Privacy Policy
Urmston Travel Clinic is the travel-health service of Davyhulme Pharmacy. We take your privacy seriously and handle your personal information — including health information — in line with UK GDPR and the Data Protection Act 2018.
Draft for review. This policy is a working draft. Before publication it must be checked by the business and a suitably qualified adviser, and the items marked [to confirm] completed.
Who we are
Urmston Travel Clinic operates from Davyhulme Pharmacy, 179–181 Canterbury Road, Urmston, M41 0SE. The data controller is [registered company name — to confirm] ("we", "us", "our"). We are registered with the Information Commissioner's Office (ICO registration [to confirm]).
You can contact us about this policy by phone on 0161 748 3016 or by email at info@urmstontravelclinic.co.uk.
The information we collect
Depending on how you use our service, we may collect:
- Identity and contact details — your name, date of birth, address, phone number and email.
- Health information — your medical history, medicines, allergies, travel plans and the vaccinations or services you receive. This is "special category" data and we treat it with particular care.
- Booking information — appointment times and related details you provide when booking.
- Technical information — limited data created when you use our website (see Cookies below).
Why we use it, and our lawful basis
We use your information to provide safe, appropriate travel-health care — assessing your suitability for vaccines, giving treatment, keeping accurate records and contacting you about your care. Our lawful bases under UK GDPR are:
- Article 6(1)(b) — to take steps at your request and provide the service you ask for;
- Article 9(2)(h) — for the provision of health care by, or under the responsibility of, a health professional; and
- Article 6(1)(c) / 9(2)(i) — where we must meet legal or public-health obligations.
Who we share it with
We only share your information where necessary:
- Semble — our clinical records and online booking system, which stores your records securely on our behalf.
- Google Maps — when the map on our contact page loads.
- Netlify — our website hosting provider.
- Your GP or NHS services — where clinically appropriate and with your knowledge.
We do not sell your personal information, and we do not use it for advertising.
How long we keep it
We keep clinical records for the periods recommended for pharmacy and travel-health records, after which they are securely deleted or anonymised. Non-clinical enquiries are kept only as long as needed.
Your rights
You have the right to access your information, to ask us to correct it, to object to or restrict certain processing, and — in some circumstances — to have it erased. To exercise any of these, contact us using the details above. You also have the right to complain to the ICO (ico.org.uk).
Cookies
Our website uses only what is necessary to function. The booking calendar (Semble) and the contact-page map (Google Maps) are loaded from those providers and may set their own cookies when you use them. We do not currently run advertising or analytics tracking. [Confirm before adding any analytics or advertising — a cookie-consent banner would then be required.]