Privacy Policy — Pharmacy8

1. Who we are

Pharmacy8 is operated by Saturn Pharma Ltd, a company registered in Scotland, company number SC579286, registered office 10 Galachlaw Shot, Edinburgh EH10 7JF, United Kingdom. We are the data controller for personal data processed through pharmacy8.com. Contact: team@pharmacy8.com.

2. What this service contains

Pharmacy8 analyses published aggregate NHS data about pharmacy contractors and GP practices. It contains no patient-level data, no identifiable patient information and no clinical records.

3. Personal data we collect about you

• ·Account data: name, email address, password (hashed), pharmacy or organisation, date of registration.
• ·Billing data: subscription tier and billing history. Card details are handled entirely by Stripe and never reach our servers.
• ·Usage data: pages viewed, searches run, reports generated, features used.
• ·Technical and security data: IP address, approximate location derived from IP, browser and device information, session and device identifiers, login times. We use this to enforce account limits and detect credential sharing.
• ·Communications: emails you send us and our replies.

4. Why we process it, and our lawful basis

• ·To provide the service and your account — performance of a contract.
• ·To take payment and meet accounting obligations — contract, and legal obligation.
• ·To enforce subscription terms, including session and device limits, and to detect account sharing — legitimate interests in protecting our business from unauthorised use.
• ·To send service and billing notices — contract.
• ·To send marketing emails — consent, which you can withdraw at any time.
• ·To improve and secure the platform — legitimate interests.

5. Who we share it with

We do not sell your personal data. We use the following processors:

• ·Stripe Payments Europe Ltd — payment processing, billing and invoicing.
• ·Supabase Inc — database, authentication and file storage.
• ·Lovable Labs Incorporated — application hosting and deployment.
• ·Resend — transactional and marketing email.
• ·Anthropic PBC — powers our AI commentary and analysis features. Text you submit to those features is sent to this provider for processing. Do not enter personal or confidential information into them.

We may disclose data where required by law or to establish or defend legal claims.

6. International transfers

Some processors operate outside the UK. Where that happens, transfers are covered by UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

7. How long we keep it

Account data for as long as your account is open, and 12 months after closure. Billing records for 6 years, as tax law requires. Security and session logs for 12 months. Marketing consents until withdrawn.

8. Your rights

You may request access to your data, correction, erasure, restriction, portability, and you may object to processing based on legitimate interests. You may withdraw consent to marketing at any time. Contact team@pharmacy8.com. You can complain to the Information Commissioner's Office at ico.org.uk.

9. Cookies

We use cookies that are strictly necessary for you to log in, stay logged in, keep your session secure and complete payment. We do not use advertising cookies. If we later add analytics cookies, we will ask for your consent before setting them.

10. Changes

We will post changes here and notify registered users of material changes.