QuickScript Privacy Policy

Last Updated: July 4, 2025

This Privacy Policy describes how QuickScript ("we," "us," or "our") collects, uses, and protects your personal and health information when you use our online pharmacy consultation platform (the "Service"). Your privacy is of paramount importance to us, especially given the sensitive nature of the information you share.

Important Note: This Privacy Policy is provided for informational purposes only and is **not legal advice**. Before launching QuickScript publicly or onboarding real users, this policy **MUST be reviewed and approved by a qualified UK solicitor.**

---

1. Who We Are

QuickScript is an online platform that connects patients with independent prescribing pharmacists for virtual consultations and private prescription services for minor conditions.

2. Information We Collect

We collect various types of information to provide and improve our Service, including:

a. Personal Identification Information (PII)

• Name, email address, phone number, current UK address (including postcode).
• Date of birth, gender.
• Identity verification documents (if applicable).

b. Health Information (Special Category Data)

This is highly sensitive data and is processed with the utmost care and strict confidentiality.

• Symptoms and medical history (e.g., condition description, previous treatments).
• Allergies (e.g., medication, food).
• Current medications.
• Relevant medical conditions.
• Pregnancy or breastfeeding status.
• Consultation notes.
• Prescription details.

c. Payment Information

Handled via Stripe. We do not store your full card details.

d. Technical and Usage Data

• IP address, browser type, device identifiers.
• Website usage and interaction data.
• Essential cookies used for site functionality.

3. How We Collect Information

We collect your information when you:

• Fill out consultation forms (via Tally).
• Make payments (via Stripe).
• Communicate with us.
• Use our website.

4. Legal Basis for Processing

We process your information under the following lawful bases:

a. Contractual Necessity & Legitimate Interests

• To provide and improve our services.
• To connect you with a pharmacist and manage your consultation.

b. Explicit Consent & Substantial Public Interest (Health or Social Care)

• For pharmacists to deliver clinical care.
• To maintain consultation records.

c. Legal Obligation

• Compliance with GPhC standards.
• Compliance with UK data protection laws.

d. Legitimate Interests (balanced with your rights)

• Internal auditing and service improvements.
• Usage monitoring.

Where legitimate interests are relied upon, we have assessed that they do not override your data protection rights.

5. Sharing Your Information

We share your information with:

• Prescribing Pharmacists – to deliver clinical care.
• Stripe – for secure payment processing.
• SignatureRx (or similar) – to generate and issue prescriptions.
• Dispensing Pharmacies – via token shared by you.
• Third-party Providers (e.g., Tally, Notion, Netlify) – for service operation, under Data Processing Agreements.
• Authorities – if required by law or regulation.

Some providers may store data outside the UK. In such cases, we ensure appropriate safeguards (e.g., SCCs, IDTA) are in place.

6. Data Security

We use:

• Encryption in transit and at rest.
• Access controls.
• Secure third-party platforms.
• Regular security reviews and risk assessments.

However, no internet-based service is 100% secure. We strive to follow best practices.

7. Data Retention

We retain health records for a minimum of 2 years in line with GPhC standards, and other personal data only as long as necessary to meet legal or operational requirements.

8. Your Data Protection Rights

You have the right to:

• Access your data.
• Request correction.
• Request deletion (subject to legal limits).
• Restrict processing.
• Request data portability.
• Object to processing.
• Withdraw consent (where applicable).

To exercise any of these rights, contact us at: contact@quickscript.uk.

You may also contact the UK Information Commissioner’s Office (ICO).

9. Third-Party Links

We are not responsible for the privacy policies or content of third-party services linked on our platform.

10. Changes to This Policy

We may update this policy. Significant changes will be notified via the website.

11. Contact

Email: contact@quickscript.uk