Elite Meds Privacy Policy

One of the core principles we hold at Elite Meds is to provide you with the highest quality of healthcare possible. In order for us to do this, we must keep clear records about you, your personal health, and the care we have provided or planned to provide you. We understand the importance and value of your privacy and we take the utmost care in securing your personal information.

1. Who We Are

Elite Meds is operated by:

Singhs Medical Ltd (T/A Elite Meds)
1 Richmond Road
Worksop
Nottinghamshire
S80 2TP
United Kingdom

We are the Data Controller for all personal data collected through this website, consultation forms, prescribing platforms, pharmacy dispensing systems and delivery workflows.

We are registered with the Information Commissioner’s Office (ICO) under registration number: 00011915067

For all privacy-related enquiries, contact:
[email protected]

Our Data Protection Officer (DPO):
Mustafa Bhaiji
Singhs Medical Ltd
1 Richmond Road, Worksop, S80 2TP

2. Purpose of This Policy

This Privacy Policy explains:

• What personal data we collect
• Why we collect it
• How we use it
• When we share it
• How long we keep it
• Your rights under data protection laws
• How to exercise those rights

Elite Meds may update this Policy periodically. The latest version will always be available on this page.

3. What personal data we collect

We collect and process the following types of information:

A. Identity & Contact Information

• Full name
• Address
• Email address
• Telephone number
• Date of birth
• Gender
• Identity verification data (photos, video, ID documents) where required

B. Health & Clinical Information (Special Category Data)

• Medical history
• Current symptoms
• Previous or current diagnoses
• Medication history
• Consultation answers
• Photos submitted for clinical assessment
• Blood pressure, height, weight or other biometric information
• Prescribing decisions and dispensing records
• Notes from our prescribers and pharmacists
• Information received from your GP or other healthcare professionals (where you have consented or where lawful)

C. Account & Order Information

• Login details
• Password (stored in secure hashed format, we cannot view your password)
• Purchase history
• Delivery address(es)
• Payment details (processed securely by third-party payment providers; we do not store card numbers)

D. Technical & Website Usage Data

• IP address
• Device identifiers
• Browser type
• Log files
• Cookie identifiers
• Page interactions
• Bounce rates and session analytics

E. Marketing Preferences

• Email marketing consents
• SMS marketing consents
• Engagement metrics (opens, clicks, preferences)

4. How We Use Your Personal Data

We process your data only where lawful and necessary. The purposes include:

A. Provision of Pharmacy & Prescribing Services

• Assessing your suitability for treatment
• Providing pharmacy and clinical care
• Verifying your identity
• Supplying prescription-only and pharmacy-only medicines
• Contacting your GP where clinically appropriate
• Maintaining legally required records

B. Order Processing & Fulfilment

• Creating and managing your account
• Processing payments
• Preventing fraud
• Shipping orders
• Communicating delivery updates

C. Website Functionality & Performance

• Operating our website
• Personalising user experience
• Security monitoring
• Detecting suspicious activity

D. Marketing (Only with consent)

• Sending promotional emails or SMS
• Tailoring offers and product recommendations
• Running loyalty/engagement campaigns

E. Legal & Regulatory Compliance

• Compliance with MHRA, GPhC, NHS, and UK healthcare regulations
• Mandatory clinical record-keeping
• Responding to regulators or law enforcement where legally required

5. Lawful Bases for Processing

Elite Meds meet high data protection and security standards, therefore any personal data provided is kept safe and secure. Any data that may be collected through our website is processed in a legal manner that does not infringe the rights of our users. We lawfully process your personal data in the performance of a task in the public interest for the provision of healthcare and treatment; this is outlined within:

• Article 6(1)(e) of the GDPR: “Necessary for the performance of a task in the public interest”
• Article 9(2)(h) of the GDPR (including the Data Protection Act). “The provision of health care or treatment” or “the management of health care systems or services or social care systems or services” or “necessary for reasons of public health in the area of public health”

Processing necessary for:

• Healthcare and treatment
• Dispensing of medicines
• Managing healthcare systems
• Ensuring patient safety

A. Contract

To process and fulfil your order, manage your account, handle returns or refunds, and maintain transactional records.

B. Legal Obligation

For example:

• NHS record-keeping
• Controlled drugs regulations
• Anti-fraud and identity verification in regulated healthcare

C. Legitimate Interests

• Fraud prevention
• Identity checks
• Improving site performance
• Customer service optimisation

D. Consent

• Marketing emails / SMS
• Non-essential cookies
• Certain identity verification steps
• Where clinically required (e.g., contacting your GP)

You can withdraw consent at any time.

6. Identity Verification

For certain medicines or treatments (including those prone to abuse), we must verify identity under regulatory guidelines. Identity verification is required either by law or as part of our clinical and fraud-prevention responsibilities; and in accordance with General Pharmaceutical Council (GPhC) guidance.

We use Yoti/Onfido or similar third-party providers to perform:

• ID document scanning
• Facial comparison
• Liveness checks
• Fraud prevention checks

We receive confirmation of verification, we do not store your raw ID images unless legally required.

Yoti/Onfido may process your data outside the UK using approved transfer safeguards.

7. Who We Share Your Data With

We only share personal data where necessary and lawful.

We may share your data with:

• Your GP (with consent or where clinically required)
• Our prescribers and pharmacists
• Delivery providers (Royal Mail, DPD, DHL etc.)
• Secure payment processors (Stripe, Mollie, PayPal etc.)
• Identity verification providers (Yoti/Onfido)
• IT, hosting and security providers
• Email/SMS communication systems (e.g., Mailchimp, Klaviyo)
• Analytics providers (Google Analytics, Meta Pixel, etc., if enabled)

We never:

• Sell your data
• Rent your data
• Share your data with third parties for their own marketing

All third parties we use operate under Data Processing Agreements (DPAs).

