Privacy policy

Last updated June 2026 · Placeholder — to be reviewed by Farmeci's data protection team before production launch.

This policy describes how the Farmeci Blog (blog.farmeci.com) collects, uses, and protects your personal data. It is operated by Farmeci, a UK General Pharmaceutical Council (GPhC)-registered pharmacy. The blog is a patient-education resource. Clinical consultations and prescription dispensing are handled on the Farmeci main site under its own privacy notice.

Who we are

Farmeci is the data controller for the Farmeci Blog. For data-protection queries, email [email protected].

What we collect

• Email address, if you subscribe to our newsletter.
• Standard server logs — anonymised IP, browser, referring URL — collected by our hosting provider for security and performance.
• Aggregated, privacy-respecting analytics to understand which articles are read most. We do not use cross-site advertising trackers on the blog.
• localStorage for non-essential UI state (for example, remembering that you've already subscribed so we don't show the form again on this device).

What we don't collect

The Farmeci Blog does not collect medical history, symptom questionnaires, or any clinical data. That data is only collected on the main Farmeci consultation flow, under its own privacy notice.

Legal basis for processing

• Newsletter: your explicit consent. You can withdraw at any time using the unsubscribe link in any email.
• Server logs and aggregated analytics: legitimate interests in keeping the site secure and improving the patient-education content.

Sharing

We share personal data only with processors that help operate the site — our hosting provider, our email service provider, and our analytics provider. Each is bound by a data processing agreement. We do not sell personal data to third parties.

Retention

Newsletter subscribers are kept until you unsubscribe. Server logs are retained for the period specified by our hosting provider (typically 30–90 days).

Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise any of these, email [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

International transfers

Some of our processors may store data outside the UK. Where this is the case we ensure appropriate safeguards under UK GDPR are in place (for example, the UK International Data Transfer Agreement or an adequacy decision).

Changes to this policy

We will update this policy as our practices evolve. Material changes will be flagged at the top of the page.