;

  • the pharmacy service you wish to book;

  • your chosen appointment date and time;

  • booking notes or answers to booking questions; and

  • any other information you choose to provide.

Please do not enter detailed medical information into a general booking-notes box unless we specifically ask you to do so.

Where booking information includes information about your health, it is treated as special-category personal data and is given additional protection under data-protection law.

Setmore may also send booking confirmations, reminders, cancellation notices and rescheduling messages on our behalf.

Setmore processes booking information in accordance with its own privacy information and its contractual arrangements with us.

3. Information collected during your appointment

The online booking is separate from the clinical information we may need to collect when you attend the pharmacy.

During your appointment, we may collect information including:

  • your date of birth;

  • address and postcode;

  • NHS number or other patient identifiers;

  • details of your GP or other healthcare professionals;

  • relevant medical history;

  • current medicines;

  • allergies;

  • vaccination history;

  • answers to clinical-assessment questions;

  • consent records;

  • details of advice, treatment, vaccination or medication supplied; and

  • payment information where a service is chargeable.

This information may be recorded in our pharmacy system or in an approved NHS or clinical-service system.

4. Information collected when you visit the website

Our website is hosted by Squarespace.

When you visit the website, Squarespace may automatically collect limited technical information needed to operate, secure and maintain the site, including:

your IP address;

  • browser, network and device information;

  • pages visited;

  • the date and time of your visit;

  • the website or page visited before arriving at our website; and

  • information about how the website is used.

We do not use the Squarespace website itself to collect appointment-booking details. Booking information is entered directly into Setmore.

Squarespace may use cookies and similar technologies. Further information is provided in our Cookie Policy and through the cookie settings available on the website.

5. How we use personal information

We use personal information to:

  • receive and manage appointment bookings;

  • confirm, cancel or rearrange appointments;

  • send appointment reminders;

  • contact you about your booking;

  • assess whether a pharmacy service is clinically suitable;

  • provide pharmacy and clinical services safely;

  • maintain appropriate clinical, consent and service records;

  • process payments and refunds where applicable;

  • respond to enquiries, concerns and complaints;

  • meet NHS, legal, regulatory and professional requirements;

  • protect patients, staff and the public;

  • prevent fraud or misuse of our services; and

  • operate, maintain and protect our website and booking arrangements.

We will not use information collected for a booking to send unrelated marketing messages unless you have separately agreed to receive them or another lawful basis applies.

6. Our lawful bases

Under UK data-protection law, we must have a lawful basis for using personal information.

Depending on the circumstances, we may rely on:

  • contract, where the information is needed to arrange or provide a private service you have requested;

  • legal obligation, where we must process or retain information to comply with the law;

  • public task, where information is processed as part of an NHS service or other function carried out in the public interest;

  • legitimate interests, where processing is reasonably necessary to operate and protect our pharmacy, website or booking arrangements and your rights do not override those interests; and

  • consent, where we specifically ask for and rely upon your agreement.

Where we process health information or other special-category personal data, we also rely on an appropriate additional legal condition. This will normally include processing that is necessary for the provision or management of health or social care by professionals who are subject to duties of confidentiality.

In some situations, we may process information where necessary for reasons of substantial public interest or to protect someone’s vital interests.

7. Who we share information with

We only share personal information where necessary, appropriate and lawful.

Depending on the service, information may be shared with:

  • Setmore, for appointment scheduling and reminders;

  • Squarespace, for website hosting, security and operation;

  • your GP, prescriber or another healthcare professional involved in your care;

  • NHS organisations and approved NHS systems;

  • the NHS Business Services Authority;

  • NHS England or the relevant integrated care board;

  • approved clinical-service, vaccination or pharmacy-record systems;

  • payment providers, where payment is taken;

  • IT and communications providers supporting our systems;

  • regulators, professional bodies or auditors;

  • insurers and professional advisers;

  • safeguarding authorities;

  • law-enforcement agencies or public authorities where required by law; and

  • another person you have authorised to act on your behalf.

We do not sell patient or customer information.

8. International transfers

Some of our service providers, including website, communications or booking providers, may process information outside the United Kingdom.

Where personal information is transferred internationally, we require appropriate legal safeguards to be used. These may include:

  • transfer to a country recognised as providing an adequate level of protection;

  • an approved international data-transfer agreement;

  • the UK Addendum to approved standard contractual clauses; or

  • another safeguard permitted by data-protection law.

Further details about a particular transfer or safeguard can be requested using the contact details in this notice.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, NHS, clinical, regulatory, tax and insurance requirements.

Booking information held in Setmore will be retained for as long as necessary to manage the appointment and maintain appropriate business and service records.

Clinical information created during an appointment may need to be retained for longer periods under NHS record-management requirements, medicines legislation and professional standards.

When information is no longer required, it will be securely deleted, anonymised or otherwise disposed of.

10. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • ask for access to the personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • ask us to delete information where there is no lawful reason for us to retain it;

  • ask us to restrict how information is used;

  • object to certain uses of your information;

  • receive certain information in a portable format;

  • withdraw consent where processing is based on consent; and

  • complain about how your information has been used.

These rights are not absolute. For example, we may be required to retain clinical, prescription or financial records even if you ask us to delete them.

We may need to confirm your identity before responding to a request.

To exercise your rights, contact:

Email: thomasbrownpharmacy@gmail.com
Telephone: 01925 264183
Address: Thomas Brown Pharmacy, 51 London Road, Stockton Heath, Warrington, WA4 6SG

11. Children and bookings made for others

A parent, guardian, carer or authorised representative may make a booking on behalf of another person where appropriate.

The person making the booking must have authority to provide the information and must ensure that the information supplied is accurate.

Where appropriate, we may need to confirm consent, parental responsibility, legal authority or the wishes of the person receiving the service before proceeding.

12. Security

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

Access to patient and booking information is limited to people who need it for their work and who are subject to appropriate confidentiality obligations.

However, no internet-based system can be guaranteed to be completely secure. Please contact us promptly if you believe information relating to you has been accessed or disclosed improperly.

13. Cookies

Our website and service providers may use cookies and similar technologies to operate the website, maintain security, remember preferences and understand website activity.

Where consent is legally required for non-essential cookies, those cookies should not be activated unless you provide consent through the website’s cookie controls.

You can change or withdraw your cookie choices through the cookie settings on the website.

14. Complaints

Please contact us first if you have concerns about how we use your personal information. We will try to investigate and resolve the matter.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

15. Links to other websites

Our website may contain links to websites or services operated by other organisations, including Setmore.

We are not responsible for the privacy practices of websites that we do not operate. You should read the privacy information provided by those organisations before submitting personal information.

16. Changes to this notice

We may update this Privacy Notice to reflect changes to our services, systems or legal obligations.

The current version will be published on this website and will show the date on which it was last updated.

17. Contact us

For questions about this Privacy Notice or how we use personal information, contact:

ZenRx Pharma Ltd trading as Thomas Brown Pharmacy51 London Road
Stockton Heath
Warrington
WA4 6SG

Email: thomasbrownpharmacy@gmail.com
Telephone: 01925 264183