Privacy Policy

Last updated · 29 August 2026

Who we are

PharmGrowth (pharmgrowth.co.uk) builds and hosts pharmacy websites, the White Label App, the Routly delivery management platform and Ledgerly invoice capture for independent UK pharmacies. For any privacy query, or to exercise your rights, email support@pharmgrowth.co.

This policy covers data we collect as a controller: visitors to this website, people who enquire or request a demo, users of our free tools, and our client pharmacies. Data submitted by patients through websites and apps we build for pharmacies is controlled by that pharmacy; we process it on the pharmacy’s instructions and it is described in our data protection statement.

What we collect and why

• Enquiries and demo requests — your name, email, phone number (if given), pharmacy name, postcode, the product you are interested in, your current website address (if given) and any message. Used to reply to you and to build and send the demo you asked for. Legal basis: taking steps at your request before entering a contract, and our legitimate interest in responding to enquiries.
• Free tools — the figures you enter into the calculators are processed in your browser and are not sent to us. If you choose to request a breakdown, checklist, templates pack or the email course, we collect your name and email to send it. The website check, Google profile check and competition checker send the website address, pharmacy name or postcode you enter to Google’s APIs to produce the result, and we record the request against your email if you provide one. Legal basis: consent, which you can withdraw by emailing us.
• Client accounts — pharmacy name and address, ODS code, GPhC details, contact names, branding, service information, portal login and billing history. Used to deliver and bill the service and to provide the client portal. Legal basis: performance of our contract with you, and legal obligations for financial records.
• Payments — taken by Stripe on Stripe’s hosted checkout and billing pages. We receive confirmation of payment and a Stripe customer reference; we never see or store card numbers.
• Service email — confirmations, invoices, renewal and support messages, and the free email course if you signed up for it, sent through Resend. Legal basis: contract, or consent for the course.
• Technical data — our hosting provider, Netlify, keeps standard server logs (IP address, browser type, pages requested) for security and operations. We do not run analytics or advertising tracking on this website.

Who we share it with

We use the following processors to run the service. Each one only receives the data needed for its role.

• Netlify — hosts this website and runs the serverless functions that handle forms, checkout and the free tools.
• Supabase — the database and authentication service that stores enquiries, demo requests, client accounts, portal logins and the form submissions made on pharmacy websites we build.
• Stripe — card payments and subscriptions for PharmGrowth plans, and for online shops on pharmacy websites we build. Card details are entered on Stripe’s hosted pages and are never stored by us.
• Resend — sends transactional email: confirmations, lead notifications to our team, the free email course, and service messages.
• Google — when you use the free website check, Google Business Profile check or competition checker, the website address, pharmacy name or postcode you enter is sent to Google’s PageSpeed Insights and Places APIs to produce the result. Google Fonts are loaded from Google’s servers on every page.

Each processor operates on cloud infrastructure it manages. Data may be stored or processed outside the UK by these providers under their standard contractual terms and UK GDPR transfer safeguards; we can confirm the current hosting region of each service on request. We do not sell, rent or share personal data with third parties for marketing purposes.

How long we keep it

• Enquiries, demo requests and free-tool lead data — kept for up to two years from our last contact with you, then deleted.
• Client account and billing records — kept for the life of the subscription and then for as long as UK tax and accounting law requires us to keep financial records (up to seven years after the relevant financial year).
• Websites, dashboards and the data submitted through them — kept for as long as the pharmacy’s subscription runs and the pharmacy instructs us to keep it. Thirty days after a subscription ends, the website and its stored submissions are deleted unless the pharmacy has requested an export or transfer within that period.
• Portal and dashboard login records — kept while the account is active and deleted with it.
• Email course subscriptions — kept until you unsubscribe or the course ends, then treated as enquiry data above.

These periods are the same wherever they appear on this site. Where a client pharmacy has its own retention policy for patient submissions, we act on its instructions.

Cookies and local storage

This website does not set advertising or analytics cookies. It uses one item of browser storage to remember that you have closed the “free demo” prompt, and Stripe sets its own cookies on its checkout pages. Clients who sign in to the portal have a login session stored in their browser. Full details are in our cookie policy.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent you can withdraw that consent at any time. Email support@pharmgrowth.co; we aim to acknowledge requests within five working days and to complete them within one month.

If you are a patient of a pharmacy that uses a PharmGrowth website or app, your rights are exercised through that pharmacy, which controls your data. We will help the pharmacy respond.

Complaints

If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Changes

We will update this policy when the services or the processors we use change, and the date at the top will change with it. Active clients are told by email of any material change.