PharmGrowth / SecuritySecurity

Built for data that matters.

Know exactly where your patients’ data sits, who can reach it, and what stays yours if you ever leave.

Read the detail →Ask us something

UK GDPR and the Data Protection Act 2018.

Powered by the platforms we build on

Netlify
Supabase
Cloudflare
Railway
Stripe
Ryft
Resend
Brevo
Anthropic
OpenAI
Google Search Console
Google Merchant Center
Smartlead
Instantly
Drug Comparison
Netlify
Supabase
Cloudflare
Railway
Stripe
Ryft
Resend
Brevo
Anthropic
OpenAI
Google Search Console
Google Merchant Center
Smartlead
Instantly
Drug Comparison

Payments settle into your own Stripe or Ryft account. We never hold your card data.

The short version

Your data stays yours.

PharmGrowth builds systems that handle health-related data, so the boring parts matter. Nothing here is an optional extra or a paid tier.

Full data protection statement →
UK GDPR and DPA 2018Signed DPA with every clientEncrypted in transit and at restRow-level data isolationPer-tab staff accessCard details held by Stripe onlyNo PMR or NHS App connection
How it works

The parts worth asking about.

If you are switching provider, these are the questions your ICO registration and your patients depend on.

Roles
Patient and customer dataYou control
PharmGrowthProcessor
DPA signed in portalRequired
Your data on exitYours
Access
SuperintendentAll tabs
Counter staffRepeats, bookings
LocumBookings only
Admin accountsAllow-listed
Isolation
Row-level securityEnforced
Per-client credentialsYes
Shared patient recordsNever
Cross-client accessNot possible
Payments
Card data stored by usNever
ProcessorStripe
PayoutsYour account
P medicine ordersHeld for approval
What we do not do

The honest list.

Plenty of pharmacy software claims integrations it does not have. Here is what PharmGrowth genuinely does not touch.

  • No connection to the NHS App, EPS or your PMR
  • No card details stored by us — Stripe holds those
  • No patient data used to train models
  • No sharing of one pharmacy’s data with another
More questions →
Per-tab access controls in the operations portal
Questions

The ones we get asked

01

Does PharmGrowth connect to the NHS App, EPS or my PMR?

No. Nomination and repeat requests land in your operations portal for your team to action in the usual way. There is no clinical system integration.

02

Who owns the data?

Your pharmacy does. You are the controller for patient and customer data collected through your site, you can export it, and you keep it if you leave.

03

Is there a data processing agreement?

Yes. Every client signs one in the client portal before using the operations portal, under Article 28 UK GDPR.

04

Do you store card details?

No. Card details are held by Stripe. We keep a Stripe customer reference and a payment confirmation, nothing more.

05

Do I still need to register with the ICO?

Yes. Your pharmacy is the controller for its own patient data and is responsible for its own registration, privacy notice and retention policy.

06

What happens if something goes wrong?

We tell you. Where we are the processor, we notify the pharmacy without undue delay so you can meet your own reporting duties as controller.

Nothing to pay yet

Switching and need the paperwork?

Tell us who you are with now and we will send the data processing agreement and the migration steps before you commit to anything.

Book a demo →See pricing