1. Who We Are


We are Anchor Health Limited (trading as Pitchkins And Currans Pharmacy), a company incorporated in England and Wales (Company No. 04336424) and our registered office is at 46 Chippenham Road, London W9 2AF. When we refer to “Pitchkins And Currans” or “we“, “us” or “our” in this policy, we are referring to Anchor Health Limited.

For the purposes of this policy, P&C Pharmacy is the Data Controller — meaning we are responsible for deciding how and why your personal information is used.

2. Our Commitment to Your Privacy


We take your privacy seriously. We are committed to being transparent about what we collect, why we collect it, and how we keep it safe. This policy is written in plain English because we believe you have the right to understand how your information is used.

3. What Information We Collect


We may collect and hold the following types of information about you:

  1. Personal Identity Information which may include your name, date of birth, address, telephone number, email address, and NHS number.
  2. Health & Medical Information which may include your prescriptions, medical history relevant to dispensing, allergies, current medications, vaccination records, and consultation notes. This is classed as special category data under UK law and is given the highest level of protection.
  3. NHS & Insurance Information which may include your NHS exemption status, GP details, and any private health insurance details if relevant to your care.
  4. Website & Communication Data which is collected if you contact us via the website or sign up for services online, and may include your name, email address, and the content of your enquiry.
  5. CCTV Footage data as we use CCTV for the safety of staff and patients within the pharmacy premises. Footage is stored securely and deleted after 30 days unless required for an investigation.

We also collect and use Aggregated Data such as statistical or demographic data for internal purposes. Aggregated Data may be derived from Your Data but is not personal data as it does not directly or indirectly reveal your identity. For example, we may aggregate information about how you use our website and services to calculate the percentage of users accessing a specific website feature, but this is anonymised.

4. How is Your Data collected


How is Your Data collected?We use different methods to collect data from and about you, including through -

Automated technologies or interactions
When you visit and interact with our website, we automatically collect information about your use of our site including details of your visits such as pages viewed, the resources that you access and data about your equipment. Such information may include Aggregated Data, traffic data, location data and other communication data.

Direct interactions
You may give us your data by filling forms, or by corresponding with us by post, phone, email or otherwise.

5. Why We Use Your Information


We will only use the information that we collect from you as follows:

  1. To enable us to provide our health services to you
  2. To enable us to comply with regulatory requirements
  3. To communicate with you in the event that there is a query or problem with your order
  4. To inform you of any changes to our website, services or products
  5. For record keeping purposes
  6. To track and analyse activity on our website

We also collect and use Aggregated Data such as statistical or demographic data for internal purposes. Aggregated Data may be derived from Your Data but is not personal data as it does not directly or indirectly reveal your identity. For example, we may aggregate information about how you use our website and services to calculate the percentage of users accessing a specific website feature, but this is anonymised.


We only use your information when we have a lawful reason to do so.

Why we use it Legal basis
Dispensing your NHS or private prescriptionLegal obligation
Providing clinical services (e.g. vaccinations, consultations)Legitimate healthcare purposes
Communicating about your medication or careLegitimate interest and Consent
Fulfilling NHS reporting requirementsLegal obligation
Sending appointment reminders or service updatesConsent
Improving our servicesConsent and Legitimate interest
Complying with regulatory inspections (GPhC, CQC)Legal obligation

6. NHS Services & Shared Care


As an NHS-contracted pharmacy, we are part of the wider NHS health and social care network. This means that in the course of providing your care, your information may be shared appropriately with -

  1. Your GP surgery, to ensure safe and coordinated prescribing
  2. NHS England and NHS Digital, for national reporting and clinical audit purposes
  3. Other healthcare professionals involved in your care (e.g. hospitals, community nurses), where clinically necessary
  4. NHS Business Services Authority (NHSBSA), for prescription payment and exemption verification

7. Private Services

If you use any of our privately funded services (such as private consultations, travel vaccinations, or private prescriptions), we handle your information in the same way as for NHS services — with the same duty of confidentiality and the same high standards of data security.For private services, we rely on your consent and our legitimate interest in providing safe clinical care as our lawful basis for processing.

8. Cookies on Our Website

Our website (www.pandcpharmacy.com) may use cookies — small text files stored on your device — to help the site function properly and to understand how visitors use it.

We use -

  • Essential cookies — needed for the website to work (no consent required)
  • Analytics cookies — to understand how people use our site (only with your consent)

You can manage your cookie preferences at any time through the cookie banner on our website or your browser settings. We do not use cookies to track you across other websites or to serve targeted advertising.

9. Your Rights

Under UK data protection law (UK GDPR), you have the following rights regarding your personal information. These are your rights — and we will always take them seriously.

Right to be informed — You have the right to know how we use your data. That is exactly what this policy is for.

Right of access — You can request a copy of the personal information we hold about you. This is called a Subject Access Request (SAR).

Right to rectification — If any of your information is incorrect or out of date, you have the right to ask us to correct it.

Right to erasure — In certain circumstances, you can ask us to delete your information. Please note that we may be unable to do this if we are legally required to retain it (for example, prescription records).

Right to restrict processing — You can ask us to limit how we use your data in certain situations.

Right to object — You can object to us processing your data where we are relying on legitimate interests, including for direct marketing.

Right to withdraw consent — Where we rely on your consent to use your data, you can withdraw it at any time. This will not affect anything we have already done.

To exercise any of these rights, please contact us. We will always respond clearly and promptly, and we will never charge you for making a request.

10. Changes to This Policy

We review and update this privacy policy regularly to reflect changes in the law, NHS guidance, or our own practices. When we make significant changes, we will post a notice on our website.

11. How to Contact Us

Questions, comments and requests regarding this policy are welcomed. You may write to our Data Protection Officer at [email protected] or Data Protection Officer, Anchor Health Limited, 46 Chippenham Road, London W9 2AF.

You have the right to make a complaint at any time to the Information Commissioner's Office ("ICO"), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.