8. International Data Transfers

Some of our service providers (e.g., email providers, analytics tools, cloud hosting) may process personal data outside the UK.

Where this occurs, we ensure appropriate safeguards, such as:

• UK GDPR Adequacy Regulations
• ICO-approved Standard Contractual Clauses
• Additional technical safeguards

9. How Long We Keep Your Data

We retain data only as long as necessary.

Where deletion is requested and legally permissible, we will delete promptly.

10. Your Data Protection Rights

You have the following rights:

• Right of access – to obtain a copy of your data
• Right to rectification – to correct inaccurate data
• Right to erasure – “right to be forgotten” (limited in healthcare settings)
• Right to restriction
• Right to data portability
• Right to object (including for marketing)
• Right to withdraw consent
• Right to complain to the ICO
• Right not to be subject to automated decision-making

To exercise any right, email: [email protected]

Users have the right to request the erasure of personal data from Elite Meds. Under GDPR, this is known as ‘the right to be forgotten’. Any user who has provided personal data to Elite Meds can have it removed without undue delay (considered to be about a month). This right only applies to data held at the time of the request. It does not apply to data that may be created in the future.

You have the right to request any personal data we have collected on you. Elite Meds has an organised and secure system that stores personal data, therefore any personal data requested by a user will be provided in a safe, structured and machine-readable format that can easily be transmitted. This data can also be sent to other companies/organisations that have been designated by yourself. If we provide this information directly to yourself or to another organisation, we are not responsible for any subsequent processing conducted by yourself or the other organisation.

11. Your Health Records

You have the right to ask for a copy of all pharmacy records and health information we hold about you (in paper or electronic form). We’re required to respond to any request within one month and usually there will be no charge for this information.

You will need to give adequate information in order for pharmacy staff to identify you (for example, full name, address and date of birth). You will also be required to provide government issued ID, for example a passport/driving license, before any information is released to you.

If you would like a copy of the health information held on you, please email us at [email protected] or write to our Data Protection Officer. If you believe that any health information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible. We will promptly correct any information found to be incorrect.

You may object to us holding your information; you have the right to request the restriction or suppression of your personal data including your health records. This is not an absolute right and only applies in certain circumstances. When processing is restricted, we are permitted to store any personal data, but not to use it.

12. Marketing

When you agree to receiving marketing from us using a sign-up page or checking the “Email” or “SMS” box, we will save your contact details (email address and/or phone number) together with your communication preferences and only send you marketing via your chosen channel – email and/or SMS.

We will periodically send you promotional emails/SMS about new products, special offers or other events, which we think you may find interesting. Should you wish to stop receiving those updates, you can easily unsubscribe from them following the unsubscribe/opt-out links provided in every communication we send you. Alternatively you can email [email protected].

We do not send marketing relating to prescription-only medicines.

13. Data Security

We are committed to ensuring that all data we collect is gathered, stored and processed in accordance with the GDPR. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we hold on you; and have implement industry-standard security measures including:

• Encryption in transit (HTTPS/SSL)
• Encryption at rest for sensitive data
• Firewalls and intrusion detection systems
• Multi-factor authentication for staff
• Role-based access controls
• Regular staff training in clinical confidentiality
• Secure password hashing and salting
• Regular vulnerability scanning

We will not sell or rent your information to third parties, nor will we share your information with third parties for marketing purposes.

Whilst we take all reasonable precautions to ensure that user data is secure and that you are protected, there always remains the risk of harm. The Internet can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.

14. Cookies & Tracking Technologies

This site uses cookies. A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We do not keep any of your personal details on cookies.

Our website uses cookies to:

• Enable core website functionality
• Analyse site usage
• Improve performance
• Personalise your experience
• Deliver personalised advertising (where consented)

You can change your cookie preferences at any time using our cookie banner.

Types of Cookies

• Strictly necessary – cannot be disabled
• Analytics – Google Analytics etc. (consent required)
• Marketing/Advertising – Meta Pixel, Google Ads (consent required)
• Functional – enhances user experience

We do not keep any of your personal details on cookies. We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. You can manage your cookie preferences at any time using our on-site cookie controls. Your browser may also allow you to block cookies, but this is separate from your consent preferences.. This may prevent you from taking full advantage of the website.

Our advertising partners use cookies on this site to improve your website experience and provide you with personalised advertising from this site and other advertisers.

15. Links to other websites

Our website may contain links to other websites of interest and once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

16. Complaints

If you have any complaints about how we process your personal data, please contact us through Customer Service page or alternatively email [email protected].

If you are not satisfied with the way your data has been handled and you feel that Elite Meds has not resolved your issue, you may lodge a complaint with the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. https://ico.org.uk/make-a-complaint/

Contact Details

The data you provide is controlled by:

Singhs Medical Ltd T/A Elite Meds

1 Richmond Road

Worksop

Nottinghamshire

S80 2TP

Details of our Data Protection Officer:

Mustafa Bhaiji

Singhs Medical Ltd T/A Elite Meds

1 Richmond Road

Worksop

Nottinghamshire

S80 2TP

All enquires related to data please email [email protected]

17. Contact Us

For all privacy matters, contact:

Elite Meds – Data Protection Enquiries
[email protected]
Singhs Medical Ltd
1 Richmond Road
Worksop, S80 2TP